Sending Products
Sending products is how contributors add products to PDL and how the PDL
systems relay products between one another, see:
relay product listener. To send
products using the PDL Client, use the --send
argument.
There are two primary product sender implementations:
Both types of senders require a keypair to sign products in order to authorize the sender to contribute to the PDL. Once a keypair is generated, the public side of the key is registered with the PDL receiver systems. The private side of the key is kept secret and used to sign products during the send process.
Products are initially signed by the PDL Client when building the product from command line arguments (or global configuration properties). If supported and configured to do so, the sender may re-sign the product using its own configured key and algorithm.
Generating a Keypair
1
ssh-keygen -t rsa -b 2048 -m PEM -C 'Comment describing key' -f keyfilename
Do not assign a key passphrase. This creates two files: a private key named
keyfilename
and a public keynamedkeyfilename.pub
. Replacekeyfilename
with the actual name of the file to be created.
As with all public/private keypairs, NEVER share your PRIVATE key. Give your
PUBLIC key (keyfilename.pub
) to everyone who needs to verify your product
signatures.
For product verification in the PDL client, send your public key and information about your products to gs-haz_dev_team_group@usgs.gov. The necessary information to include when submitting your key is:
- Name, email, and organization for a point of contact associated with the key
- Product types that will be sent through this key
- Product sources that will be sent through this key
Last modified: Tue Jan 21 21:28:43 UTC 2025