remote-add: Add --sign-verify=KEYTYPE=[inline|file]:PUBKEYREF
authorColin Walters <walters@verbum.org>
Thu, 7 May 2020 19:43:10 +0000 (19:43 +0000)
committerColin Walters <walters@verbum.org>
Sat, 9 May 2020 20:07:44 +0000 (20:07 +0000)
commit588f42e8c64183dfa1fbaa08cc92c46b691b23c4
tree170791de8174771b7a30d516486cb3cbd9858f3c
parent4c01c0385f323cf8dc6070829e825443864c8ad0
remote-add: Add --sign-verify=KEYTYPE=[inline|file]:PUBKEYREF

Per https://github.com/ostreedev/ostree/issues/2080#issuecomment-623614483

A huge benefit of ed25519 (and ECC in general) is that keys are very
short - short enough that it's completely reasonable to inline
them into a command line argument.

And I think that's a good model; it makes the keys very visible.

For example, someone could easily copy-paste a commandline
argument from a webpage (secured via TLS) that says to run
`ostree remote add --sign-verify=ed25519=inline:KEY`.
src/ostree/ot-remote-builtin-add.c
tests/test-signed-pull.sh