Skip to content

license.flexfs

license.flexfs manages the cryptographic signing identity and license grants used by the flexFS licensing system. Grants are ECDSA-signed JSON documents containing an expiration date.

SubcommandDescription
create identityGenerate a new ECDSA P-256 signing keypair
create grantCreate a signed license grant
verifyVerify a grant’s signature and check expiration
versionPrint the build version
licensePrint license information
FlagTypeDefaultDescription
--keyFolderstring~/.flexfs/licenseSigning key folder path
Terminal window
license.flexfs create identity

Generates a new ECDSA P-256 keypair and saves private.pem and public.pem to the key folder.

Terminal window
license.flexfs create grant [--expires <RFC3339>] [-o <file>]

Creates a signed grant. The grant expires at the specified time (default: 1 month from now). Expiration must be between 1 day and 2 years from now.

FlagTypeDefaultDescription
--expiresstring1 month from nowExpiration time in RFC3339 format
--outputFile, -ostringOutput file path (stdout if omitted)
Terminal window
license.flexfs verify [-i <file>]

Verifies the signature on a grant and reports whether it has expired.

FlagTypeDefaultDescription
--inputFile, -istringInput file path (stdin if omitted)