From ef533f7406f84f262e0264eb36f2e1c248ecb36e Mon Sep 17 00:00:00 2001 From: Ayeswarya Anandan Date: Thu, 3 Dec 2020 12:01:04 -0500 Subject: [PATCH 1/2] signature verification --- pages/guide/v5/04-analytics.md | 22 ++++++++++++++++++++++ 1 file changed, 22 insertions(+) diff --git a/pages/guide/v5/04-analytics.md b/pages/guide/v5/04-analytics.md index 2bda57b1..57d715ae 100644 --- a/pages/guide/v5/04-analytics.md +++ b/pages/guide/v5/04-analytics.md @@ -373,3 +373,25 @@ HJSON configuration files can be validated against schemas using the command-lin `java -cp elide-*-example.jar com.yahoo.elide.modelconfig.validator.DynamicConfigValidator --configDir ` 1. The config directory needs to adhere to this [file layout](#file-layout). + +## Signature Verification + +Elide supports RSA signature verification of Hjson configuration files + +1. Generate a TAR file of the models directory. Refer [file layout](#file-layout) for model directory structure. + + `bash tar -czvf models.tar.gz models/` + +1. Generate an RSA Public and Private Key Pair + +1. Create an RSA signature using the content of the TAR file and the RSA Private key + +1. Add the public key to the Java Keystore + +1. Use the DynamicConfigVerifier to validate the RSA signature using the Public Key + +``` +a) java -cp elide-*-example.jar com.yahoo.elide.contrib.dynamicconfighelpers.verify.DynamicConfigVerifier --tarFile --signatureFile --publicKeyName + +b) java -cp elide-*-example.jar com.yahoo.elide.contrib.dynamicconfighelpers.verify.DynamicConfigVerifier --help +``` From d0d18de734588e0f134793b84d2203eb169f67dc Mon Sep 17 00:00:00 2001 From: Ayeswarya Anandan Date: Thu, 3 Dec 2020 12:09:12 -0500 Subject: [PATCH 2/2] add periods --- pages/guide/v5/04-analytics.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/pages/guide/v5/04-analytics.md b/pages/guide/v5/04-analytics.md index 57d715ae..efd99303 100644 --- a/pages/guide/v5/04-analytics.md +++ b/pages/guide/v5/04-analytics.md @@ -382,13 +382,13 @@ Elide supports RSA signature verification of Hjson configuration files `bash tar -czvf models.tar.gz models/` -1. Generate an RSA Public and Private Key Pair +1. Generate an RSA Public and Private Key Pair. -1. Create an RSA signature using the content of the TAR file and the RSA Private key +1. Create an RSA signature using the content of the TAR file and the RSA Private key. -1. Add the public key to the Java Keystore +1. Add the public key to the Java Keystore. -1. Use the DynamicConfigVerifier to validate the RSA signature using the Public Key +1. Use the DynamicConfigVerifier to validate the RSA signature using the Public Key. ``` a) java -cp elide-*-example.jar com.yahoo.elide.contrib.dynamicconfighelpers.verify.DynamicConfigVerifier --tarFile --signatureFile --publicKeyName