{"id":19783664,"url":"https://github.com/intersectmbo/credential-manager","last_synced_at":"2025-10-04T15:46:48.583Z","repository":{"id":236352530,"uuid":"792434931","full_name":"IntersectMBO/credential-manager","owner":"IntersectMBO","description":"Credential and Identity management script for Constitutional Committee members backed by X.509 certificates","archived":false,"fork":false,"pushed_at":"2025-04-16T16:32:56.000Z","size":3585,"stargazers_count":4,"open_issues_count":1,"forks_count":5,"subscribers_count":4,"default_branch":"main","last_synced_at":"2025-04-16T22:15:37.552Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://credential-manager.readthedocs.io/en/latest/","language":"Haskell","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/IntersectMBO.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG","contributing":"CONTRIBUTING","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT","threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2024-04-26T16:58:30.000Z","updated_at":"2025-04-16T16:33:00.000Z","dependencies_parsed_at":"2024-05-06T14:57:25.866Z","dependency_job_id":"cc1cc1d1-2ac3-4e28-b281-d76c92e2e02d","html_url":"https://github.com/IntersectMBO/credential-manager","commit_stats":null,"previous_names":["intersectmbo/credential-manager"],"tags_count":4,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/IntersectMBO%2Fcredential-manager","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/IntersectMBO%2Fcredential-manager/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/IntersectMBO%2Fcredential-manager/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/IntersectMBO%2Fcredential-manager/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/IntersectMBO","download_url":"https://codeload.github.com/IntersectMBO/credential-manager/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":251791620,"owners_count":21644432,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-11-12T06:08:56.279Z","updated_at":"2025-10-04T15:46:43.557Z","avatar_url":"https://github.com/IntersectMBO.png","language":"Haskell","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Constitutional Committee Credential Management System\n\n[![Documentation Status](https://readthedocs.org/projects/credential-manager/badge/?version=latest)](https://credential-manager.readthedocs.io/en/latest/?badge=latest)\n[![Hydra Status (Intel Linux)](https://img.shields.io/endpoint?logo=nixos\u0026logoColor=white\u0026label=Hydra%20build%20Intel%20Linux\u0026url=https%3A%2F%2Fci.iog.io%2Fjob%2FIntersectMBO-credential-manager%2Fmain%2Fx86_64-linux.required%2Fshield)](https://ci.iog.io/job/IntersectMBO-credential-manager/main/x86_64-linux.required)\n[![Hydra Status (Intel Mac OS)](https://img.shields.io/endpoint?logo=nixos\u0026logoColor=white\u0026label=Hydra%20build%20Intel%20Mac%20OS\u0026url=https%3A%2F%2Fci.iog.io%2Fjob%2FIntersectMBO-credential-manager%2Fmain%2Fx86_64-darwin.required%2Fshield)](https://ci.iog.io/job/IntersectMBO-credential-manager/main/x86_64-darwin.required)\n[![Hydra Status (M1 Mac OS)](https://img.shields.io/endpoint?logo=nixos\u0026logoColor=white\u0026label=Hydra%20build%20M1%20Mac%20OS\u0026url=https%3A%2F%2Fci.iog.io%2Fjob%2FIntersectMBO-credential-manager%2Fmain%2Faarch64-darwin.required%2Fshield)](https://ci.iog.io/job/IntersectMBO-credential-manager/main/aarch64-darwin.required)\n\nThe Constitutional Committee Credential Management System is a suite of Plutus\nscripts and tools for managing Cardano constitutional committee credentials\nwith an X.509 certificate chain. It provides the following features:\n\n* Separation of capabilities between user roles\n* Multi-signature authorization of on-chain governance transactions\n* Key rotation without modifying registered committee credentials\n* Publicly verifiable authorization of on-chain activity via certificates\n\n## Installing the cc-sign tool\n\nThe `cc-sign` tool is a simplified CLI tool for signing transaction with\nencrypted openssl private keys. Installation instructions are listed per system\nbelow:\n\n### Prerequisites\n\nYou must have `openssl` installed to use this tool.\n\n### Via Nix\n\n```bash\nnix profile install github:IntersectMBO/credential-manager#cc-sign\n```\n\n### MacOS (Non-nix)\n\nOpen a terminal window and run the following command:\n\n```bash\nsudo /bin/bash -c \"$(curl -fsSL https://raw.githubusercontent.com/IntersectMBO/credential-manager/main/install-cc-sign-mac-os.sh)\"\n```\n\nNote that the use of `sudo` will require you to enter your password (your user account password, not your private key pass phrase).\n\n### Windows\n\nOpen a PowerShell window and run the following commands:\n\n```powershell\nSet-ExecutionPolicy -ExecutionPolicy RemoteSigned -Scope CurrentUser\nInvoke-RestMethod -Uri https://raw.githubusercontent.com/IntersectMBO/credential-manager/main/install-cc-sign-windows.ps1 | Invoke-Expression\n```\n\n### Linux (Non-nix, x64)\n\nDownload the executable from https://github.com/IntersectMBO/credential-manager/releases/download/0.1.1.0/cc-sign-linux-x64 and\nput it in a directory in your PATH (e.g. /usr/local/bin or /usr/bin).\n\n## Using the cc-sign tool\n\nBefore you use the tool, you need to have downloaded the tx body file that needs signing to a known location.\n\nTo use cc-sign, open a new terminal window (or PowerShell on Windows). The\ncommand has the following usage pattern:\n\n```bash\ncc-sign --private-key-file PRIVATE_KEY_FILE --tx-body-file TX_BODY_FILE --out-file FILE_TO_WRITE_WITNESS_TO\n```\n\nThe three files (written in all-caps) you need to provide are:\n\n1. `PRIVATE_KEY_FILE` replace this with the filepath of your (encrypted) private key file (e.g. `~/private-keys/my-key.private`)\n2. `TX_BODY_FILE` replace this with the filepath where you saved the tx body file (e.g. `~/Downloads/my-tx.body`)\n    [!TIP]\n    If you downloaded this file from a web browser (e.g. a Gmail attachment) or from slack, it will likely be in `~/Downloads` on MacOS or Linux and `C:\\Users\\Your Name\\Downloads` on Windows.\n2. `FILE_TO_WRITE_WITNESS_TO` this is the file path where the resulting witness will be saved (e.g. `~/my-tx.witness`)\n    [!TIP]\n    It is a good idea to give the witness file a name that associates it with A) who signed it and B) the transaction.\n    For example, if your name is John Doe and the tx body file you signed was `my-tx.body` then name the file `my-tx-john-doe.witness`.\n\nThe tool will first prompt you to enter the pass phrase for your private key file in order to decrypt it. Type the password and hit Enter/return.\nIt will then print a sequence of summary items that describes what the transaction does and prompt you to confirm each one.\nTo confirm, type the letter `y` and hit enter/return. Finally it will prompt you if you want to sign.\nType `y` once more and hit enter and it will write your signature to the file you provided for the `--out-file` argument.\nSend this witness file back to the orchestrator who sent you the transaction.\n\n## Documentation\n\nUser manual: https://credential-manager.readthedocs.io\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fintersectmbo%2Fcredential-manager","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fintersectmbo%2Fcredential-manager","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fintersectmbo%2Fcredential-manager/lists"}