Linux XML Digital Signature Tool

XML Dig Sig on Linux

We need to write a Java, Python or NodeJS command-line tool which would sign our XML with a PEM key.

The desired output should look like this (so called enveloped signature)

<?xml version="1.0" encoding="utf-8"?>
<Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
<SignedInfo>
<CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" />
<SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" />
<Reference URI="#message">
<Transforms>
<Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" />
</Transforms>
<DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" />
<DigestValue>l5vgcixeuLOA4iTpiY4wgEjkrigfYEdW35T2POYQS7Y=</DigestValue>
</Reference>
</SignedInfo>
<SignatureValue>UBKR...5wA==</SignatureValue>
<KeyInfo>
<X509Data>
<X509Certificate>MII...th6T</X509Certificate>
</X509Data>
</KeyInfo>
<Object Id="message">
<OurData xmlns="">...</OurData>
</Object>
</Signature>