packaging/ostree
1
0 Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

pull: Verify commits with gpg signatures from detached metadata

Browse Source 
This uses gpgv for verification against DATADIR/ostree/pubring.gpg by
default.  The keyring can be overridden by specifying OSTREE_GPG_HOME.

Add a unit test for commit signing with gpg key and verifying on pull;
to implement this we ship a test GPG key generated with no password
for Ostree Tester <test@test.com>.

Change all of the existing tests to disable GPG verification.
This commit is contained in:
Jeremy Whiting authored and Colin Walters committed 2013-09-29 14:49:47 -04:00
1 parent b064581577
commit 7f9eefb62d
19 files changed
+657 -10
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

src/libostree/README-gpg
+2
View File
@@ -0,0 +1,2 @@
Any GPG keyring files ending in ".gpg" placed in this directory will
be automatically trusted by OSTree.