https://github.com/neo4j-devtools/code-signer

A CLI tool for signing code, currently used by Neo4j Graph platform
https://github.com/neo4j-devtools/code-signer

Last synced: about 1 month ago
JSON representation

A CLI tool for signing code, currently used by Neo4j Graph platform

• Host: GitHub
• URL: https://github.com/neo4j-devtools/code-signer
• Owner: neo4j-devtools
• License: apache-2.0
• Created: 2019-01-08T08:38:58.000Z (about 6 years ago)
• Default Branch: master
• Last Pushed: 2023-01-09T05:17:48.000Z (about 2 years ago)
• Last Synced: 2023-03-04T15:57:00.938Z (almost 2 years ago)
• Language: TypeScript
• Homepage:
• Size: 319 KB
• Stars: 1
• Watchers: 10
• Forks: 4
• Open Issues: 2
• Metadata Files:
  • Readme: README.md
  • License: LICENSES

Awesome Lists containing this project

README

        
# Code Signer

A CLI tool for signing code used by Neo4j Graph platform.

Creates a `signature.pem` file in the signed folder.

If verifies signatures locally and against Neo4j:s CRL server

for revoked certificates when online.

## Usage

Sign `my-graph-app` directory:

```bash

npx @neo4j/code-signer --app ./my-graph-app-folder \

  --private-key ./private-key.pem \

  --cert ./certificate.pem \

  --passphrase your-private-key-passphrase

```

Verify `my-graph-app`:

```bash

npx @neo4j/code-signer --verify \

  --app ./my-graph-app-folder \

  --root-cert ./rootCA.pem

```

You can also pass the `--skip-revocation-check` flag to skip the certificate revocation check against Neo4j:s CRL server.

## Common usage pattern

These steps are usually what's needed to sign a node application.

```

# build your app

npm run build

# pack you app

npm pack

# unpack your app

tar xvzf *.tgz

# sign unpacked app folder

npx @neo4j/code-signer --app ./package \

  --private-key ../private-key.pem \

  --cert ../certificate.pem \

  --passphrase your-private-key-passphrase

# pack app again, from inside package/ folder. Important!

cd package

npm pack

# publish, still inside package/ folder

npm publish *.tgz

```

## Development

- Build: `npm build`

- Test: `npm test`

- Package: `npm pack`