Skip to content

Commit

Permalink
Revert "document --ca-roots and --ca-intermediates flags for 'cos…
Browse files Browse the repository at this point in the history
…ign ver…"

This reverts commit 64b258f.
  • Loading branch information
haydentherapper authored Mar 21, 2024
1 parent b84a942 commit bfe5060
Showing 1 changed file with 3 additions and 13 deletions.
16 changes: 3 additions & 13 deletions content/en/verifying/verify.md
Original file line number Diff line number Diff line change
Expand Up @@ -80,22 +80,12 @@ $ cosign verify --certificate cosign.crt --certificate-chain chain.crt user/demo
```

## Verify image with user-provided trusted chain

Check failure on line 82 in content/en/verifying/verify.md

View workflow job for this annotation

GitHub Actions / markdownlint

Headings should be surrounded by blank lines

content/en/verifying/verify.md:82 MD022/blanks-around-headings/blanks-around-headers Headings should be surrounded by blank lines [Expected: 1; Actual: 0; Below] [Context: "## Verify image with user-provided trusted chain"] https://github.com/DavidAnson/markdownlint/blob/v0.29.0/doc/md022.md
Verify image with the provided certificate chain(s) and identity parameters (intended for
"bring your own PKI" use cases).
* with a single certificate chain file - which may contain one or several intermediate
certificates followed by the root CA certificate - use the `--certificate-chain` parameter:
Verify image with the provided certificate chain and identity parameters (intended for
a "bring your own PKI" use case):

```shell
$ cosign verify --certificate-chain chain.crt --certificate-oidc-issuer https://issuer.example.com --certificate-identity foo@example.com user/demo
```
* with a certificate bundle PEM file containing several CA roots and (optionally)
intermediate certificates, use the `--ca-roots` parameter together with `--ca-intermediates`:
```shell
$ cosign verify --ca-roots ca-roots.pem --ca-intermediates ca-intermediates \
--certificate-oidc-issuer https://issuer.example.com \
--certificate-identity foo@example.com user/demo
```

The `--ca-roots` and `--ca-intermediates` flags are mutually exclusive with `--certificate-chain`.

## Verify an image on the transparency log

Expand Down

0 comments on commit bfe5060

Please sign in to comment.