sigsum-token-verify1
Verify rate-limit token
Usage
sigsum-token verify
[-q]
[-d
domain-name]
[--help]
[-k
key-file]
[-l
key-file]
<token
Overview
Verify a submit token. The input on stdin is either a raw hex token or an HTTP header. For a raw token, one of --key or --domain is required. For an HTTP header, --key and --domain are optional, but validation fails if they are inconsistent with what's looked up from the HTTP header. The -q (quiet) option suppresses output on validation errors, with result only reflected in the exit code.
Options
-d, --domain=domain-name
-
Domain name where the rate-limit key is available as a TXT record; without any "_sigsum_v1." prefix
-
--help -
Display help
-k, --key=key-file
-
Rate-limit public-key in OpenSSH format
-l, --log-key=key-file
-
Log public-key in OpenSSH format (required)
-
-q, --quiet -
Quiet mode
Return codes
A non-zero return code is used to indicate failure.
Contact
Send an email to the sigsum-general mailing list at [email protected]. You can also reach out in room #sigsum at OFTC.net and matrix.org.