2026-08-07_13-20-43_CEST

ccdn/ccdn_architecture.md

@@ -152,11 +152,50 @@ Example:
 
 The control file must be signed.
 
-Recommended:
+# minisign
+
+## Admin
+
+### Key Generation
+
+```
+minisign_date="$( \date --universal +%s )"
+echo "Generating keys with date \"${minisign_date}\""
+# -G     Generate a new key pair
+# -P <pubkey>
+         Public key, as a base64 string
+# -s <seckey_file>
+         Secret key file (default: ~/.minisign/minisign.key
+minisign -G -p hpr.minisign.${minisign_date}.pubkey -s hpr.minisign.${minisign_date}.seckey
+```
+### Document Signing
+
+```
+# -S     Sign files
+# -m <file>
+#        File to sign/verify
+# -t <comment>
+#        Add a one-line trusted comment
+# -x <sig_file>
+#        Signature file (default: <file>.minisig)
+# -P <pubkey>
+         Public key, as a base64 string
+
+minisign_date=1785664421
+minisign -Sm hpr.ccdn.settings.json -x hpr.ccdn.settings.json.minisig -p hpr.minisign.${minisign_date}.pubkey -t 'Last updated on $( \date --universal +%Y-%m-%dT%H:%M:%SZ_%A ) ($( \date --universal +%s )) by $USER'
+
+```
+
+
+## Client
+
+```
+minisign_date="$( \date --universal +%s )"
+echo "Generating keys with date \"${minisign_date}\""
+minisign -G -p hpr.minisign.${minisign_date}.pubkey -s hpr.minisign.${minisign_date}.seckey
+```
+
 
-* minisign
-* signify
-* GnuPG
 
 Nodes must reject unsigned or invalid control files.