bug-cvs
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [task #4633] GPG-Signed Commits


From: Derek Price
Subject: Re: [task #4633] GPG-Signed Commits
Date: Fri, 23 Sep 2005 14:35:31 -0400
User-agent: Mozilla Thunderbird 1.0.6 (Windows/20050716)

Just a quick RFC on how this will integrate into the CVS command line &
config.  I'm thinking that signing will be off by default, with a simple
`-g' global option to enable it.

Since adding -g to a .cvsrc might not be acceptable for users that work
with multiple roots, I think this should also be implemented as a method
option that can be added to a CVSROOT string
<http://ximbiot.com/cvs/wiki/index.php?title=CVS--Concurrent_Versions_System_v1.12.12.1:_The_Repository#The_connection_method>.

Servers would have a three-level GPG requirement setting in CVSROOT/config:

    RequireGPGCommitSignatures=(no|yes|verify)

Where `no' means signatures are allowed but not required, `yes' means
signatures are required, and `verify' means that signatures are required
and that the server verifies that submitted signatures are valid before
allowing a commit.

Regards,

Derek

-- 
Derek R. Price
CVS Solutions Architect
Ximbiot <http://ximbiot.com>
v: +1 717.579.6168
f: +1 717.234.3125
<mailto:address@hidden>






reply via email to

[Prev in Thread] Current Thread [Next in Thread]