hofill

hofill / rocei_cli

Public

CLI for signing documents with ROeID.

15
1
89% credibility
Found May 25, 2026 at 15 stars -- GitGems finds repos before they trend. Get early access to the next one.
Sign Up Free
AI Analysis
C
AI Summary

Rocei is a free, open-source tool that lets Romanian citizens use their official electronic ID card to digitally sign PDF documents and any other files. Instead of requiring the government's proprietary software, it talks directly to the smart card chip using standard protocols. When you insert your eID card and enter your PIN, the tool can read your identity information, place a visible signature stamp on PDFs, or create compact signed tokens for any file type. The private signing key never leaves the card chip, ensuring only you can use it. This is a clean-room implementation created for interoperability under EU law, allowing citizens to sign documents without being locked into official software.

How It Works

1
💡 Discovering a way to sign with your Romanian eID

You hear about a tool that lets you use your government-issued ID card to sign documents digitally, without installing any special software from the government.

2
📦 Installing the signing tools

You install the tools on your computer using simple instructions. The package includes everything you need to talk to your ID card.

3
💳 Inserting your ID card into the reader

You plug your Romanian eID card into your computer's card reader. The tool automatically recognizes your card and knows it's the right one.

4
🔐 Entering your PIN to prove it's really you

You type in your 6-digit signing PIN on your keyboard. Your private key never leaves the card chip, so only you can use it.

5
Choosing what to sign
📑
Sign a PDF document

You pick a PDF file, choose where the signature stamp goes by drawing a box in your browser, and the tool creates a signed PDF with your digital signature embedded.

📝
Sign any other file

You pick any file and the tool creates a compact signed token that proves the file hasn't been changed and that you signed it.

✅ Your document is now legally signed

You have a signed document that proves you personally signed it with your official ID card. The signature is cryptographically verifiable and legally valid.

Sign up to see the full architecture

4 more

Sign Up Free

Star Growth

See how this repo grew from 15 to 15 stars Sign Up Free
Repurpose This Repo

Repurpose is a Pro feature

Generate ready-to-use prompts for X threads, LinkedIn posts, blog posts, YouTube scripts, and more -- with full repo context baked in.

Unlock Repurpose
AI-Generated Review

What is rocei_cli?

This is a command-line tool that lets you sign documents using Romania's electronic ID card, without needing the official (and Windows-only) IDPlugManager software. Built in C with a Python component for PDF handling, it communicates directly with the smart card over the PC/SC protocol. You get a CLI that can sign PDFs with visible signature stamps, sign arbitrary files into compact JWT-like tokens, read identity data from the card, and dump your signing certificate. The project also ships a PKCS#11 module, meaning you can drop it into any PKCS#11-aware application like pyHanko, OpenSSL wrappers, or document signing workflows.

Why is it gaining traction?

The big draw is independence from proprietary software. Romanian eID holders have had no good open-source path to use their card for digital signatures on Linux or macOS. This project changes that by reverse-engineering the card's protocol clean-room style, invoking EU interoperability rights under copyright law. The implementation covers both the PKI applet (Advanced Signature) and the QSCD applet, handles the macOS CryptoTokenKit card-sharing conflicts automatically, and even includes a browser-based visual placement tool for PDF signature stamps.

Who should use this?

Romanian developers or organizations needing to integrate eID signing into their workflows on non-Windows platforms. DevOps teams building signing pipelines on Linux. Anyone who wants a PKCS#11 interface to their Romanian eID without IDPlugManager. It is niche by design: if you do not have a Romanian eID card, this is irrelevant to you.

Verdict

This is a niche, specialized tool with 15 stars and a credibility score of 0.9% -- very early-stage, community-developed software with limited testing on Windows and Linux. The clean-room approach and thorough documentation are encouraging, but you should validate this against real hardware before trusting it in production signing workflows. For Linux and macOS users with Romanian eID, this is currently the only viable open-source option.

Sign up to read the full AI review Sign Up Free

Similar repos coming soon.