89 Commits (0b003e1ff7e09b56cd013b15f1998495994b7211)

Author	SHA1	Message	Date
Matt Corallo	99f6d48e23	Revert "test: Update trust git root". ... This reverts commit 7deba93bdc. This is neither a "test" change, nor should the trusted-git-root have been updated - there is a process for expired PGP keys.	7 years ago
Pieter Wuille	577f11141c	Make verify-commits.sh test that merges are clean	7 years ago
Wladimir J. van der Laan	7deba93bdc	test: Update trust git root ... Marco Falke's old key expired, causing a travis error while verifying commits 36afd4db44 and before: gpg: Good signature from "Marco Falke <marco.falke@tum.de>" [unknown] gpg: aka "Marco Falke <falke.marco@gmail.com>" [unknown] gpg: Note: This key has expired! Primary key fingerprint: B8B3 F1C0 E58C 15DB 6A81 D30C 3648 A882 F431 6B9B Subkey fingerprint: FE09 B823 E6D8 3A3B C798 3EAA 2D7F 2372 E50F E137 Update the trusted root commit to the commit after that, to fix this issue. Tree-SHA512: 41e5913728099b131f73f8b4621cf6474d8914b2ffd524be8bac356426820f58016cc427fb32d043367688c8dbb60c26a7e34756589b61d0ba4ca3f8529a300f	7 years ago
Matt Corallo	a38686cea0	[verify-commits] Fix gpg.sh's echoing for commits with '\n'	7 years ago
Pieter Wuille	c17f11f7b4	Merge #10773: Shell script cleanups ... 13a81b19d Add quotes to variable assignment (as requested by @TheBlueMatt) (practicalswift) 683b9d280 Fix valid path output (practicalswift) 193c2fb4c Use bash instead of POSIX sh. POSIX sh does not support arrays. (practicalswift) 80f5f28d3 Fix incorrect quoting of quotes (the previous quotes had no effect beyond unquoting) (practicalswift) 564a172df Add required space to [[ -n "$1" ]] (previously [[ -n"$1" ]]) (practicalswift) 1e44ae0e1 Add error handling: exit if cd fails (practicalswift) b9e79ab41 Remove "\n" from echo argument. echo does not support escape sequences. (practicalswift) f6b3382fa Remove unused variables (practicalswift) Pull request description: Shell script cleanups: * Add required space to `[ -n ]`. * Avoid quote within quote. * Exit if `cd` fails. * Remove `\n` which is not handled by `echo`. * ~~Remove redundant `$` in arithmetic variable expression.~~ * ~~Use `$(command)` instead of legacy form `` `command` ``.~~ * Arrays are not supported in POSIX `sh`. Use `bash` when arrays are used. * ~~`[ foo -a bar ]` is not well defined, use `[ foo ] && [ bar ]` instead.~~ * ~~`[ foo -o bar ]` is not well defined, use `[ foo ] || [ bar ]` instead.~~ Tree-SHA512: 80f6ded58bce625b15b4da30d69d2714c633e184e62b21ed67d2c58e2ebaa08b4147593324012694d02bf4f1f252844cdff2fd1cf5e817ddb07e2777db7a6390	7 years ago
Wladimir J. van der Laan	23e9074e0a	Merge #10771: Remove unused variables in shell scripts ... ab8e8b9 Remove unused variables in shell scripts. (practicalswift) Pull request description: Remove unused variables in shell scripts. Use `_` where we don't care about the result. Tree-SHA512: 35049e79ee432c805f061456c32902a92811b5214d50ce6770b22d1442cc5999ed53cfe05bb2347f6995ca33c707a0f3fe92d5829c0385c4a3e254953924cbc4	7 years ago
Matt Corallo	d23be309c2	[verify-commits] Allow revoked keys to expire	7 years ago
practicalswift	13a81b19df	Add quotes to variable assignment (as requested by @TheBlueMatt)	7 years ago
practicalswift	683b9d280b	Fix valid path output	7 years ago
practicalswift	80f5f28d38	Fix incorrect quoting of quotes (the previous quotes had no effect beyond unquoting)	7 years ago
practicalswift	f6b3382fa3	Remove unused variables	7 years ago
practicalswift	0aacfa43c1	Remove accidental stray semicolon	7 years ago
practicalswift	ab8e8b97a3	Remove unused variables in shell scripts.	7 years ago
Matt Corallo	df5bae2e7b	Update trusted-sha512-root-commit for new bad tree hash	8 years ago
Matt Corallo	efc06c2c46	If GNU sha512sum is missing, try perl shasum in verify-commits	8 years ago
Matt Corallo	fd5e905e21	Make verify-commits.sh non-recursive	8 years ago
Matt Corallo	b3ec305f8e	Fix bashisms in verify-commits and always check top commit's tree	8 years ago
Matt Corallo	f20e664f40	Check gpg version before setting --weak-digest	8 years ago
Matt Corallo	bbd757940b	Fix regsig checking for subkey sigs in verify-commits	8 years ago
Matt Corallo	d025bc7964	Allow any subkey in verify-commits	8 years ago
Peter Todd	eddc77a1b1	Add comment re: why SHA1 is disabled	8 years ago
Matt Corallo	d9c450ffb2	Verify Tree-SHA512s in merge commits, enforce sigs are not SHA1	8 years ago
Matt Corallo	a4b02f4275	Add Pieter's old signed commits to revsig-commits	8 years ago
Matt Corallo	3e900acafa	Require merge commits merge branches on top of other merge commits ... Specifically, require that the left branch (first restult of git show -s --format=format:%P) is a signed merge commit, instead of allowing either. This is fine for now, but might need to be relaxed in the future. Also fixes an out-of-file-descriptors issue by holding too many open FDs writing to /dev/null	8 years ago
isle2983	0766d1cac3	[copyright] add MIT license headers to .sh scripts where missing ... Years are set according to 'git log' history	8 years ago
Peter Todd	1e9aab0dbf	Remove sipa's old revoked key from verify-commits ... Now that the trusted root is past all commits signed by that key we don't need it in the trusted-keys list, nor do we need to whitelist those commits in allow-revsig-commits	9 years ago
Peter Todd	966151e71d	Add README for verify-commits	9 years ago
Peter Todd	11164ec0b4	Remove keys that are no longer used for merging ... Also updated trusted git root to be right after gmaxwell's last merge.	9 years ago
Peter Todd	22421faa19	Remove pointless warning ... Any attacker who managed to make an evil commit that changed something in the contrib/verify-commits/ directory could just as easily remove the warning and/or modify it to not display the evil commits; telling the user to check those commits specifically misleads them into checking just those commits rather than the script itself.	9 years ago
Matt Corallo	9523e8adaf	Make verify-commits path-independent	9 years ago
Matt Corallo	f7d4a25fe6	Make verify-commits POSIX-compliant	9 years ago
MarcoFalke	fa24329334	[contrib] verify-commits: Add MarcoFalke fingerprint	9 years ago
Jonas Schnelli	a5bc8de1ba	add jonasschnellis key to git-verify-commits trusted-keys	9 years ago
Matt Corallo	9ea7762e2c	Use Pieter's signing subkey instead of his primary key ... This commit is signed.	9 years ago
Matt Corallo	6e800c2b41	Add Pieter's new PGP key to verify-commits/trusted-keys	9 years ago
Matt Corallo	1d94b72019	Whitelist commits signed with Pieter's now-revoked key	9 years ago
Matt Corallo	27252b7389	Fix pre-push-hook regexes	9 years ago
Matt Corallo	0186228d61	Update trusted-git-root to the most recent unsigned commit	9 years ago
Matt Corallo	adaa568722	Add script to verify all merge commits are signed	10 years ago