User-friendly, affordable, and packed with different features, DocHub is a healthy and cost-efficient alternative to SignServer Enterprise. Try it now and learn how to squeeze the maximum of our solution with easy-to-use feature shortcuts.
In this video tutorial, Anton Hodal, a Solutions consultant at Key Factor, demonstrates how to use Sign Server with Cosign to create signed container images. Cosign is a tool for signing and verifying container images, developed as part of the Sigstore project of the Linux Foundation. Sign Server is a digital signer that allows centralized management of signing keys with audit logging and archiving features. The tutorial covers creating a signing key stored in Sign Server, generating a certificate signing request, issuing a digital signing certificate, creating a Docker container image, storing it in a registry using Cosign, creating a payload for the image description, and signing it with Sign Server and Cosign.
