Skip to content

Sldcmd Command-line Tool

Overview

sldcmd is the Solidshield command-line protection tool used to issue protection requests. The tool is statically linked with no external dependencies and is available for Linux and Windows.

Usage Example

Using Solidstudio you can setup a protection project and save it locally as a JSON file, by clicking the Get Project File in the Protection tab. At this point it is possible to protect the project with sldcmd with the following command:

 ./sldcmd -insecure -outpath out/ -input samples/<binaryfile> -project samples/<protection_project>.json

Certificate pinning

The use of -insecure flag is intended only for use in a local environment. When configuring the server to work in a networked environment is it recommended to supply an SSL certificate for the domain name or to perform SSL certificate pinning on the client. It is possible to do so, by supplying the SSL certificate of the server, like follows:

 ./sldcmd -publickey certs/cert.crt -outpath out/ -input samples/<binaryfile> -project samples/<protection_project>.json

Protection project JSON model

{
    "systemic": true,
    "sgx": false,
    "encryptionsymmetrickey": "8596d827dba7160fc2ddaf225d164e11",
    "signingprivate": "",
    "metadata_present": true,
    "metadatakey": "b0a2e848fca09cf8bc49bebc1f6b56e6",
    "metadata": "Test 123",
}

Work in Progress

👷 This page is a temporary placeholder.

Usage of ./sldcmd_21.06.01:
  -hostname string
        The hostname of Solidshield server (default "localhost")
  -input string
        The input file to protect
  -insecure
        Disable SSL certificate verification of the server
  -outpath string
        Where to store protection output
  -port int
        The HTTPS port of Solidshield server (default 9090)
  -project string
        The protection project file
  -publickey string
        The expected SSL public key on the server (cert pinning)
  -version
        Display version information

Last update: 2021-08-10