User-friendly, affordable, and packed with different features, DocHub is a healthy and cost-efficient alternative to SignServer Enterprise. Try it now and learn how to squeeze the maximum of our solution with easy-to-use feature shortcuts.
Anton Hodal, a Solutions Consultant at Key Factor, demonstrates how to use Sign Server with Cosine to create signed container images. Cosine is a tool for signing and verifying container images developed as part of the Sig store project of the Linux Foundation. Sign Server is a digital signer for managing signing keys with audit logging and archiving features. The process involves creating a signing key stored in the sign server database, generating a certificate signing request (CSR), issuing a digital signing certificate, creating a Docker container image, putting it in a registry with Cosine, creating a payload describing the image, and signing it with Sign Server using Cosine to attach it.
