debian-mirror-gitlab/doc/raketasks/x509_signatures.md

Ignoring revisions in .git-blame-ignore-revs. Click here to bypass and see the normal blame view.

32 lines
935 B
Markdown
Raw Normal View History

2021-01-29 00:20:46 +05:30
---
stage: Create
group: Source Code
2022-11-25 23:54:43 +05:30
info: To determine the technical writer assigned to the Stage/Group associated with this page, see https://about.gitlab.com/handbook/product/ux/technical-writing/#assignments
2021-01-29 00:20:46 +05:30
---
2023-03-04 22:38:38 +05:30
# X.509 signatures Rake task **(FREE SELF)**
2020-04-22 19:07:51 +05:30
2020-05-24 23:13:21 +05:30
> [Introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/122159) in GitLab 12.10.
2020-04-22 19:07:51 +05:30
2020-05-24 23:13:21 +05:30
When [signing commits with X.509](../user/project/repository/x509_signed_commits/index.md),
the trust anchor might change and the signatures stored within the database must be updated.
2020-04-22 19:07:51 +05:30
2020-05-24 23:13:21 +05:30
## Update all X.509 signatures
2020-04-22 19:07:51 +05:30
2020-05-24 23:13:21 +05:30
This task loops through all X.509 signed commits and updates their verification based on current
certificate store.
To update all X.509 signatures, run:
**Omnibus Installations:**
2020-04-22 19:07:51 +05:30
```shell
sudo gitlab-rake gitlab:x509:update_signatures
```
2020-05-24 23:13:21 +05:30
**Source Installations:**
2020-04-22 19:07:51 +05:30
```shell
sudo -u git -H bundle exec rake gitlab:x509:update_signatures RAILS_ENV=production
```