3 commits

Author	SHA1	Message	Date
Alexis Reigel	7b616d39ef	gpg signature is only valid when key is verified	2017-07-27 15:42:53 +02:00
Alexis Reigel	8c4b6a32fc	bail if the commit has no signature	2017-07-27 15:42:53 +02:00
Alexis Reigel	69e511c4c2	cache the gpg commit signature ... we store the result of the gpg commit verification in the db because the gpg verification is an expensive operation.	2017-07-27 15:42:53 +02:00