cab6745f53
Revert "make valid_signature an ignored column"
...
This reverts commit cce9afa38a8aa3f3e5a43ab952e1c022c9dd9385.
2017-09-05 14:09:40 +02:00
3ffe35f327
make valid_signature an ignored column
2017-09-05 12:18:34 +02:00
b62c1620ea
drop backwards compatibility for valid_signature
2017-09-05 12:18:33 +02:00
978252a3fa
use new #verification_status
2017-09-05 12:18:33 +02:00
00392d929b
add verification_status: same_user_different_email
...
this is used to make a difference between a committer email that belongs
to user, where the user used a different email for the gpg key. this
means that the user is the same, but a different, unverified email is
used for the signature.
2017-09-05 12:18:32 +02:00
64855c8e30
match the committer's email against the gpg key
...
the updated verification of a gpg signature requires the committer's
email to also match the user's and the key's emails.
2017-09-05 12:18:31 +02:00
508ff17b34
pass whole commit to Gitlab::Gpg::Commit again
...
we need the commit object for the updated verification that also checks
the committer's email to match the gpg key and user's emails.
2017-09-05 12:18:31 +02:00
ba7251fefd
Only create commit GPG signature when necessary
2017-08-16 18:57:50 +02:00
fef030c23d
validate the foreign_key instead of the relation
2017-07-27 15:46:04 +02:00
98531fc248
upcase in the model instead of in the view
2017-07-27 15:46:03 +02:00
8e0c33ed13
use ShaAttribute for gpg table columns
2017-07-27 15:46:03 +02:00
a7d2ebe508
simplify fetching of commit
2017-07-27 15:43:37 +02:00
5d5fd4babe
store gpg_key_primary_keyid for unknown gpg keys
...
we need to store the keyid to be able to update the signature later in
case the missing key is added later.
2017-07-27 15:42:53 +02:00
8236b12dff
gpg signature model for gpg verification caching
2017-07-27 15:42:53 +02:00
Alexis Reigel