delta/git.git/gpg-interface.h, branch ep/shell-command-substitution

merge/pull Check for untrusted good GPG signatures

2013-04-01T05:38:49+00:00

When --verify-signatures is specified, abort the merge in case a good
GPG signature from an untrusted key is encountered.

Signed-off-by: Sebastian Götte 
Signed-off-by: Junio C Hamano

Move commit GPG signature verification to commit.c

2013-04-01T02:15:11+00:00

Signed-off-by: Sebastian Götte 
Signed-off-by: Junio C Hamano

gpg_interface: allow to request status return

2013-02-14T17:30:04+00:00

Currently, verify_signed_buffer() returns the user facing output only.

Allow callers to request the status output also.

Signed-off-by: Michael J Gruber 
Signed-off-by: Junio C Hamano

Split GPG interface into its own helper library

2011-11-05T04:40:25+00:00

This mostly moves existing code from builtin/tag.c (for signing)
and builtin/verify-tag.c (for verifying) to a new gpg-interface.c
file to provide a more generic library interface.

 - sign_buffer() takes a payload strbuf, a signature strbuf, and a signing
   key, runs "gpg" to produce a detached signature for the payload, and
   appends it to the signature strbuf. The contents of a signed tag that
   concatenates the payload and the detached signature can be produced by
   giving the same strbuf as payload and signature strbuf.

 - verify_signed_buffer() takes a payload and a detached signature as
    pairs, and runs "gpg --verify" to see if the payload matches
   the signature. It can optionally capture the output from GPG to allow
   the callers to pretty-print it in a way more suitable for their
   contexts.

"verify-tag" (aka "tag -v") used to save the whole tag contents as if it
is a detached signature, and fed gpg the payload part of the tag. It
relied on gpg to fail when the given tag is not signed but just is
annotated.  The updated run_gpg_verify() function detects the lack of
detached signature in the input, and errors out without bothering "gpg".

Signed-off-by: Junio C Hamano