How to use x509 client certificates and private keys to sign images?

[flixman]

hi everybody!

I have recently started experimenting with image signatures, and... I am pretty much lost: I am trying to use notation to sign a manifest digest with a x509 client certificate and its key, but I do not see how to make that work: I have seen in the docs how to generate a self-signed certificate, but there does not seem to be any example on how to use a certificate and key file I already have available?

Thank you very much!

[flixman]

Seems the only solution is to create a signingkeys.json file in notation config folder with the following content:

{
  "default": "<key_name>",
  "keys": [
    { 
      "certPath": "<path_to_cert>",
      "keyPath": "<path_to_key>",
      "name": "<key_name>"
    }
  ]
}

and then sign as usual.