oz0 index certify
Usage and flags for oz0 index certify.
For: Operators and developers looking up a command.
Sign a certificate with the root key (--root, a key file) saying that the online key (a public key in base64, or its key file) may sign the index named --index until --valid has passed. Run it where the root key is, offline; the certificate goes with the online key to whatever signs the index. A new certificate replaces an expired or lost online key without a new root.
Usage
oz0 index certify <online-key> [flags]
Flags
| Flag | Type | Default | Description |
|---|---|---|---|
--index | string | the name of the index the key may sign, as its index.json names itself | |
--out (-o) | string | write the certificate here instead of to standard output | |
--root | string | the root key's file | |
--valid | string | 90d | how long the certificate is valid, such as 90d or 2160h |
Inherited flags
| Flag | Type | Default | Description |
|---|---|---|---|
--context | string | $OZ0_CONTEXT or <config dir>/orchestrator-zero/context.json | CLI context file written by server init |
--log-level | string | info | log level: debug, info, warn or error |
See all oz0 commands and the global flags.