sigsum-key-to-vkey(1)

sigsum-key-to-vkey1

Convert public key in openssh format to vkey format

Usage

sigsum-key to-vkey [--help] [-k key-file] [-n key-name] [-o output-file] [-t type]

Overview

Read a public key in OpenSSH format and output it in vkey format. The public key is read on stdin and output is written on stdout. Override the default behavior using the -k and -o options.

It is assumed that a vkey for a sigsum log server is requested unless the -n option is provided. I.e., the vkey name defaults to the log's origin line 'sigsum.org/v1/tree/<key hash>' and the ed25519 type (-t).

Use the -n and -t options to encode vkeys for witness cosigning. The best practise is to use a schemaless URL for the name, e.g., foo.example.org and example.org/bar would be two good examples.

Options

--help

Show usage message and exit

-k, --key=key-file

Public key in OpenSSH format

-n, --name=key-name

Name of the public key

-o, --output=output-file

Public key in vkey format

-t, --type=type

Available types: ed25519, cosignature/v1 [ed25519]

Return codes

A non-zero return code is used to indicate failure.

Contact

Send an email to the sigsum-general mailing list at [email protected]. You can also reach out in room #sigsum at OFTC.net and matrix.org.

Reporting bugs

Use the issue tracker located at https://git.glasklar.is/sigsum/core/sigsum-go/-/issues. To file issues without a GitLab account, send an email to [email protected] and wait for a maintainer to make the issue public.

From sigsum-go 0.11.2-1+b3 in Debian 13 (Trixie). Parsed by carta from the page's man source.