diff options
| author |  Michael J Gruber <git@drmicha.warpmail.net> | 2013-02-14 17:04:42 +0100 |
|---|---|---|
| committer |  Junio C Hamano <gitster@pobox.com> | 2013-02-14 09:27:40 -0800 |
| commit | b60b7566c04e5f54c0e40229c1716d99d834ab68 (patch) | |
| tree | 4716daef7db8be4d742a6f98a31cbe37c78e7f55 /pack-revindex.h | |
| parent | Replace filepattern with pathspec for consistency (diff) | |
| download | tgif-b60b7566c04e5f54c0e40229c1716d99d834ab68.tar.xz | |
gpg-interface: check good signature in a reliable way
Currently, verify_signed_buffer() only checks the return code of gpg,
and some callers implement additional unreliable checks for "Good
signature" in the gpg output meant for the user.
Use the status output instead and parse for a line beinning with
"[GNUPG:] GOODSIG ". This is the only reliable way of checking for a
good gpg signature.
If needed we can change this easily to "[GNUPG:] VALIDSIG " if we want
to take into account the trust model.
Signed-off-by: Michael J Gruber <git@drmicha.warpmail.net>
Signed-off-by: Junio C Hamano <gitster@pobox.com>
Diffstat (limited to 'pack-revindex.h')
0 files changed, 0 insertions, 0 deletions