notation
notation copied to clipboard
Support signing certificate and certificate chain in Configuration file
- Along with signingKey(private key) we will need signing certificate and certificate chain as signing certificate and certchain will be embedded in signature envelope.
- Also, how about using
defaultname for default identity? Although this works better with INI format.
"signing-identites": [
{
"name": "default",
"signing-certificate": "~/./notary/keys/wabbit-networks.crt",
"signing-certificate-chain": ""~/./notary/keys/wabbit-networks-chain.crt",
"private-key": "~/./notary/keys/wabbit-networks.key"
},
{
"name": "import-acme-rockets",
"signing-certificate": "~/./notary/keys/import-acme-rockets.crt",
"signing-certificate-chain": ""~/./notary/keys/import-acme-rockets-chain.crt",
"private-key": "~/./notary/keys/import-acme-rockets.key"
}
]
Originally posted by @priteshbandi in https://github.com/notaryproject/notation/pull/76#discussion_r700565207
@priteshbandi - what's the status of this being implemented?
This capability is to allow signing with local keys and certificate (certificate chains).
Tracking it in https://github.com/notaryproject/roadmap/issues/31