1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41
|
package main
import (
"encoding/json"
"fmt"
"os"
"github.com/flynn/go-docopt"
tuf "github.com/theupdateframework/go-tuf"
)
func init() {
register("sign-payload", cmdSignPayload, `
usage: tuf sign-payload --role=<role> <path>
Sign a file (outside of the TUF repo) using keys for the given role (from the TUF repo).
Typically, path will be the output of "tuf payload".
`)
}
func cmdSignPayload(args *docopt.Args, repo *tuf.Repo) error {
payload, err := os.ReadFile(args.String["<path>"])
if err != nil {
return err
}
signatures, err := repo.SignRaw(args.String["--role"], payload)
if err != nil {
return err
}
fmt.Fprintln(os.Stderr, "tuf: signed")
bytes, err := json.Marshal(signatures)
if err != nil {
return err
}
fmt.Fprint(os.Stdout, string(bytes))
return nil
}
|