Confirmed users
2,456
edits
User:Catlee/AutomatedSigning: Difference between revisions
Jump to navigation
Jump to search
no edit summary
(Created page with "Run a web app on keymaster that as a basic API: POST /signing filedata=... sha512=... filename=... hmac=... returns a signing id HEAD /signing/<id> indicates...") |
No edit summary |
||
| Line 1: | Line 1: | ||
Run a web app on keymaster that | Run a web app on keymaster that has a basic API: | ||
POST /sign | |||
filedata=... | |||
sha512=... | |||
filename=... | |||
hmac=... | |||
returns a signing id | returns a signing id | ||
HEAD / | HEAD /sign/<id> | ||
indicates if signing job is done | |||
GET / | GET /sign/<id> | ||
returns signed file(s), file hashes, hmac, ... | |||
hmac could be some token generated from a combination of date and per-release secret. The secret could be given to both the keymaster and builds to generate checksums so the keymaster knows that requests to sign files are valid for this release in a certain time period. | hmac could be some token generated from a combination of date and per-release secret. The secret could be given to both the keymaster and builds to generate checksums so the keymaster knows that requests to sign files are valid for this release in a certain time period. | ||