phillip-stephens / golang-signature-cli-task Goto Github PK

This is a skeleton for a CLI tool that can both sign and verify signatures of files.

To build the project, run the following command:

go build -o verifier

Look at the automatically generated help text with

./verifier --help
./verifier sign --help
./verifier verify --help

1. Create a private key with the following command:

openssl genpkey -algorithm RSA -out private_key.pem -aes256

2. Extract the public key from the private key with the following command:

openssl rsa -pubout -in private_key.pem -out public_key.pem

3. Sign a file with the private key with the following command:

openssl dgst -sha256 -sign private_key.pem -out signature.sha256 secret.txt

4. Verify the signature with the public key with the following command:

openssl dgst -sha256 -verify public_key.pem -signature signature.sha256 secret.txt

5. Modify the secret.txt file and verify the signature again. What happens?

• Clone this repo and create a new branch off of main to work on.
• Implement the missing parts of the verify command.
  • Testing - You can use the signature file + public/private key files generated in the previous step to test your implementation.
• Implement the sign command. The sign command should sign a file with a private key and save the signature to a file.
• Add a new command generate that generates a new private/public key pair and saves them to files. You'll need to modify the CLI/cobra commands to add this new command.