Check or change the signing key

Step 3 of 4 in Publish status lists.

createStatusList records the signing-key binding from its kmsResourceHandle and kmsKeyAlias. Read or replace that binding through Platform Config, addressed by the list's correlationId (the last segment of its public URI). There is no bind before the list exists.

Loading example...

Loading example...

A DID-signed list carries a kid pointing into the DID document; an X.509-signed list carries x5c. That header is what a verifier uses to find the key, so it is the first thing to check when verification fails for a list that otherwise looks correct.

Next

Continue with step 4, Change entries and check the publication.