0
Fork 0
mirror of https://codeberg.org/forgejo/forgejo.git synced 2024-12-24 16:16:35 -05:00
forgejo/modules/git
zeripath fcb535c5c3
Sign merges, CRUD, Wiki and Repository initialisation with gpg key (#7631)
This PR fixes #7598 by providing a configurable way of signing commits across the Gitea instance. Per repository configurability and import/generation of trusted secure keys is not provided by this PR - from a security PoV that's probably impossible to do properly. Similarly web-signing, that is asking the user to sign something, is not implemented - this could be done at a later stage however.

## Features
- [x] If commit.gpgsign is set in .gitconfig sign commits and files created through repofiles. (merges should already have been signed.)
- [x] Verify commits signed with the default gpg as valid
- [x] Signer, Committer and Author can all be different
    - [x] Allow signer to be arbitrarily different - We still require the key to have an activated email on Gitea. A more complete implementation would be to use a keyserver and mark external-or-unactivated with an "unknown" trust level icon.
- [x] Add a signing-key.gpg endpoint to get the default gpg pub key if available
    - Rather than add a fake web-flow user I've added this as an endpoint on /api/v1/signing-key.gpg
    - [x] Try to match the default key with a user on gitea - this is done at verification time
- [x] Make things configurable?
    - app.ini configuration done
    - [x] when checking commits are signed need to check if they're actually verifiable too
- [x] Add documentation

I have decided that adjusting the docker to create a default gpg key is not the correct thing to do and therefore have not implemented this.
2019-10-16 14:42:42 +01:00
..
tests/repos Fix reading git notes from nested trees (#8026) 2019-09-12 09:14:41 +08:00
blame.go Monitor all git commands; move blame to git package and replace git as a variable (#6864) 2019-06-26 14:15:26 -04:00
blame_test.go Monitor all git commands; move blame to git package and replace git as a variable (#6864) 2019-06-26 14:15:26 -04:00
blob.go Fixes #7292 - API File Contents bug (#7301) 2019-06-29 16:51:10 -04:00
blob_test.go
cache.go
command.go Monitor all git commands; move blame to git package and replace git as a variable (#6864) 2019-06-26 14:15:26 -04:00
command_test.go
commit.go Sign merges, CRUD, Wiki and Repository initialisation with gpg key (#7631) 2019-10-16 14:42:42 +01:00
commit_archive.go
commit_info.go Removed unnecessary conversions (#7557) 2019-07-23 19:50:39 +01:00
commit_info_test.go Fix empty commits now showing in repo overview (#7521) 2019-07-22 15:03:15 +03:00
commit_test.go
error.go
git.go Support git.PATH entry in app.ini (#6772) 2019-07-07 03:26:56 -04:00
git_test.go
hook.go Use gitea forked macaron (#7933) 2019-08-23 12:40:29 -04:00
notes.go Fix reading git notes from nested trees (#8026) 2019-09-12 09:14:41 +08:00
notes_test.go Fix reading git notes from nested trees (#8026) 2019-09-12 09:14:41 +08:00
parse.go Removed unnecessary conversions (#7557) 2019-07-23 19:50:39 +01:00
parse_test.go
README.md
ref.go
repo.go Sign merges, CRUD, Wiki and Repository initialisation with gpg key (#7631) 2019-10-16 14:42:42 +01:00
repo_blame.go Removed unnecessary conversions (#7557) 2019-07-23 19:50:39 +01:00
repo_blob.go Removed unnecessary conversions (#7557) 2019-07-23 19:50:39 +01:00
repo_blob_test.go
repo_branch.go IsBranchExist: return false if provided name is empty (#8485) 2019-10-13 19:29:08 +03:00
repo_branch_test.go
repo_commit.go Search Commits via Commit Hash (#7400) 2019-09-02 19:38:04 -04:00
repo_commit_test.go Be more strict with git arguments (#7715) 2019-08-05 21:39:39 +01:00
repo_commitgraph.go Use gitea forked macaron (#7933) 2019-08-23 12:40:29 -04:00
repo_compare.go Do not fetch all refs (#7797) 2019-08-13 11:30:44 +03:00
repo_compare_test.go
repo_gpg.go Sign merges, CRUD, Wiki and Repository initialisation with gpg key (#7631) 2019-10-16 14:42:42 +01:00
repo_hook.go
repo_index.go Be more strict with git arguments (#7715) 2019-08-05 21:39:39 +01:00
repo_object.go Fixes #7292 - API File Contents bug (#7301) 2019-06-29 16:51:10 -04:00
repo_ref.go Removed unnecessary conversions (#7557) 2019-07-23 19:50:39 +01:00
repo_ref_test.go
repo_stats.go
repo_stats_test.go Added missing error checks in tests (#7554) 2019-07-23 20:28:43 +01:00
repo_tag.go Strict name matching for Repository.GetTagID() (#8074) 2019-09-04 08:48:17 +03:00
repo_tag_test.go Strict name matching for Repository.GetTagID() (#8074) 2019-09-04 08:48:17 +03:00
repo_test.go Monitor all git commands; move blame to git package and replace git as a variable (#6864) 2019-06-26 14:15:26 -04:00
repo_tree.go Sign merges, CRUD, Wiki and Repository initialisation with gpg key (#7631) 2019-10-16 14:42:42 +01:00
sha1.go
signature.go
submodule.go
submodule_test.go
tag.go
tree.go Removed unnecessary conversions (#7557) 2019-07-23 19:50:39 +01:00
tree_blob.go Removed unnecessary conversions (#7557) 2019-07-23 19:50:39 +01:00
tree_entry.go Include "executable" files in the index, as they are not necessarily binary (#7718) 2019-08-02 23:14:50 +08:00
tree_entry_test.go
utils.go Sign merges, CRUD, Wiki and Repository initialisation with gpg key (#7631) 2019-10-16 14:42:42 +01:00

Git Module

This module is merged from https://github.com/go-gitea/git which is a Go module to access Git through shell commands. Now it's a part of gitea's main repository for easier pull request.