forgejo-federation/modules
zeripath fcb535c5c3
Sign merges, CRUD, Wiki and Repository initialisation with gpg key (#7631)
This PR fixes #7598 by providing a configurable way of signing commits across the Gitea instance. Per repository configurability and import/generation of trusted secure keys is not provided by this PR - from a security PoV that's probably impossible to do properly. Similarly web-signing, that is asking the user to sign something, is not implemented - this could be done at a later stage however.

## Features
- [x] If commit.gpgsign is set in .gitconfig sign commits and files created through repofiles. (merges should already have been signed.)
- [x] Verify commits signed with the default gpg as valid
- [x] Signer, Committer and Author can all be different
    - [x] Allow signer to be arbitrarily different - We still require the key to have an activated email on Gitea. A more complete implementation would be to use a keyserver and mark external-or-unactivated with an "unknown" trust level icon.
- [x] Add a signing-key.gpg endpoint to get the default gpg pub key if available
    - Rather than add a fake web-flow user I've added this as an endpoint on /api/v1/signing-key.gpg
    - [x] Try to match the default key with a user on gitea - this is done at verification time
- [x] Make things configurable?
    - app.ini configuration done
    - [x] when checking commits are signed need to check if they're actually verifiable too
- [x] Add documentation

I have decided that adjusting the docker to create a default gpg key is not the correct thing to do and therefore have not implemented this.
2019-10-16 14:42:42 +01:00
..
auth Fix errors in create org UI regarding team access permission. (#8506) 2019-10-14 19:20:42 +01:00
avatar Improve handling of non-square avatars (#7025) 2019-05-25 14:46:14 +03:00
base Use gitea forked macaron (#7933) 2019-08-23 12:40:29 -04:00
cache Use gitea forked macaron (#7933) 2019-08-23 12:40:29 -04:00
charset Reduce test sensibility (#8393) 2019-10-07 01:49:14 -04:00
context Ensure that GitRepo is set on Empty repositories (#8539) 2019-10-16 16:08:01 +03:00
cron Update migrated repositories' issues/comments/prs poster id if user has a github external user saved (#7751) 2019-10-14 09:10:42 +03:00
generate Integrate OAuth2 Provider (#5378) 2019-03-08 11:42:50 -05:00
git Sign merges, CRUD, Wiki and Repository initialisation with gpg key (#7631) 2019-10-16 14:42:42 +01:00
graceful Restore Graceful Restarting & Socket Activation (#7274) 2019-10-15 14:39:51 +01:00
gzip Use gitea forked macaron (#7933) 2019-08-23 12:40:29 -04:00
highlight Add a lot of extension to language mappings for syntax highlights (#7741) 2019-08-05 23:48:31 +08:00
httplib Add golangci (#6418) 2019-06-12 15:41:28 -04:00
indexer Restore Graceful Restarting & Socket Activation (#7274) 2019-10-15 14:39:51 +01:00
lfs Ensure Request Body Readers are closed in LFS server (#8454) 2019-10-10 18:42:28 +01:00
log Fix data race (#8204) 2019-09-17 12:39:37 +03:00
markup Support inline rendering of CUSTOM_URL_SCHEMES (#8496) 2019-10-15 02:31:09 +01:00
metrics Prometheus endpoint (#5256) 2018-11-04 22:20:00 -05:00
migrations Update migrated repositories' issues/comments/prs poster id if user has a github external user saved (#7751) 2019-10-14 09:10:42 +03:00
minwinsvc Fix Git hooks not being executed on Windows when running as a service (#1149) 2017-03-09 09:27:43 +08:00
notification Move clearlabels from models to issue service (#8326) 2019-10-15 13:03:05 +08:00
options Use gitea forked macaron (#7933) 2019-08-23 12:40:29 -04:00
password Fix password complexity regex for special characters (on master) (#8525) 2019-10-16 11:09:58 +08:00
pprof Add golangci (#6418) 2019-06-12 15:41:28 -04:00
private Attempt to fix hook problem (#7854) 2019-08-14 12:25:05 +03:00
process Restore functionality for early gits (#7775) 2019-10-12 08:13:27 +08:00
public Use gitea forked macaron (#7933) 2019-08-23 12:40:29 -04:00
recaptcha Allow Recaptcha service url to be configured (#6820) 2019-05-02 16:09:39 +03:00
references Rewrite reference processing code in preparation for opening/closing from comment references (#8261) 2019-10-13 23:29:10 +01:00
repofiles Sign merges, CRUD, Wiki and Repository initialisation with gpg key (#7631) 2019-10-16 14:42:42 +01:00
search Global code search support (#3664) 2018-03-16 22:04:33 +08:00
secret Integrate OAuth2 Provider (#5378) 2019-03-08 11:42:50 -05:00
session Use gitea forked macaron (#7933) 2019-08-23 12:40:29 -04:00
setting Sign merges, CRUD, Wiki and Repository initialisation with gpg key (#7631) 2019-10-16 14:42:42 +01:00
ssh Restore Graceful Restarting & Socket Activation (#7274) 2019-10-15 14:39:51 +01:00
structs Sign merges, CRUD, Wiki and Repository initialisation with gpg key (#7631) 2019-10-16 14:42:42 +01:00
sync Use gitea forked macaron (#7933) 2019-08-23 12:40:29 -04:00
task Move migrating repository from frontend to backend (#6200) 2019-10-13 21:23:14 +08:00
templates upgrade gopkg.in/editorconfig/editorconfig-core-go.v1 (#8501) 2019-10-15 22:24:16 +01:00
test Use gitea forked macaron (#7933) 2019-08-23 12:40:29 -04:00
timeutil Use gitea forked macaron (#7933) 2019-08-23 12:40:29 -04:00
upload Fix upload file type check (#7890) 2019-08-17 13:10:17 +03:00
user Add golangci (#6418) 2019-06-12 15:41:28 -04:00
util Enable Uploading/Removing Attachments When Editing an Issue/Comment (#8426) 2019-10-15 13:19:32 +01:00
validation Implement webhook branch filter (#7791) 2019-09-09 08:48:21 +03:00