Function SignWithIntegrityBlock

go/bundle/cmd/sign-bundle/integrityblock.go:115–159

SignWithIntegrityBlock creates a CBOR integrity block containing a signature matching the hash of the web bundle read from `bundleFileIn`. Finally it writes the new signed web bundle into `bundleFileOut`. More details can be found in [Integrity Block Explainer](https://github.com/WICG/webpackage/blo

(bundleFileIn, bundleFileOut *os.File, signingStrategy integrityblock.ISigningStrategy)

// writes the new signed web bundle into `bundleFileOut`. More details can be
// found in [Integrity Block Explainer](https://github.com/WICG/webpackage/blob/main/explainers/integrity-signature.md).
func SignWithIntegrityBlock(bundleFileIn, bundleFileOut *os.File, signingStrategy integrityblock.ISigningStrategy) error {
	integrityBlock, offset, err := integrityblock.ObtainIntegrityBlock(bundleFileIn)
	if err != nil {
		return err
	}

	webBundleHash, err := integrityblock.ComputeWebBundleSha512(bundleFileIn, offset)
	if err != nil {
		return err
	}

	ibs := integrityblock.IntegrityBlockSigner{
		SigningStrategy: signingStrategy,
		WebBundleHash:   webBundleHash,
		IntegrityBlock:  integrityBlock,
	}

	ed25519publicKey, err := ibs.SigningStrategy.GetPublicKey()
	if err != nil {
		return err
	}

	signatureAttributes := integrityblock.GenerateSignatureAttributesWithPublicKey(ed25519publicKey)

	err = ibs.SignAndAddNewSignature(ed25519publicKey, signatureAttributes)
	if err != nil {
		return err
	}

	// Update the integrity block bytes with the new integrity block.
	integrityBlockBytes, err := integrityBlock.CborBytes()
	if err != nil {
		return err
	}

	err = cbor.Deterministic(integrityBlockBytes)
	if err != nil {
		return err
	}

	webBundleId := webbundleid.GetWebBundleId(ed25519publicKey)
	fmt.Println("Web Bundle ID: " + webBundleId)

	return writeOutput(bundleFileIn, integrityBlockBytes, offset, bundleFileOut)
}