4 ms·
It appears that the GPG support doesn't support subkey signing, commits signed with my signing subkey do not show as verified, while the same commit on GitHub d
by jakebasile 9y ago
It appears that the GPG support doesn't support subkey signing, commits signed with my signing subkey do not show as verified, while the same commit on GitHub does. Both GitHub and GitLab have the same public key export available, and the same email addresses verified.
Examples:
https://gitlab.com/jakebasile/gpg-sign-test/commits/master https://gitlab.com/jakebasile/gpg-sign-test/commits/master
https://github.com/jakebasile/gpg-sign-test/commits/master https://github.com/jakebasile/gpg-sign-test/commits/master
Edit: it is possible I am just doing something wrong, I don't routinely sign commits. But seeing as the exact same commit in GitHub shows as verified I think there is a problem here.
- kiallmacinnes 9y agoIt wouldn't surprise me at all if subkeys got missed in v1 of the feature, it's rare to use gpg, and even rarer to use subkeys :) I'm sure if you file a bug with the details, they'll sort it it!
- jakebasile 9y agoLooks like someone beat me to it! https://gitlab.com/gitlab-org/gitlab-ce/issues/36829 https://gitlab.com/gitlab-org/gitlab-ce/issues/36829