sdkms-git-sign-tool 0.1.1

Fortanix SDKMS Git sign tool

SDKMS Git Signing Tool

This is a utility for signing/verifying git commits with keys stored in Fortanix Self-Defending Key Management System. It includes commands for generating a PGP compatible key in SDKMS.

Setup

1. In SDKMS create an App and key (RSA, EC). Take notes of:

   • App API Key
   • Key UUID

2. In you git repository, the following configuration is needed:

git config --local gpg.program </path/to/sdkms-git-sign-tool>
git config --local user.signingkey <Key UUID>
git config --local sdkms.endpoint <SDKMS endpoint>
git config --local sdkms.apikey <SDKMS API Key>

Build Tool

$ python3 setup.py build $ sudo python3 setup.sh install OR $ sudo pip3 install .