Skip to main content

scion-pki trc verify

Verify a TRC chain

Synopsis​

'verify' verifies a TRC chain based on a trusted anchor point.

The anchor can either be a collection of trusted certificates bundled in a PEM file, or a trusted TRC. TRC update chains that start with a base TRC can be verified with either type of anchor. TRC update chains that start with a non-base TRC must have a TRC as anchor. With the optional flag --isd, the ID of the ISD for which the TRC claims to be the root of trust can be matched against an expected value.

scion-pki trc verify [flags]

Examples​

  scion-pki trc verify --anchor bundle.pem ISD1-B1-S1.trc
  scion-pki trc verify --anchor ISD1-B1-S1.trc ISD1-B1-S2.trc ISD1-B1-S3.trc

Options​

  -a, --anchor string   trust anchor (required)
  -h, --help            help for verify
      --isd uint16      ISD identifier

SEE ALSO​