Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ERROR:root:reason='COSE Signer does not contain signing certificate' #27

Open
cbattle12 opened this issue Jan 19, 2025 · 0 comments
Open

Comments

@cbattle12
Copy link

Hello,
When I try to sign the test image with a manifest it fails with the error:
ERROR:root:reason='COSE Signer does not contain signing certificate'

I followed all the instructions in the setup and got everything running, I can see the created KMS key in the AWS console, the various certificat and key files are there and look reasonable, and when I run the app in the terminal it successfully sets up the server and prints the following:

Using KMS for signing
Running example in dev mode with AWS endpoint: https://kms.us-east-2.amazonaws.com
Using KMS key:
Using certificate chain: ./chain.pem
Press CTRL+C to stop the server
INFO:waitress:Serving on http://0.0.0.0:5000

When I query the signer_data endpoint via curl I get a reasonable output:

{"alg": "ES256", "timestamp_url": "http://timestamp.digicert.com", "signing_url": "http://localhost:5000/sign", "cert_chain": <Long string of chars, presumably the cert chain...>}

But when I try to sign the image with the given curl command I get the error above:
curl.exe -X POST -T test.jpg -o signed.jpeg 'http://localhost:5000/attach'

The error happens in the builder.sign() step of app.py. I'm running Windows 10 and using the latest version of the repo.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant