CmdID

CmdID / Commands

in-toto-sign

Sign in-toto link or layout metadata or verify their signatures. tldr-pages

On several platforms

Opens CmdID with your command. It is read in your browser and sent nowhere.

Several platforms

from tldr-pages, CC BY 4.0

Sign 'unsigned.layout' with two keys and write it to 'root.layout'

in-toto-sign --file unsigned.layout --keep priv_key1 priv_key2 --output root.layoutIdentify

Replace signature in link file and write to default filename

in-toto-sign --file package.2f89b927.link --keep priv_keyIdentify

Verify a layout signed with 3 keys

in-toto-sign --file root.layout --keep pub_key0 pub_key1 pub_key2 --verifyIdentify

Sign a layout with the default GPG key in default GPG keyring

in-toto-sign --file root.layout --gpgIdentify

Verify a layout with a GPG key identified by keyid '...439F3C2'

in-toto-sign --file root.layout --verify --gpg ...439F3C2Identify