User-friendly, affordable, and packed with different features, DocHub is a healthy and cost-efficient alternative to SignServer Enterprise. Try it now and learn how to squeeze the maximum of our solution with easy-to-use feature shortcuts.
Anton Hodal, a Solutions Consultant at Keyfactor, demonstrates how to use Sign Server with Cosign to create signed container images. Cosign, a tool for signing and verifying container images, is developed as part of the Sigstore project of the Linux Foundation. Sign Server is a multi-purpose digital signer for centrally managing signing keys with audit logging and archiving features. The process involves creating a signing key in the Sign Server database, generating a certificate signing request, importing a digital signing certificate back into Sign Server, creating a Docker container image, putting it into a registry using Cosign, creating a payload describing the image, and signing the payload using Sign Server and Cosign.
