mirror of
https://github.com/git-for-windows/git.git
synced 2025-12-12 04:41:35 -06:00
434060ec6d
verify-commit and verify-tag both share a central codepath for verifying commits: check_signature. However, verify-tag exited successfully for untrusted signature, while verify-commit exited unsuccessfully. Centralize this signature check and make verify-commit adopt the older verify-tag behavior. This behavior is more logical anyway, as the signature is in fact valid, whether or not there's a path of trust to the author. Signed-off-by: brian m. carlson <sandals@crustytoothpaste.net> Signed-off-by: Junio C Hamano <gitster@pobox.com>
34 lines
1.0 KiB
C
34 lines
1.0 KiB
C
#ifndef GPG_INTERFACE_H
|
|
#define GPG_INTERFACE_H
|
|
|
|
struct signature_check {
|
|
char *payload;
|
|
char *gpg_output;
|
|
char *gpg_status;
|
|
|
|
/*
|
|
* possible "result":
|
|
* 0 (not checked)
|
|
* N (checked but no further result)
|
|
* U (untrusted good)
|
|
* G (good)
|
|
* B (bad)
|
|
*/
|
|
char result;
|
|
char *signer;
|
|
char *key;
|
|
};
|
|
|
|
extern void signature_check_clear(struct signature_check *sigc);
|
|
extern size_t parse_signature(const char *buf, unsigned long size);
|
|
extern void parse_gpg_output(struct signature_check *);
|
|
extern int sign_buffer(struct strbuf *buffer, struct strbuf *signature, const char *signing_key);
|
|
extern int verify_signed_buffer(const char *payload, size_t payload_size, const char *signature, size_t signature_size, struct strbuf *gpg_output, struct strbuf *gpg_status);
|
|
extern int git_gpg_config(const char *, const char *, void *);
|
|
extern void set_signing_key(const char *);
|
|
extern const char *get_signing_key(void);
|
|
extern int check_signature(const char *payload, size_t plen,
|
|
const char *signature, size_t slen, struct signature_check *sigc);
|
|
|
|
#endif
|