User-friendly, affordable, and packed with different features, DocHub is a healthy and cost-efficient alternative to SignServer Enterprise. Try it now and learn how to squeeze the maximum of our solution with easy-to-use feature shortcuts.
In this video tutorial, Anton Hodal, a Solutions Consultant at Key Factor, shows how to use Sign Server with Cosign to create signed container images. Cosign is a tool for signing and verifying container images developed as part of the Sigstore project of the Linux Foundation. Sign Server is a digital signer for managing signing keys with audit logging and archiving features. The tutorial covers creating a signing key in Sign Server, generating a certificate signing request, issuing a digital signing certificate, importing it back into Sign Server, creating a Docker container image, putting it into a registry using Cosign, creating a payload describing the image, signing it using Sign Server, and attaching it using Cosign.
