Skip to content

signer api: clarify keyids in signatures #670

Open
@lukpueh

Description

keyids are an under-documented yet important concept in securesystemslib, as they allow to map a verification key to a signature. But from the current state of docs it is unclear how signatures get their keyids.

In #605 we agreed to mandate public_key: Key attribute for any Signer implementation. We should document that that public key's keyid is assigned to a signature created with Signer.sign.

Metadata

Assignees

No one assigned

    Labels

    contribfestIssues for KubeCon EU contribfestdocs

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions