git/git-verify-tag.sh

#!/bin/sh
. git-sh-setup

type="$(git-cat-file -t "$1" 2>/dev/null)" ||
	die "$1: no such object."

test "$type" = tag ||
	die "$1: cannot verify a non-tag object of type $type."

git-cat-file tag "$1" > .tmp-vtag || exit 1
cat .tmp-vtag | sed '/-----BEGIN PGP/Q' | gpg --verify .tmp-vtag - || exit 1
rm -f .tmp-vtag
Add git-verify-tag script Here is a script to simplify validating the gpg signature created by git-tag-script. Might be useful to add to the git tree so that people don't have to search for the right post in the git mailinglist archives 2005-06-27 00:38:47 +00:00			`#!/bin/sh`
git-sh-setup: die if outside git repository. Now all the users of this script detect its exit status and die, complaining that it is outside git repository. So move the code that dies from all callers to git-sh-setup script. Signed-off-by: Junio C Hamano <junkio@cox.net> 2005-11-24 08:12:11 +00:00			`. git-sh-setup`
Add git-verify-tag script Here is a script to simplify validating the gpg signature created by git-tag-script. Might be useful to add to the git tree so that people don't have to search for the right post in the git mailinglist archives 2005-06-27 00:38:47 +00:00
Fix git-verify-tag for light-weight tags It currently exits printing "git-cat-file SHA1: bad file", while instead we must just abort the verification for light-weight tags (e.g. referring to commit objects). [jc: tag objects can tag anything not just commits, so I fixed up the original patch slightly. you should be able to validate a signed tag that points at a blob object. ] Signed-off-by: Paolo 'Blaisorblade' Giarrusso <blaisorblade@yahoo.it> Signed-off-by: Junio C Hamano <junkio@cox.net> 2005-10-09 23:50:34 +00:00			`type="$(git-cat-file -t "$1" 2>/dev/null)" \|\|`
			`die "$1: no such object."`
Add git-verify-tag script Here is a script to simplify validating the gpg signature created by git-tag-script. Might be useful to add to the git tree so that people don't have to search for the right post in the git mailinglist archives 2005-06-27 00:38:47 +00:00
Fix git-verify-tag for light-weight tags It currently exits printing "git-cat-file SHA1: bad file", while instead we must just abort the verification for light-weight tags (e.g. referring to commit objects). [jc: tag objects can tag anything not just commits, so I fixed up the original patch slightly. you should be able to validate a signed tag that points at a blob object. ] Signed-off-by: Paolo 'Blaisorblade' Giarrusso <blaisorblade@yahoo.it> Signed-off-by: Junio C Hamano <junkio@cox.net> 2005-10-09 23:50:34 +00:00			`test "$type" = tag \|\|`
			`die "$1: cannot verify a non-tag object of type $type."`

			`git-cat-file tag "$1" > .tmp-vtag \|\| exit 1`
[PATCH] Cleanup: git-verify-tag-script - Use git-rev-parse to allow sha1 tags references - When the tag does not verify set an appropriate exit status - Use git-sh-setup-script to verify the .git directory Signed-off-by: Eric W. Biederman <ebiederm@xmission.com> Signed-off-by: Junio C Hamano <junkio@cox.net> Signed-off-by: Linus Torvalds <torvalds@osdl.org> 2005-07-16 20:18:40 +00:00			`cat .tmp-vtag \| sed '/-----BEGIN PGP/Q' \| gpg --verify .tmp-vtag - \|\| exit 1`
Add git-verify-tag script Here is a script to simplify validating the gpg signature created by git-tag-script. Might be useful to add to the git tree so that people don't have to search for the right post in the git mailinglist archives 2005-06-27 00:38:47 +00:00			`rm -f .tmp-vtag`