summaryrefslogtreecommitdiffstats
path: root/cmd/tuf/sign_payload.go
blob: 1905fd2e6faabccf7aa1a94e2265bd2325a8619f (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
package main

import (
	"encoding/json"
	"fmt"
	"os"

	"github.com/flynn/go-docopt"
	tuf "github.com/theupdateframework/go-tuf"
)

func init() {
	register("sign-payload", cmdSignPayload, `
usage: tuf sign-payload --role=<role> <path>

Sign a file (outside of the TUF repo) using keys for the given role (from the TUF repo).

Typically, path will be the output of "tuf payload".
`)
}

func cmdSignPayload(args *docopt.Args, repo *tuf.Repo) error {
	payload, err := os.ReadFile(args.String["<path>"])
	if err != nil {
		return err
	}

	signatures, err := repo.SignRaw(args.String["--role"], payload)
	if err != nil {
		return err
	}
	fmt.Fprintln(os.Stderr, "tuf: signed")

	bytes, err := json.Marshal(signatures)
	if err != nil {
		return err
	}
	fmt.Fprint(os.Stdout, string(bytes))

	return nil
}