Signing and Verification — Open Component Model

Certificate Chains (PEM)

Mon, 01 Jan 0001 00:00:00 +0000

PEM signing embeds an X.509 certificate chain directly in the signature value, letting verifiers pin a root CA rather than a bare public key. Use it when your organization has existing PKI infrastructure.

Plain Signatures

Mon, 01 Jan 0001 00:00:00 +0000

In this tutorial, you’ll sign a component version with a private key and verify it with the corresponding public key. By the end, you’ll understand the complete signing and verification workflow that ensures component authenticity and integrity.