Function SignExchanges

go/bundle/cmd/sign-bundle/signedexchange.go:77–126

()

}

func SignExchanges() error {
	privKey, err := readPrivateKeyFromFile(*sxgFlagPrivateKey)
	if err != nil {
		return fmt.Errorf("%s: %v", *sxgFlagPrivateKey, err)
	}

	if _, ok := privKey.(*ecdsa.PrivateKey); !ok {
		return errors.New("Private key is not ECDSA type.")
	}

	certs, err := readCertChainFromFile(*sxgFlagCertificate)
	if err != nil {
		return fmt.Errorf("%s: %v", *sxgFlagCertificate, err)
	}

	validityUrl, err := url.Parse(*sxgFlagValidityUrl)
	if err != nil {
		return fmt.Errorf("failed to parse validity URL %q: %v", *sxgFlagValidityUrl, err)
	}

	var date time.Time
	if *sxgFlagDate == "" {
		date = time.Now()
	} else {
		var err error
		date, err = time.Parse(time.RFC3339, *sxgFlagDate)
		if err != nil {
			return fmt.Errorf("failed to parse date %q: %v", *sxgFlagDate, err)
		}
	}

	b, err := readBundleFromFile(*sxgFlagInput)
	if err != nil {
		return fmt.Errorf("%s: %v", *sxgFlagInput, err)
	}

	signer, err := signature.NewSigner(b.Version, certs, privKey, validityUrl, date, *sxgFlagExpire)
	if err != nil {
		return err
	}

	if err := addSignature(b, signer); err != nil {
		return err
	}

	if err := writeBundleToFile(b, *sxgFlagOutput); err != nil {
		return fmt.Errorf("%s: %v", *sxgFlagOutput, err)
	}
	return nil
}