X509 signatures

When signing commits with x509, the trust anchor might change and the signatures stored within the database must be updated.

Update all x509 signatures

This task loops through all X509 signed commits and updates their verification based on current certificate store.

To update all x509 signatures, run:

Omnibus Installation

sudo gitlab-rake gitlab:x509:update_signatures

Source Installation

sudo -u git -H bundle exec rake gitlab:x509:update_signatures RAILS_ENV=production