{"thread":{"id":"42816","subject":"Commits are no longer gpg-signed in 2.9.0 when \"commit.gpgsign\" is enabled","startedAt":"2016-07-11T11:29:24Z","lastAt":"2016-07-11T18:09:36Z","messageCount":5,"participants":["Nils Fenner","Santiago Torres","Junio C Hamano"],"isPatch":false,"patchVersion":null,"patchTotal":null},"messages":[{"id":"291163","messageId":"57838306.5090505@web.de","threadId":"42816","inReplyTo":null,"subject":"Commits are no longer gpg-signed in 2.9.0 when \"commit.gpgsign\" is enabled","fromName":"Nils Fenner","fromEmail":"nilsfenner@web.de","sentAt":"2016-07-11T11:29:10Z","receivedAt":"2016-07-11T11:29:24Z","isPatch":false,"sender":{"key":"nilsfenner@web.de","avatar":null},"body":"Hey Git community,\n\nsince Version 2.9.0, the configuration option \"commit.gpgsign\" doesn't \nwork as users would expect. By committing via 'git gui' (or usual 'git \ncommit' without further option), commits are not being auto-signed any \nlonger, when \"commit.gpgSign\" configuration option is set. I also \ncouldn't find a flag to \"workaround\" that situation in the GUI. To my \nunderstanding, I now have to pass the '-S' option to 'git commit' every \ntime and GUI becomes \"impractical to use\". Surprisingly, nobody seems \nhaving noticed this behavioural change since the release of 2.9.\n\nFYI: In the release log, there's a note stating, that this has been \naltered in the context of 'git commit-tree'. Maybe this interferes with \n\"normal\" behaviour.\n\nWould be happy hearing from you soon. Thanks!\n\nCheers,\nNils\n\n\n"},{"id":"291168","messageId":"20160711144420.nsibnudjxvgdz7cl@LykOS.localdomain","threadId":"42816","inReplyTo":"57838306.5090505@web.de","subject":"Re: Commits are no longer gpg-signed in 2.9.0 when \"commit.gpgsign\" is enabled","fromName":"Santiago Torres","fromEmail":"santiago@nyu.edu","sentAt":"2016-07-11T14:44:21Z","receivedAt":"2016-07-11T14:45:13Z","isPatch":false,"sender":{"key":"santiago@nyu.edu","avatar":"https://avatars.githubusercontent.com/u/3579933?v=4"},"body":"Hi Nils,\n\nI just checked and I have commits made in 2.9 with this option set and I\ndon't seem to have your issue. Here's what I did:\n\n santiago at ~/test-signing ✔ git init\n Initialized empty Git repository in /home/santiago/test-signing/.git/\n santiago at ~/test-signing ✔ hub create\n Updating origin\n Enter passphrase for key '/home/santiago/.ssh/id_rsa': \n created repository: SantiagoTorres/test-signing\n santiago at ~/test-signing ✔ touch testfile\n santiago at ~/test-signing ✔ git add testfile \n santiago at ~/test-signing ✔ git commit\n i[master (root-commit) 6de1ad2] TEST: tests git autocommit setting\n 1 file changed, 0 insertions(+), 0 deletions(-)\n create mode 100644 testfile\n santiago at ~/test-signing ✔ git log --show-signature\n commit 6de1ad20237f042433f8b94a3bf8c7cc41711d90 (HEAD -> refs/heads/master)\n gpg: Signature made Mon 11 Jul 2016 10:40:41 AM EDT using RSA key ID 468F122CE8162295\n gpg: Good signature from \"Santiago Torres \" [ultimate]\n gpg: aka \"Santiago Torres-Arias \" [ultimate]\n Author: Santiago Torres \n Date: Mon Jul 11 10:40:32 2016 -0400\n\n TEST: tests git autocommit setting\n santiago at ~/test-signing ✔ git push origin master\n Enter passphrase for key '/home/santiago/.ssh/id_rsa': \n Counting objects: 3, done.\n Writing objects: 100% (3/3), 879 bytes | 0 bytes/s, done.\n Total 3 (delta 0), reused 0 (delta 0)\n To git@github.com:SantiagoTorres/test-signing.git\n * [new branch] master -> master\n santiago at ~/test-signing ✔ git --version\n git version 2.9.0\n santiago at ~/test-signing ✔ \n\nYou can check the github repository \n\nDo you have a mwe/.gitconfig so I can take a look at it? \n\nI wonder if this issue is similar to what happened in mutt, where gpg\ndoesn't show the password prompt using gpg-agent and it silently failed.\n\nThanks,\n-Santiago.\n\nOn Mon, Jul 11, 2016 at 01:29:10PM +0200, Nils Fenner wrote:\n> Hey Git community,\n> \n> since Version 2.9.0, the configuration option \"commit.gpgsign\" doesn't work\n> as users would expect. By committing via 'git gui' (or usual 'git commit'\n> without further option), commits are not being auto-signed any longer, when\n> \"commit.gpgSign\" configuration option is set. I also couldn't find a flag to\n> \"workaround\" that situation in the GUI. To my understanding, I now have to\n> pass the '-S' option to 'git commit' every time and GUI becomes \"impractical\n> to use\". Surprisingly, nobody seems having noticed this behavioural change\n> since the release of 2.9.\n> \n> FYI: In the release log, there's a note stating, that this has been altered\n> in the context of 'git commit-tree'. Maybe this interferes with \"normal\"\n> behaviour.\n> \n> Would be happy hearing from you soon. Thanks!\n> \n> Cheers,\n> Nils\n> \n> \n> --\n> To unsubscribe from this list: send the line \"unsubscribe git\" in\n> the body of a message to majordomo@vger.kernel.org\n> More majordomo info at http://vger.kernel.org/majordomo-info.html\n"},{"id":"291170","messageId":"5783C90D.1010909@web.de","threadId":"42816","inReplyTo":"20160711144420.nsibnudjxvgdz7cl@LykOS.localdomain","subject":"Re: Commits are no longer gpg-signed in 2.9.0 when \"commit.gpgsign\" is enabled","fromName":"Nils Fenner","fromEmail":"nilsfenner@web.de","sentAt":"2016-07-11T16:27:57Z","receivedAt":"2016-07-11T16:28:21Z","isPatch":false,"sender":{"key":"nilsfenner@web.de","avatar":null},"body":"Hi Santiago,\n\nrepeated your test here and actually found something interesting. When\ncommitting via 'git gui', commits are not being gpg-signed, while firing\na 'git commit' shows the passphrase dialog and signs the commit correctly.\n\nHere's what I did:\n\ngit init gpg-signing-test && cd gpg-signing-test\ngit config --local commit.gpgSign true\necho 'Commits in this repo must all GPG signed!' > aFile.txt\ngit gui --> add change and commit\n\nResult: No dialog shown and not pgp-signed!\n\nNow I went further:\nvi aFile.txt --> Prepend a \"# \" as another change\ngit commit\n\nHere the passphrase dialog showed up and the commit got correctly signed!\n\nSide-Note: I also set \"user. signingkey\" in \"global\" Git configuration.\n\nMy local repo's config:\n\n[core]\n repositoryformatversion = 0\n filemode = true\n bare = false\n logallrefupdates = true\n[commit]\n gpgSign = true\n[gui]\n wmstate = normal\n geometry = 872x391+0+0 205 177\n\n-- \n\nWhat you mean by wme? Is it the gpg-agent's config or something?\n\nHope that points in the right direction.\n\nCheers,\nNils\n\nAm 11.07.2016 um 16:44 schrieb Santiago Torres:\n> Hi Nils,\n>\n> I just checked and I have commits made in 2.9 with this option set and I\n> don't seem to have your issue. Here's what I did:\n>\n> santiago at ~/test-signing ✔ git init\n> Initialized empty Git repository in /home/santiago/test-signing/.git/\n> santiago at ~/test-signing ✔ hub create\n> Updating origin\n> Enter passphrase for key '/home/santiago/.ssh/id_rsa': \n> created repository: SantiagoTorres/test-signing\n> santiago at ~/test-signing ✔ touch testfile\n> santiago at ~/test-signing ✔ git add testfile \n> santiago at ~/test-signing ✔ git commit\n> i[master (root-commit) 6de1ad2] TEST: tests git autocommit setting\n> 1 file changed, 0 insertions(+), 0 deletions(-)\n> create mode 100644 testfile\n> santiago at ~/test-signing ✔ git log --show-signature\n> commit 6de1ad20237f042433f8b94a3bf8c7cc41711d90 (HEAD -> refs/heads/master)\n> gpg: Signature made Mon 11 Jul 2016 10:40:41 AM EDT using RSA key ID 468F122CE8162295\n> gpg: Good signature from \"Santiago Torres \" [ultimate]\n> gpg: aka \"Santiago Torres-Arias \" [ultimate]\n> Author: Santiago Torres \n> Date: Mon Jul 11 10:40:32 2016 -0400\n>\n> TEST: tests git autocommit setting\n> santiago at ~/test-signing ✔ git push origin master\n> Enter passphrase for key '/home/santiago/.ssh/id_rsa': \n> Counting objects: 3, done.\n> Writing objects: 100% (3/3), 879 bytes | 0 bytes/s, done.\n> Total 3 (delta 0), reused 0 (delta 0)\n> To git@github.com:SantiagoTorres/test-signing.git\n> * [new branch] master -> master\n> santiago at ~/test-signing ✔ git --version\n> git version 2.9.0\n> santiago at ~/test-signing ✔ \n>\n> You can check the github repository \n>\n> Do you have a mwe/.gitconfig so I can take a look at it? \n>\n> I wonder if this issue is similar to what happened in mutt, where gpg\n> doesn't show the password prompt using gpg-agent and it silently failed.\n>\n> Thanks,\n> -Santiago.\n>\n> On Mon, Jul 11, 2016 at 01:29:10PM +0200, Nils Fenner wrote:\n>> Hey Git community,\n>>\n>> since Version 2.9.0, the configuration option \"commit.gpgsign\" doesn't work\n>> as users would expect. By committing via 'git gui' (or usual 'git commit'\n>> without further option), commits are not being auto-signed any longer, when\n>> \"commit.gpgSign\" configuration option is set. I also couldn't find a flag to\n>> \"workaround\" that situation in the GUI. To my understanding, I now have to\n>> pass the '-S' option to 'git commit' every time and GUI becomes \"impractical\n>> to use\". Surprisingly, nobody seems having noticed this behavioural change\n>> since the release of 2.9.\n>>\n>> FYI: In the release log, there's a note stating, that this has been altered\n>> in the context of 'git commit-tree'. Maybe this interferes with \"normal\"\n>> behaviour.\n>>\n>> Would be happy hearing from you soon. Thanks!\n>>\n>> Cheers,\n>> Nils\n>>\n>>\n>> --\n>> To unsubscribe from this list: send the line \"unsubscribe git\" in\n>> the body of a message to majordomo@vger.kernel.org\n>> More majordomo info at http://vger.kernel.org/majordomo-info.html\n\n\n"},{"id":"291174","messageId":"20160711165108.iv2wq2m2vfh5mate@LykOS.localdomain","threadId":"42816","inReplyTo":"5783C90D.1010909@web.de","subject":"Re: Commits are no longer gpg-signed in 2.9.0 when \"commit.gpgsign\" is enabled","fromName":"Santiago Torres","fromEmail":"santiago@nyu.edu","sentAt":"2016-07-11T16:51:09Z","receivedAt":"2016-07-11T16:51:20Z","isPatch":false,"sender":{"key":"santiago@nyu.edu","avatar":"https://avatars.githubusercontent.com/u/3579933?v=4"},"body":"On Mon, Jul 11, 2016 at 06:27:57PM +0200, Nils Fenner wrote:\n> Hi Santiago,\n> \n> repeated your test here and actually found something interesting. When\n> committing via 'git gui', commits are not being gpg-signed, while firing\n> a 'git commit' shows the passphrase dialog and signs the commit correctly.\n\nI have the feeling that this is an issue with your gpg configuration not\nplaying well with the gui. Do you know which pinentry program is being\nused (e.g., type /usr/bin/pinentry).\n\n \n> What you mean by wme? Is it the gpg-agent's config or something?\n> \n\nSorry, I meant a Minimum Working Example, although that'll be hard to\nreproduce in this case. Your configuration seems to be proper.\n\n> Hope that points in the right direction.\n\nI think that we can take further troubleshooting off-list. This doesn't\nseem to be behavior with git (although we can come back with a bug\nreport if something is naturally-broken/could be improved)\n\nCheers!\n-Santiago.\n"},{"id":"291187","messageId":"CAPc5daU4qMhpa7EuTyJWF+CtzWOcAPntqj800u-RGmHTUVShqA@mail.gmail.com","threadId":"42816","inReplyTo":"5783C90D.1010909@web.de","subject":"Re: Commits are no longer gpg-signed in 2.9.0 when \"commit.gpgsign\" is enabled","fromName":"Junio C Hamano","fromEmail":"gitster@pobox.com","sentAt":"2016-07-11T18:09:10Z","receivedAt":"2016-07-11T18:09:36Z","isPatch":false,"sender":{"key":"gitster@pobox.com","avatar":"https://avatars.githubusercontent.com/u/54884?v=4"},"body":"On Mon, Jul 11, 2016 at 9:27 AM, Nils Fenner wrote:\n> Hi Santiago,\n>\n> repeated your test here and actually found something interesting. When\n> committing via 'git gui', commits are not being gpg-signed, while firing\n> a 'git commit' shows the passphrase dialog and signs the commit correctly.\n\n\"git gui\" probably needs an update similar to what was discussed in this thread\nhttp://thread.gmane.org/gmane.comp.version-control.git/293292/focus=293426\n"}]}