Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update README with recent changes #162

Merged
merged 1 commit into from
Jan 24, 2024
Merged

Update README with recent changes #162

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 6 additions & 6 deletions verifier-cli/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,28 +17,28 @@ task. This interface is how we get attestations and supporting data.

```shell
$ dd if=/dev/urandom of=nonce.bin bs=32 count=1
$ cargo run --package verifier -- attest nonce.bin > attestation.bin
$ HUMILITY_ARCHIVE=/path/to/archive cargo run --package verifier-cli -- attest nonce.bin > attestation.bin
```

### Get the cert chain

Trust always boils down to PKI.

```shell
$ cargo run --package verifier -- cert-chain > cert-chain.pem
$ HUMILITY_ARCHIVE=/path/to/archive cargo run --package verifier-cli -- cert-chain > cert-chain.pem
```

### Get the Measurement Log

```shell
$ cargo run --package verifier -- log > log.bin
$ HUMILITY_ARCHIVE=/path/to/archive cargo run --package verifier-cli -- log > log.bin
```

### Verify the Attestation

```shell
$ cargo run --package verifier -- cert --index 0 > alias.pem
$ cargo run --package verifier -- verify-attestation --alias_cert alias.pem --log log.bin --nonce nonce.bin attestation.bin
$ HUMILITY_ARCHIVE=/path/to/archive cargo run --package verifier-cli -- cert 0 > alias.pem
$ HUMILITY_ARCHIVE=/path/to/archive cargo run --package verifier-cli -- verify-attestation --alias-cert alias.pem --log log.bin --nonce nonce.bin attestation.bin
```

### Verify the cert chain
Expand All @@ -48,7 +48,7 @@ $ cargo run --package verifier -- verify-attestation --alias_cert alias.pem --lo
If your RoT has been manufactured and you've got a root cert:

```shell
$ cargo run --package verifier -- verify-cert-chain --ca-cert root.cert.pem cert-chain.pem
$ cargo run --package verifier-cli -- verify-cert-chain --ca-cert root.cert.pem cert-chain.pem
```

#### dice-self
Expand Down
Loading