|Aminda Suomalainen 1c563b22fa||1 month ago|
|aminda||1 year ago|
|jae||10 months ago|
|mtrnord||4 months ago|
|.editorconfig||1 month ago|
|.gitattributes||1 month ago|
|.pre-commit-config.yaml||1 month ago|
|README.md||1 month ago|
|allowed_signers||4 months ago|
allowed_signers file for SSH/git
Git 2.34 brings support for signing commits with SSH key and having a SSH-compatible smartcard, I have to try this. It likely getting more common in the future doesn't hurt either and I have pgp-alt-wot which does about the same for PGP.
Where to find keys
- GitHub, Giteas and GitLabs expose user public keys (without useful names)
when you append a
.keysafter their profile page
- Good ideas are made to be copied, so maybe there will be more repositories like this 😉
I don't mean this to be used directly, only to be took inspiration from. See the first link in further reading.
mkdir -p ~/src/gitea.blesmrt.net/Mikaela cd ~/src/gitea.blesmrt.net/Mikaela git clone https://gitea.blesmrt.net/Mikaela/ssh-allowed_signers.git git config --global gpg.ssh.allowedSignersFile ~/src/gitea.blesmrt.net/Mikaela/ssh-allowed_signers/allowed_signers
Git commands, such as
git verify-commit --raw HEAD or
git log --show-signature,
should now recognised commits signed with keys I have allowed.
In the last command it's fine to remove
--global to only affect the single
repository you are on (while I haven't tested this), should that repository
be something only I am signing in or something I need to verify otherwise
enough to list it here.
On the last command,
git config turns it into absolute path, while manually
.gitconfig can literally have the above. I wonder if the command
-- before the file, but not enough to actually try it 😃
- https://git.com.de/mikaela/ssh-allowed_signers & http://gitea.qzzf2qcfbhievvs5nzkccuwddroipy62qjocqtmgcgh75vd6w57m7yad.onion/Mikaela/ssh-allowed_signers
- Caleb Hearth: Signing Git Commits with Your SSH Key (web.archive.org) inspired me to try this
- Andrew Ayer: It's Now Possible To Sign Arbitrary Data With Your SSH Keys instructs on signing and verifying files outside of git
- 🥇 Gitea v1.16.0 brought support for SSH signed commits on 2022-01-30. (tag)
- Their Git hosting comparison also includes SSH Signed Commits.
- The first release of Forĝejo was 1.18, so it had support since the beginning 🎉.
- 🥈 GitHub started supporting SSH signed commits on 2022-08-23.
- 🥉 GitLab 15.7 started supporting SSH signatures on 2022-12-22.