A first implementation of commit signature verification.
Using git show <commit> --pretty'%GF' --raw we are able to verify that a commit has a valid signature and return the corresponding fingerprint.
On the other side we obtain all the peers from the seed node and check if they match the commit signature information.
At the moment we only verify ssh signatures that match a valid Person later we eventually will verify GPG signatures or third party SSH signatures.
A first implementation of commit signature verification.
Using
git show <commit> --pretty'%GF' --raw
we are able to verify that a commit has a valid signature and return the corresponding fingerprint. On the other side we obtain all the peers from the seed node and check if they match the commit signature information.At the moment we only verify ssh signatures that match a valid
Person
later we eventually will verify GPG signatures or third party SSH signatures.