18 lines
644 B
ReStructuredText
18 lines
644 B
ReStructuredText
Signed configuration
|
|
====================
|
|
|
|
A config file is unusable unless it is an Ed25519 wrapper::
|
|
|
|
{ "payload": { ... }, "sig": { "alg": "ed25519", "key_id": "...", "signature": "hex" } }
|
|
|
|
Select algorithms inside **payload** (the signed object):
|
|
|
|
* ``crypto.mode``: ``npe`` | ``lab-xor`` | ``plain-lab``
|
|
* ``routing.mode``: ``passthrough``
|
|
* ``admin.history_cube``: cube id for admin-history
|
|
* ``crypto.system_key_id``: system public key id
|
|
* ``logging.mode``: ``summary``
|
|
|
|
After an admin console change: sign again, then append previous file, new
|
|
file, and unified diff to the admin-history DataCube
|
|
(``verae.admin.history.append``).
|