sigsum-verify(1)

sigsum-verify1

Enforce public logging

Usage

sigsum-verify [-v] [--help] [-k key-file] [-p policy-file] [--raw-hash] proof-file < input

Overview

Verify that a message's signed checksum is logged for a given trust policy. The message to be verified is read on stdin.

Options

--help

Show usage message and exit

-k, --key=key-file

Submitter public keys, one per line in OpenSSH format (required)

-p, --policy=policy-file

Trust policy defining logs, witnesses, and a quorum rule (required)

--raw-hash

Input has already been hashed and formatted as 32 octets or a hex string

-v, --version

Show software version and exit

Return codes

A non-zero return code is used to indicate failure.

Contact

Send an email to the sigsum-general mailing list at [email protected]. You can also reach out in room #sigsum at OFTC.net and matrix.org.

Reporting bugs

Use the issue tracker located at https://git.glasklar.is/sigsum/core/sigsum-go/-/issues. To file issues without a GitLab account, send an email to [email protected] and wait for a maintainer to make the issue public.

From sigsum-go 0.11.2-1+b3 in Debian 13 (Trixie). Parsed by carta from the page's man source.