You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
zeripath
fcb535c5c3
Sign merges, CRUD, Wiki and Repository initialisation with gpg key ( #7631 ) ...
This PR fixes #7598 by providing a configurable way of signing commits across the Gitea instance. Per repository configurability and import/generation of trusted secure keys is not provided by this PR - from a security PoV that's probably impossible to do properly. Similarly web-signing, that is asking the user to sign something, is not implemented - this could be done at a later stage however.
## Features
- [x] If commit.gpgsign is set in .gitconfig sign commits and files created through repofiles. (merges should already have been signed.)
- [x] Verify commits signed with the default gpg as valid
- [x] Signer, Committer and Author can all be different
- [x] Allow signer to be arbitrarily different - We still require the key to have an activated email on Gitea. A more complete implementation would be to use a keyserver and mark external-or-unactivated with an "unknown" trust level icon.
- [x] Add a signing-key.gpg endpoint to get the default gpg pub key if available
- Rather than add a fake web-flow user I've added this as an endpoint on /api/v1/signing-key.gpg
- [x] Try to match the default key with a user on gitea - this is done at verification time
- [x] Make things configurable?
- app.ini configuration done
- [x] when checking commits are signed need to check if they're actually verifiable too
- [x] Add documentation
I have decided that adjusting the docker to create a default gpg key is not the correct thing to do and therefore have not implemented this.
5 years ago
..
fixtures
Move migrating repository from frontend to backend ( #6200 )
5 years ago
migrations
Update migrated repositories' issues/comments/prs poster id if user has a github external user saved ( #7751 )
5 years ago
access.go
Recalculate repository access only for specific user ( #8481 )
5 years ago
access_test.go
…
action.go
Move sync mirror actions to mirror service package ( #8518 )
5 years ago
action_list.go
…
action_test.go
Rewrite reference processing code in preparation for opening/closing from comment references ( #8261 )
5 years ago
admin.go
…
admin_test.go
…
attachment.go
Extract actions on deletereleasebyid from models to release service ( #8219 )
5 years ago
attachment_test.go
…
branches.go
Allow users with explicit read access to give approvals ( #8382 )
5 years ago
branches_test.go
…
commit_status.go
Refuse merge until all required status checks success ( #7481 )
5 years ago
commit_status_test.go
…
consistency.go
…
context.go
Move all mail related codes from models to services/mailer ( #7200 )
5 years ago
convert.go
…
error.go
Transaction-aware retry create issue to cope with duplicate keys ( #8307 )
5 years ago
error_oauth2.go
…
external_login_user.go
fix bug on FindExternalUsersByProvider ( #8504 )
5 years ago
gpg_key.go
Sign merges, CRUD, Wiki and Repository initialisation with gpg key ( #7631 )
5 years ago
gpg_key_test.go
…
graph.go
Add pagination to commit graph page ( #8360 )
5 years ago
graph_test.go
Add pagination to commit graph page ( #8360 )
5 years ago
helper.go
…
helper_directory.go
…
helper_environment.go
…
issue.go
Enable Uploading/Removing Attachments When Editing an Issue/Comment ( #8426 )
5 years ago
issue_assignees.go
…
issue_assignees_test.go
…
issue_comment.go
Enable Uploading/Removing Attachments When Editing an Issue/Comment ( #8426 )
5 years ago
issue_comment_list.go
…
issue_comment_test.go
…
issue_dependency.go
…
issue_dependency_test.go
…
issue_label.go
Fix label count ( #8267 )
5 years ago
issue_label_test.go
Fix label count ( #8267 )
5 years ago
issue_list.go
…
issue_list_test.go
…
issue_lock.go
Move change issue title from models to issue service package ( #8456 )
5 years ago
issue_milestone.go
Update milestone issues numbers when save milestone and other code improvements ( #8411 )
5 years ago
issue_milestone_test.go
Fix milestone num_issues ( #8221 )
5 years ago
issue_reaction.go
…
issue_reaction_test.go
…
issue_stopwatch.go
…
issue_stopwatch_test.go
…
issue_test.go
Move change issue title from models to issue service package ( #8456 )
5 years ago
issue_tracked_time.go
…
issue_tracked_time_test.go
…
issue_user.go
Move all mail related codes from models to services/mailer ( #7200 )
5 years ago
issue_user_test.go
Move all mail related codes from models to services/mailer ( #7200 )
5 years ago
issue_watch.go
…
issue_watch_test.go
…
issue_xref.go
Rewrite reference processing code in preparation for opening/closing from comment references ( #8261 )
5 years ago
lfs.go
…
lfs_lock.go
…
log.go
…
login_source.go
…
main_test.go
…
migrate.go
…
models.go
Move migrating repository from frontend to backend ( #6200 )
5 years ago
models_test.go
…
notification.go
…
notification_test.go
…
oauth2.go
migrate gplus to google oauth2 provider ( #7885 )
5 years ago
oauth2_application.go
…
oauth2_application_test.go
…
org.go
Add teams to repo on collaboration page. ( #8045 )
5 years ago
org_team.go
Recalculate repository access only for specific user ( #8481 )
5 years ago
org_team_test.go
…
org_test.go
Add teams to repo on collaboration page. ( #8045 )
5 years ago
pull.go
Move AddTestPullRequestTask to pull service package from models ( #8324 )
5 years ago
pull_test.go
…
release.go
Update migrated repositories' issues/comments/prs poster id if user has a github external user saved ( #7751 )
5 years ago
repo.go
Sign merges, CRUD, Wiki and Repository initialisation with gpg key ( #7631 )
5 years ago
repo_activity.go
…
repo_branch.go
…
repo_collaboration.go
Recalculate repository access only for specific user ( #8481 )
5 years ago
repo_collaboration_test.go
Add teams to repo on collaboration page. ( #8045 )
5 years ago
repo_indexer.go
Restore Graceful Restarting & Socket Activation ( #7274 )
5 years ago
repo_issue.go
…
repo_list.go
…
repo_list_test.go
Restrict repository indexing by glob match ( #7767 )
5 years ago
repo_mirror.go
Move mirror to a standalone package from models ( #7486 )
5 years ago
repo_permission.go
…
repo_permission_test.go
…
repo_redirect.go
…
repo_redirect_test.go
…
repo_sign.go
Sign merges, CRUD, Wiki and Repository initialisation with gpg key ( #7631 )
5 years ago
repo_tag.go
…
repo_test.go
…
repo_unit.go
…
repo_watch.go
…
repo_watch_test.go
…
review.go
…
review_test.go
…
ssh_key.go
Fixes #8369 : Create .ssh dir as necessary ( #8486 )
5 years ago
ssh_key_test.go
…
star.go
…
star_test.go
…
task.go
Move migrating repository from frontend to backend ( #6200 )
5 years ago
test_fixtures.go
…
token.go
…
token_test.go
…
topic.go
…
topic_test.go
…
twofactor.go
…
u2f.go
…
u2f_test.go
…
unit.go
…
unit_tests.go
…
update.go
…
update_test.go
…
upload.go
…
user.go
Revert "Fix issues/pr list broken when there are many repositories ( #8409 )" ( #8427 )
5 years ago
user_follow.go
…
user_follow_test.go
…
user_heatmap.go
…
user_heatmap_test.go
…
user_mail.go
…
user_mail_test.go
…
user_openid.go
…
user_openid_test.go
…
user_test.go
Revert "Fix issues/pr list broken when there are many repositories ( #8409 )" ( #8427 )
5 years ago
userlist.go
Add teams to repo on collaboration page. ( #8045 )
5 years ago
userlist_test.go
…
webhook.go
Fix webhooks to use proxy from environment ( #8116 )
5 years ago
webhook_dingtalk.go
…
webhook_discord.go
…
webhook_msteams.go
MS Teams webhook misses commit messages ( #8209 )
5 years ago
webhook_slack.go
…
webhook_telegram.go
…
webhook_test.go
Implement webhook branch filter ( #7791 )
5 years ago
wiki.go
Sign merges, CRUD, Wiki and Repository initialisation with gpg key ( #7631 )
5 years ago
wiki_test.go
…
zeripath