gongor/README.md

24 lines
799 B
Markdown
Raw Normal View History

2023-11-02 18:08:05 -07:00
# Gongor
2023-12-06 22:30:43 -08:00
2023-11-02 18:08:05 -07:00
Tool for producing identities
Anagram of "Gorgon".
2023-11-03 15:33:36 -07:00
## Actions
* `cargo run -- create eli.key eli.publickey`: makes a new key.
* `cargo run -- sign eli.key message.txt [message.sig]`: signs a message, optionally writes the signature to a file.
* `cargo run -- validate eli.publickey message.txt message.signed`: validates a signature.
2023-11-06 10:19:42 -08:00
## TODO
* Fix up the aegis generation script to ensure that I either have, or don't need, the extensions from Step CA:
* X509v3 Key Usage: critical
* Certificate Sign, CRL Sign
* X509v3 Basic Constraints: critical
* CA:TRUE, pathlen:1
2023-11-03 15:33:36 -07:00
## aegis-generate
This generates an initial ID, known as an 'aegis'. It uses [step-ca](https://smallstep.com/docs/step-cli/the-step-command/) defaults which puts the data files in `$HOME/.step`.