kyauditverify

Overview ¶

Command kyauditverify checks any audit chain in the suite.

The products store their trails differently — two write JSON lines, one writes a database — and they authenticate different fields. What they share is the chain, so this tool reads the one thing they can all emit: the records as auditchain sees them, plus the anchor kept outside the log.

kyauditverify -key @/etc/kypassword/audit.key -anchor 42:9f3c... trail.jsonl