Managing the Signing Identity

Talking to CloudKit requires authentication. Luckily, there is a command to create the signing identity for you.

./sputnik identity create

This will create a certificate and place it in the ~/.sputnik/secrets folder.

You can print out the public key and paste the output as described in the Storing the Server-to-Server Public Key and Getting the Key Identifier section of the reference

Print your identity ./sputnik identity print

Once you added your public key to CloudKit's server-to-server keys you will get a Key ID for your client. You can store this key by either

./sputnik keyid store <your key id>

or setting the environment variable

SPUTNIK_CLOUDKIT_KEYID

You can remove the Sputnik signing identity by

./sputnik identity remove

This will remove the signing identity local to your machine (any certificate & stored key ID) - it is up to you to revoke the key in the CloudKit Dashboard.