Examples of dealing with keys on the command line?

[dennisvang]

Are there any examples of dealing with keys in different scenarios?

[dennisvang]

Note that modifying keys implies updating the root.json file, so you will need the root key(s) to be available.

In these examples we assume at least one of the root keys is stored on an external drive in directory E:\my-root-keys, and other keys are stored locally in .\my-keys.

Also see tufup keys --help.

Here are some examples:

• Adding an existing key-pair, with private key called my-key, to the targets role using the command line.

  tufup keys my-key add targets .\my-keys E:\my-root-keys
  

• Sign the targets role without changing the signed content, to reach the required number of signatures, i.e. threshold:

  tufup sign targets .\my-keys
  

• Sign the snapshot and (re)set expiration 10 days from now (also signs timestamp with the default expiration):

  tufup sign snapshot .\my-keys -e 10