Signing swupdate packages

Provides a signer for the sw-description used in swupdate packages.

Prerequisites

For signing sw-description files for swupdate packages, openssl is required. RSA and CMS signing methods are supported.

For SWUpdate, the signing key is expected to be at

for RSA:

${DIGSIGSERVER_KEYFILE_URI}/${distro}/swupdate/rsa-private.key

For CMS:

${DIGSIGSERVER_KEYFILE_URI}/${distro}/swupdate/cms.cert
${DIGSIGSERVER_KEYFILE_URI}/${distro}/swupdate/cms-private.key

where ${distro} is the value of the distro= parameter included in the signing request.

Request type: POST

Endpoint: /sign/swupdate

Expected parameters:

distro=<distro> - a name for the "distro", used to locate the signing keys
sw-description=<body> - the contents of the sw-description file to have signatures included

Response: a sw-description file with signatures inserted