[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
bug#41787: [PATCH] Disallow SHA1 signatures on commits
|
From: |
Ludovic Courtès |
|
Subject: |
bug#41787: [PATCH] Disallow SHA1 signatures on commits |
|
Date: |
Fri, 12 Jun 2020 18:57:44 +0200 |
|
User-agent: |
Gnus/5.13 (Gnus v5.13) Emacs/26.3 (gnu/linux) |
Ludovic Courtès <ludo@gnu.org> skribis:
>>From e902fdf083627d548541d6cc53643df4071616c7 Mon Sep 17 00:00:00 2001
> From: =?UTF-8?q?Ludovic=20Court=C3=A8s?= <ludo@gnu.org>
> Date: Wed, 10 Jun 2020 14:54:13 +0200
> Subject: [PATCH] git-authenticate: Disallow SHA1 (and MD5) signatures.
>
> * guix/git-authenticate.scm (commit-signing-key): Add
> #:disallowed-hash-algorithms and honor it.
> (authenticate-commit)[recent-commit?]: New variable.
> Pass #:disallowed-hash-algorithms to 'commit-signing-key'.
> * tests/git-authenticate.scm ("signed commits, SHA1 signature"): New test.
Pushed as 52c529ff20b389eb64ac033586e6b1a5c5d82cb5.
Ludo’.