Bug 547751 - [GPG signing] Support GPG signature verification for commits
Summary: [GPG signing] Support GPG signature verification for commits
Status: RESOLVED FIXED
Alias: None
Product: JGit
Classification: Technology
Component: JGit (show other bugs)
Version: 5.4   Edit
Hardware: All All
: P3 enhancement (vote)
Target Milestone: 5.11   Edit
Assignee: Project Inbox CLA
QA Contact:
URL:
Whiteboard:
Keywords: helpwanted
Depends on:
Blocks:
 
Reported: 2019-05-29 02:49 EDT by Shashank Yadav CLA
Modified: 2021-02-16 18:13 EST (History)
2 users (show)

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Shashank Yadav CLA 2019-05-29 02:49:30 EDT
With https://bugs.eclipse.org/bugs/show_bug.cgi?id=382212 being resolved, jgit supports  signing commits using gpg keys. It would be extremely helpful to have jgit support GPG signature verification using a GPGVerifier implementation. This would allow jgit to perform operations equivalent to `git verify-commit` and `git verify-tag`. This would be pretty useful in implementing a "Verified" tag for signed gpg commits and signed tags in gerrit (similar to github). This would also help with https://bugs.eclipse.org/bugs/show_bug.cgi?id=547538 since the signing tests could use these libraries for gpg signature verification.
Comment 1 Eclipse Genie CLA 2021-01-07 11:16:32 EST
New Gerrit change created: https://git.eclipse.org/r/c/jgit/jgit/+/174406
Comment 2 Eclipse Genie CLA 2021-01-25 11:10:49 EST
New Gerrit change created: https://git.eclipse.org/r/c/egit/egit/+/175335