mirror of
https://github.com/ivuorinen/cheatsheet-tldr.git
synced 2026-02-16 20:49:15 +00:00
30 lines
1.0 KiB
Plaintext
30 lines
1.0 KiB
Plaintext
---
|
|
syntax: markdown
|
|
tags: [tldr, common]
|
|
source: https://github.com/tldr-pages/tldr.git
|
|
---
|
|
# in-toto-sign
|
|
|
|
> Sign in-toto link or layout metadata or verify their signatures.
|
|
> More information: <https://in-toto.readthedocs.io/en/latest/command-line-tools/in-toto-sign.html>.
|
|
|
|
- Sign 'unsigned.layout' with two keys and write it to 'root.layout':
|
|
|
|
`in-toto-sign {{[-f|--file]}} {{unsigned.layout}} {{[-k|--keep]}} {{priv_key1}} {{priv_key2}} {{[-o|--output]}} {{root.layout}}`
|
|
|
|
- Replace signature in link file and write to default filename:
|
|
|
|
`in-toto-sign {{[-f|--file]}} {{package.2f89b927.link}} {{[-k|--keep]}} {{priv_key}}`
|
|
|
|
- Verify a layout signed with 3 keys:
|
|
|
|
`in-toto-sign {{[-f|--file]}} {{root.layout}} {{[-k|--keep]}} {{pub_key0}} {{pub_key1}} {{pub_key2}} --verify`
|
|
|
|
- Sign a layout with the default GPG key in default GPG keyring:
|
|
|
|
`in-toto-sign {{[-f|--file]}} {{root.layout}} {{[-g|--gpg]}}`
|
|
|
|
- Verify a layout with a GPG key identified by keyid '...439F3C2':
|
|
|
|
`in-toto-sign {{[-f|--file]}} {{root.layout}} --verify {{[-g|--gpg]}} {{...439F3C2}}`
|