diff options
| author | brian m. carlson <sandals@crustytoothpaste.net> | 2015-06-21 23:14:40 (GMT) |
|---|---|---|
| committer | Junio C Hamano <gitster@pobox.com> | 2015-06-22 21:20:46 (GMT) |
| commit | 434060ec6d9bf50f095db901da3fb9b557e11df1 (patch) | |
| tree | 7a7dc99fb6b8e1e5eaa566ec4eb5e29ff807e8f2 /gpg-interface.h | |
| parent | 8e98e5f27aba812c0f095b7e546871e14a4139f6 (diff) | |
| download | git-434060ec6d9bf50f095db901da3fb9b557e11df1.zip git-434060ec6d9bf50f095db901da3fb9b557e11df1.tar.gz git-434060ec6d9bf50f095db901da3fb9b557e11df1.tar.bz2 | |
gpg: centralize signature check
verify-commit and verify-tag both share a central codepath for verifying
commits: check_signature. However, verify-tag exited successfully for
untrusted signature, while verify-commit exited unsuccessfully.
Centralize this signature check and make verify-commit adopt the older
verify-tag behavior. This behavior is more logical anyway, as the
signature is in fact valid, whether or not there's a path of trust to
the author.
Signed-off-by: brian m. carlson <sandals@crustytoothpaste.net>
Signed-off-by: Junio C Hamano <gitster@pobox.com>
Diffstat (limited to 'gpg-interface.h')
| -rw-r--r-- | gpg-interface.h | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/gpg-interface.h b/gpg-interface.h index 043bcaa..e2aabde 100644 --- a/gpg-interface.h +++ b/gpg-interface.h @@ -27,7 +27,7 @@ extern int verify_signed_buffer(const char *payload, size_t payload_size, const extern int git_gpg_config(const char *, const char *, void *); extern void set_signing_key(const char *); extern const char *get_signing_key(void); -extern void check_signature(const char *payload, size_t plen, +extern int check_signature(const char *payload, size_t plen, const char *signature, size_t slen, struct signature_check *sigc); #endif |