Install Trustux

Trustux runs entirely on your machine. There is a web UI for uploading a signed document and reading the verdict, and a command-line verifier for scripts and pipelines. Either way, the document never leaves your computer.

Requirements

Node.js 20+

Trustux is a Node application with no native build step. The signature crypto is pure JS (asn1js / pkijs).

A trust store

The AC Raíz República Argentina root is preloaded. You can add or replace roots per jurisdiction.

A signed document

A signed PDF (PAdES), an XML invoice (XAdES) or a CMS .p7m / .p7s (CAdES).

Run it

Web UI

git clone https://github.com/diegoparras/trustux.git && cd trustux
npm install
npm start          # → http://localhost:8095

Open the page, drop in a signed document, and read the traffic-light verdict with its exportable report.

Command line

npm install
node firma-core/cli.js path/to/signed.pdf

The CLI prints the verdict for integrity, identity, validity and the standard detected — handy for scripts and CI.

First run

1. Open the UI at http://localhost:8095, or call the CLI on a file.
2. Drop in a signed document. Trustux detects the standard (PAdES / XAdES / CAdES) automatically.
3. Read the verdict: a green / amber / red light for integrity, identity (with the signer’s CUIT/CUIL and the issuing CA) and validity at signing time.
4. Export the report to attach to your file.

Single sign-on

Trustux supports optional SSO with Lockatus, the suite’s identity hub. Enable federation so a team signs in once with two-factor and per-app roles, instead of an app-local login.

Trust store

The certificate chain is validated up to a trusted root. Trustux ships with the AC Raíz República Argentina preloaded, and the trust store is editable per jurisdiction — add the roots you need or pin your own.

Test fixtures

The repository includes example fixtures with a truth table: PDFs (PAdES) that are intact, altered, double-signed, time-stamped, SHA-1 and revoked, plus signed and altered XML invoices (XAdES). They let you confirm Trustux flags each case correctly before trusting it with real documents.