Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S261694AbVDWSq2 (ORCPT ); Sat, 23 Apr 2005 14:46:28 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S261697AbVDWSq2 (ORCPT ); Sat, 23 Apr 2005 14:46:28 -0400 Received: from DELFT.AURA.CS.CMU.EDU ([128.2.206.88]:55214 "EHLO delft.aura.cs.cmu.edu") by vger.kernel.org with ESMTP id S261686AbVDWSqV (ORCPT ); Sat, 23 Apr 2005 14:46:21 -0400 Date: Sat, 23 Apr 2005 14:46:13 -0400 To: Linus Torvalds Cc: Thomas Glanzmann , David Woodhouse , Jan Dittmer , Greg KH , Kernel Mailing List , Git Mailing List Subject: Re: Git-commits mailing list feed. Message-ID: <20050423184613.GE20410@delft.aura.cs.cmu.edu> Mail-Followup-To: Linus Torvalds , Thomas Glanzmann , David Woodhouse , Jan Dittmer , Greg KH , Kernel Mailing List , Git Mailing List References: <200504210422.j3L4Mo8L021495@hera.kernel.org> <42674724.90005@ppp0.net> <20050422002922.GB6829@kroah.com> <426A4669.7080500@ppp0.net> <1114266083.3419.40.camel@localhost.localdomain> <426A5BFC.1020507@ppp0.net> <1114266907.3419.43.camel@localhost.localdomain> <20050423175422.GA7100@cip.informatik.uni-erlangen.de> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.9i From: Jan Harkes Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1373 Lines: 38 On Sat, Apr 23, 2005 at 11:30:36AM -0700, Linus Torvalds wrote: > On Sat, 23 Apr 2005, Thomas Glanzmann wrote: > > # This creates the signature. > > gpg --clearsign < sign_this > signature > > This really doesn't work for me - I do not want to have the gpg header > above it, only the signature below. Since I want git to actually > understand the tags, but do _not_ want git to have to know about whatever > signing method was used, I really want the resulting file to look like > > commit .... > tag ... > > here goes comment > here goes signature > > and no headers. > > Whether that can be faked by always forcing SHA1 as the hash, and then > just removing the top lines, and re-inserting them when verifying, or > whether there is some mode to make gpg not do the header crud at all, I > don't know. Which is exactly why I never even got started. It is a bit more messy, but it can be done with a detached signature. To sign, gpg -ab unsigned_commit cat unsigned_commit unsigned_commit.asc > signed_commit To verify, cat signed_commit | sed '/-----BEGIN PGP/Q' | gpg --verify signed_commit - Jan - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/