cmd_audit

Documentation

Index

• Variables
• func VerifyAuditFile(path string, config *siglog.LogStreamConfig, key crypto.PublicKey, ...) (err error)

Variables

var (
	Cmd = &cobra.Command{
		Use:   "audit [-k key] [-q] [-s serial]... [files]",
		Short: "Verify audit logs",
		Long: `Read, verify, and print audit logs. If no files are given on the command line
then the audit log from the CA is verified. Otherwise each file on the command
line is checked in turn and each is also checked that it is a continuation
from the file before. To avoid errors, list the files in the order they were
produces, oldest first.

The key used to verify the audit log, by default, is loaded from the
certificate of the CA, however this can be overridden with the --key switch.
A certificate, public key, or private key can be supplied with this option
and the public key of the given object will be used. Audit logs are required
to contain the CA certificate as the first PEM block in the log, so if a log
only needs to be check for self consistency (and not verified against a key
held in another file) then the audit log itself can also be passed as an 
argument to --key.

If --key is specified and at least one file is specified on the command line
then no attempt will be made to load the CA.
`,
		RunE: auditCmdFunc,
	}
)

Functions

func VerifyAuditFile

func VerifyAuditFile(path string, config *siglog.LogStreamConfig, key crypto.PublicKey, auditor siglog.MessageChecker) (err error)