in-toto-sign

all

Options (4)

-f, --fileboolean

Sign 'unsigned.layout' with two keys and write it to 'root.layout'

Example:

in-toto-sign {{[-f|--file]}} {{unsigned.layout}} {{[-k|--keep]}} {{priv_key1}} {{priv_key2}} {{[-o|--output]}} {{root.layout}}

-k, --keepboolean

Sign 'unsigned.layout' with two keys and write it to 'root.layout'

Example:

in-toto-sign {{[-f|--file]}} {{unsigned.layout}} {{[-k|--keep]}} {{priv_key1}} {{priv_key2}} {{[-o|--output]}} {{root.layout}}

-o, --outputboolean

Sign 'unsigned.layout' with two keys and write it to 'root.layout'

Example:

in-toto-sign {{[-f|--file]}} {{unsigned.layout}} {{[-k|--keep]}} {{priv_key1}} {{priv_key2}} {{[-o|--output]}} {{root.layout}}

-g, --gpgboolean

Sign a layout with the default GPG key in default GPG keyring

Example: in-toto-sign {{[-f|--file]}} {{root.layout}} {{[-g|--gpg]}}

Sign 'unsigned.layout' with two keys and write it to 'root.layout'

in-toto-sign [-f|--file] unsigned.layout [-k|--keep] priv_key1 priv_key2 [-o|--output] root.layout

Replace signature in link file and write to default filename

in-toto-sign [-f|--file] package.2f89b927.link [-k|--keep] priv_key

Verify a layout signed with 3 keys

in-toto-sign [-f|--file] root.layout [-k|--keep] pub_key0 pub_key1 pub_key2 --verify

Sign a layout with the default GPG key in default GPG keyring

in-toto-sign [-f|--file] root.layout [-g|--gpg]

Verify a layout with a GPG key identified by keyid '...439F3C2'

in-toto-sign [-f|--file] root.layout --verify [-g|--gpg] ...439F3C2