diff --git a/pages/guide/v5/04-analytics.md b/pages/guide/v5/04-analytics.md index 2bda57b1..efd99303 100644 --- a/pages/guide/v5/04-analytics.md +++ b/pages/guide/v5/04-analytics.md @@ -373,3 +373,25 @@ HJSON configuration files can be validated against schemas using the command-lin `java -cp elide-*-example.jar com.yahoo.elide.modelconfig.validator.DynamicConfigValidator --configDir ` 1. The config directory needs to adhere to this [file layout](#file-layout). + +## Signature Verification + +Elide supports RSA signature verification of Hjson configuration files + +1. Generate a TAR file of the models directory. Refer [file layout](#file-layout) for model directory structure. + + `bash tar -czvf models.tar.gz models/` + +1. Generate an RSA Public and Private Key Pair. + +1. Create an RSA signature using the content of the TAR file and the RSA Private key. + +1. Add the public key to the Java Keystore. + +1. Use the DynamicConfigVerifier to validate the RSA signature using the Public Key. + +``` +a) java -cp elide-*-example.jar com.yahoo.elide.contrib.dynamicconfighelpers.verify.DynamicConfigVerifier --tarFile --signatureFile --publicKeyName + +b) java -cp elide-*-example.jar com.yahoo.elide.contrib.dynamicconfighelpers.verify.DynamicConfigVerifier --help +```