d23be309c2
[verify-commits] Allow revoked keys to expire
7 years ago
0aacfa43c1
Remove accidental stray semicolon
7 years ago
ab8e8b97a3
Remove unused variables in shell scripts.
8 years ago
df5bae2e7b
Update trusted-sha512-root-commit for new bad tree hash
8 years ago
efc06c2c46
If GNU sha512sum is missing, try perl shasum in verify-commits
8 years ago
fd5e905e21
Make verify-commits.sh non-recursive
8 years ago
b3ec305f8e
Fix bashisms in verify-commits and always check top commit's tree
8 years ago
f20e664f40
Check gpg version before setting --weak-digest
8 years ago
bbd757940b
Fix regsig checking for subkey sigs in verify-commits
8 years ago
d025bc7964
Allow any subkey in verify-commits
8 years ago
eddc77a1b1
Add comment re: why SHA1 is disabled
8 years ago
d9c450ffb2
Verify Tree-SHA512s in merge commits, enforce sigs are not SHA1
8 years ago
a4b02f4275
Add Pieter's old signed commits to revsig-commits
8 years ago
3e900acafa
Require merge commits merge branches on top of other merge commits
...
Specifically, require that the left branch (first restult of git
show -s --format=format:%P) is a signed merge commit, instead of
allowing either. This is fine for now, but might need to be relaxed
in the future.
Also fixes an out-of-file-descriptors issue by holding too many
open FDs writing to /dev/null
8 years ago
0766d1cac3
[copyright] add MIT license headers to .sh scripts where missing
...
Years are set according to 'git log' history
8 years ago
1e9aab0dbf
Remove sipa's old revoked key from verify-commits
...
Now that the trusted root is past all commits signed by that key we don't need
it in the trusted-keys list, nor do we need to whitelist those commits in
allow-revsig-commits
9 years ago
966151e71d
Add README for verify-commits
9 years ago
11164ec0b4
Remove keys that are no longer used for merging
...
Also updated trusted git root to be right after gmaxwell's last merge.
9 years ago
22421faa19
Remove pointless warning
...
Any attacker who managed to make an evil commit that changed something in the
contrib/verify-commits/ directory could just as easily remove the warning
and/or modify it to not display the evil commits; telling the user to check
those commits specifically misleads them into checking just those commits
rather than the script itself.
9 years ago
9523e8adaf
Make verify-commits path-independent
9 years ago
f7d4a25fe6
Make verify-commits POSIX-compliant
9 years ago
fa24329334
[contrib] verify-commits: Add MarcoFalke fingerprint
9 years ago
a5bc8de1ba
add jonasschnellis key to git-verify-commits trusted-keys
9 years ago
9ea7762e2c
Use Pieter's signing subkey instead of his primary key
...
This commit is signed.
9 years ago
6e800c2b41
Add Pieter's new PGP key to verify-commits/trusted-keys
9 years ago
1d94b72019
Whitelist commits signed with Pieter's now-revoked key
9 years ago
27252b7389
Fix pre-push-hook regexes
9 years ago
0186228d61
Update trusted-git-root to the most recent unsigned commit
9 years ago
adaa568722
Add script to verify all merge commits are signed
10 years ago
Matt Corallo