]> git.ipfire.org Git - thirdparty/git.git/commit
receive-pack: GPG-validate push certificates
authorJunio C Hamano <gitster@pobox.com>
Thu, 14 Aug 2014 22:59:21 +0000 (15:59 -0700)
committerJunio C Hamano <gitster@pobox.com>
Mon, 15 Sep 2014 20:23:28 +0000 (13:23 -0700)
commitd05b9618ce42e85936176537f939a4eb85d4d65e
tree729f418364ffd20640fe5da3159e6c673c0c2769
parenta85b377d0419a9dfaca8af2320cc33b051cbed04
receive-pack: GPG-validate push certificates

Reusing the GPG signature check helpers we already have, verify
the signature in receive-pack and give the results to the hooks
via GIT_PUSH_CERT_{SIGNER,KEY,STATUS} environment variables.

Policy decisions, such as accepting or rejecting a good signature by
a key that is not fully trusted, is left to the hook and kept
outside of the core.

Signed-off-by: Junio C Hamano <gitster@pobox.com>
Documentation/git-receive-pack.txt
builtin/receive-pack.c
t/t5534-push-signed.sh