altsign-set(1)

ALTSIGN-SET(1)

User Commands

ALTSIGN-SET(1)

NAME

altsign-set - request a signing session for a certificate

SYNOPSIS

altsign-set [OPTIONS]

DESCRIPTION

altsign-set connects to the agent control socket and requests a signing session for a specific certificate nickname. On success it prints the session socket path to standard output. The agent stops any existing session before starting a new one.

The printed session socket path is intended to be passed to altsign(1) via --socket.

OPTIONS

-c, --certificate=CERT: Certificate nickname to use for the session. This option is required.
-S, --socket=SOCKET: Agent control socket path. Default: /run/altsign-module/control.sock (module). --pe selects /run/altsign-pe/control.sock. An explicit --socket overrides both.
--module: Use the module control socket (default). Mutually exclusive with --pe.
--pe: Use the PE control socket. Mutually exclusive with --module.
-?, --help: Show the full help text.
--usage: Show a short usage summary.

FILES

/run/altsign-module/control.sock: Default control socket (module).
/run/altsign-pe/control.sock: PE service control socket.

EXIT STATUS

0: Session created and socket path printed.
non-zero: An error occurred or authorization was denied.

EXAMPLES

Start a module (default) session and capture the session socket path:

sock=$(altsign-set --certificate release)

Start a PE session:

altsign-set --pe --certificate release