https://ocm.software/0.17/docs/how-to/sign-and-verify/Recent content in Sign and Verify on Open Component ModelHugoen-UShttps://ocm.software/0.17/docs/how-to/sign-and-verify/generate-signing-keys/Mon, 01 Jan 0001 00:00:00 +0000https://ocm.software/0.17/docs/how-to/sign-and-verify/generate-signing-keys/<h2 id="goal">Goal</h2> <p>Generate a key pair that can be used to sign and verify OCM component versions. Pick the tab that matches the algorithm you want to use.</p>https://ocm.software/0.17/docs/how-to/sign-and-verify/configure-credentials-for-signing/Mon, 01 Jan 0001 00:00:00 +0000https://ocm.software/0.17/docs/how-to/sign-and-verify/configure-credentials-for-signing/<p>Set up credential configuration so OCM can find your signing keys when signing or verifying component versions.</p> <h2 id="youll-end-up-with">You&rsquo;ll end up with</h2> <ul> <li>A configured <code>.ocmconfig</code> file that OCM uses to locate your signing keys</li> <li>Ability to sign and verify component versions without specifying key paths manually</li> </ul> <p><strong>Estimated time:</strong> ~3 minutes</p>https://ocm.software/0.17/docs/how-to/sign-and-verify/sign-component-versions/Mon, 01 Jan 0001 00:00:00 +0000https://ocm.software/0.17/docs/how-to/sign-and-verify/sign-component-versions/<h2 id="goal">Goal</h2> <p>Sign a component version to certify its authenticity and enable downstream verification. OCM supports multiple signing algorithms. Pick the tab that matches the algorithm you want to use — each tab is a self-contained walkthrough.</p>https://ocm.software/0.17/docs/how-to/sign-and-verify/verify-component-versions/Mon, 01 Jan 0001 00:00:00 +0000https://ocm.software/0.17/docs/how-to/sign-and-verify/verify-component-versions/<h2 id="goal">Goal</h2> <p>Validate a component version signature to ensure it is authentic and has not been tampered with. OCM supports multiple verification algorithms. Pick the tab that matches the algorithm the signature was made with — each tab is a self-contained walkthrough.</p>