updates

scripts/sign.sh

@@ -18,7 +18,7 @@ shift
 
 TRUEPIC_CLI=/home/user/app/truepic
 STEG_SCRIPTS=/home/user/app/scripts/
-PRIVATE_KEY=/home/user/.truepic/default/private.key
+PRIVATE_KEY=/home/user/.truepic/truepic/private.key
 
 filename=$(basename "${MEDIA_FILE}")
 extension="${filename##*.}"
@@ -35,7 +35,7 @@ fi
 
 debug_echo -n "Signing media..."
 signed_no_watermark=$(mktemp).${extension}
-${TRUEPIC_CLI} sign $MEDIA_FILE "$@" --output ${signed_no_watermark} > /dev/null 2>&1
+${TRUEPIC_CLI} sign --profile truepic $MEDIA_FILE "$@" --output ${signed_no_watermark} > /dev/null 2>&1
 debug_echo " --> ${signed_no_watermark}"
 
 debug_echo
@@ -126,7 +126,7 @@ debug_echo " --> ${watermarked_image}"
 
 debug_echo
 debug_echo -n "Re-signing the watermarked media..."
-${TRUEPIC_CLI} sign ${watermarked_image} \
+${TRUEPIC_CLI} sign --profile steg ${watermarked_image} \
     --ingredient-manifest-store ${no_watermark_manifest} \
     --output output.${extension} \
     --assertions-inline '{

scripts/verify.sh

@@ -156,7 +156,7 @@ timestamp=$(
 )
 public_key=$(
   echo "${verification_json}" | \
-  jq -r '.manifest_store[] | select(.is_active == true) | .certificate.cert_der' | \
+  jq -r '.manifest_store[0].certificate.cert_der' | \
   base64 -d | \
   openssl x509 -pubkey -noout
 )