ostree_sign_get_all ()

GPtrArray *
ostree_sign_get_all (void);

Return an array with newly allocated instances of all available signing engines; they will not be initialized.

Since: 2020.2

ostree_sign_commit ()

gboolean
ostree_sign_commit (OstreeSign *self,
                    OstreeRepo *repo,
                    const gchar *commit_checksum,
                    GCancellable *cancellable,
                    GError **error);

Add a signature to a commit.

Depending of the signing engine used you will need to load the secret key with ostree_sign_set_sk.

Since: 2020.2

ostree_sign_commit_verify ()

gboolean
ostree_sign_commit_verify (OstreeSign *self,
                           OstreeRepo *repo,
                           const gchar *commit_checksum,
                           char **out_success_message,
                           GCancellable *cancellable,
                           GError **error);

Verify if commit is signed with known key.

Depending of the signing engine used you will need to load the public key(s) for verification with ostree_sign_set_pk, ostree_sign_add_pk and/or ostree_sign_load_pk.

Since: 2020.2

ostree_sign_data ()

gboolean
ostree_sign_data (OstreeSign *self,
                  GBytes *data,
                  GBytes **signature,
                  GCancellable *cancellable,
                  GError **error);

Sign the given data with pre-loaded secret key.

Depending of the signing engine used you will need to load the secret key with ostree_sign_set_sk.

Since: 2020.2

ostree_sign_data_verify ()

gboolean
ostree_sign_data_verify (OstreeSign *self,
                         GBytes *data,
                         GVariant *signatures,
                         char **out_success_message,
                         GError **error);

Verify given data against signatures with pre-loaded public keys.

Depending of the signing engine used you will need to load the public key(s) with ostree_sign_set_pk, ostree_sign_add_pk or ostree_sign_load_pk.

Since: 2020.2

ostree_sign_get_by_name ()

OstreeSign *
ostree_sign_get_by_name (const gchar *name,
                         GError **error);

Create a new instance of a signing engine.

Since: 2020.2

ostree_sign_get_name ()

const gchar *
ostree_sign_get_name (OstreeSign *self);

Return the pointer to the name of currently used/selected signing engine.

Since: 2020.2

ostree_sign_add_pk ()

gboolean
ostree_sign_add_pk (OstreeSign *self,
                    GVariant *public_key,
                    GError **error);

Add the public key for verification. Could be called multiple times for adding all needed keys to be used for verification.

The public_key argument depends of the particular engine implementation.

Since: 2020.2

ostree_sign_clear_keys ()

gboolean
ostree_sign_clear_keys (OstreeSign *self,
                        GError **error);

Clear all previously preloaded secret and public keys.

Since: 2020.2

ostree_sign_load_pk ()

gboolean
ostree_sign_load_pk (OstreeSign *self,
                     GVariant *options,
                     GError **error);

Load public keys for verification from anywhere. It is expected that all keys would be added to already pre-loaded keys.

The options argument depends of the particular engine implementation.

For example, ed25515 engine could use following string-formatted options:

Since: 2020.2

ostree_sign_metadata_format ()

const gchar *
ostree_sign_metadata_format (OstreeSign *self);

Return the pointer to the string with format used in (detached) metadata for current signing engine.

Since: 2020.2

ostree_sign_metadata_key ()

const gchar *
ostree_sign_metadata_key (OstreeSign *self);

Return the pointer to the name of the key used in (detached) metadata for current signing engine.

Since: 2020.2

ostree_sign_set_pk ()

gboolean
ostree_sign_set_pk (OstreeSign *self,
                    GVariant *public_key,
                    GError **error);

Set the public key for verification. It is expected what all previously pre-loaded public keys will be dropped.

The public_key argument depends of the particular engine implementation.

Since: 2020.2

ostree_sign_set_sk ()

gboolean
ostree_sign_set_sk (OstreeSign *self,
                    GVariant *secret_key,
                    GError **error);

Set the secret key to be used for signing data, commits and summary.

The secret_key argument depends of the particular engine implementation.

Since: 2020.2

ostree_sign_summary ()

gboolean
ostree_sign_summary (OstreeSign *self,
                     OstreeRepo *repo,
                     GVariant *keys,
                     GCancellable *cancellable,
                     GError **error);

Add a signature to a summary file. Based on ostree_repo_add_gpg_signature_summary implementation.

Since: 2020.2

OstreeSign

typedef struct _OstreeSign OstreeSign;