From e0b8e4b3bf67ab6f6f055aeba61d61a60da79f92 Mon Sep 17 00:00:00 2001 From: Rohit Raj <88114930+ro4i7@users.noreply.github.com> Date: Fri, 31 Mar 2023 20:40:16 +0530 Subject: [PATCH] docs: Added a note that RSA keys are not supported by Cosign Signed-off-by: Rohit Raj <88114930+ro4i7@users.noreply.github.com> --- content/en/cosign/key-generation.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/content/en/cosign/key-generation.md b/content/en/cosign/key-generation.md index 1e7a7d2a..278a5896 100644 --- a/content/en/cosign/key-generation.md +++ b/content/en/cosign/key-generation.md @@ -16,6 +16,8 @@ Public key written to cosign.pub Alternatively, you can use the `COSIGN_PASSWORD` environment variable to provide one. +*Note:* Cosign does not support RSA keys. Please generate and use only ED25519 keys for signing and verifying software artifacts. + ## Key generation and management To generate keys using a KMS provider, you can use the `cosign generate-key-pair` command with the `--kms` flag.