Community
Participate
Working Groups
With https://bugs.eclipse.org/bugs/show_bug.cgi?id=382212 being resolved, jgit supports signing commits using gpg keys. It would be extremely helpful to have jgit support GPG signature verification using a GPGVerifier implementation. This would allow jgit to perform operations equivalent to `git verify-commit` and `git verify-tag`. This would be pretty useful in implementing a "Verified" tag for signed gpg commits and signed tags in gerrit (similar to github). This would also help with https://bugs.eclipse.org/bugs/show_bug.cgi?id=547538 since the signing tests could use these libraries for gpg signature verification.
New Gerrit change created: https://git.eclipse.org/r/c/jgit/jgit/+/174406
New Gerrit change created: https://git.eclipse.org/r/c/egit/egit/+/175335
Gerrit change https://git.eclipse.org/r/c/jgit/jgit/+/174406 was merged to [master]. Commit: http://git.eclipse.org/c/jgit/jgit.git/commit/?id=3774fcc848da7526ffa74211cbb2781df5731125
Gerrit change https://git.eclipse.org/r/c/egit/egit/+/175335 was merged to [master]. Commit: http://git.eclipse.org/c/egit/egit.git/commit/?id=6ec871546a296627b7202729f9446b3af109cff9