git/list[1] front-page[2] threads[3] people[4] search[5] about
 

RE: [PATCH 1/1] gpg-interface: add minTrustLevel as a configuration option

From
Randall S. Becker <rsbecker@nexbridge.com>
Date
Dec 23, 2019, 14:50 UTC
Message-ID
<011401d5b9a0$58604df0$0920e9d0$@nexbridge.com>
In-Reply-To
<87y2v54i9v.hji@dyntopia.com>
On December 21, 2019 1:59 PM, Hans Jerry Illikainen wrote:
Show 29 quoted lines
> On Fri, Dec 20 2019, SZEDER Gábor wrote:
> > On Mon, Dec 16, 2019 at 03:32:04PM +0000, Hans Jerry Illikainen wrote:
> >> This patch introduces a new configuration option: gpg.minTrustLevel.
> >> It consolidates trust-level verification to gpg-interface.c and adds
> >> a new `trust_level` member to the signature_check structure.
> >
> > This patch causes several test failures:
> >
> >   https://travis-ci.org/git/git/jobs/627909430#L2259
> >
> > I see you've already posted an updated version, so I tried it locally,
> > and the same test scripts fail with the updated version as well.
> 
> Sorry for that!  I'm preparing a v2 (tested with both gpg1 and gpg2).
> 
> > I noticed that only Linux CI jobs failed, while the OSX jobs
> > succeeded.  Our Linux CI jobs (and my box) are based on Ubuntu 16.04,
> > and thus use GnuPG v1.4, while the OSX jobs use v2.something.  Not
> > sure that the version difference is connected to the test failures,
> > but I figured it's worth pointing out.
> 
> Your observation about the different GPG versions was spot on; thanks!
> That explains why all tests pass on my machine as well as on a personal CI
> setup for my git contributions (both using gpg2).
> 
> The issue was that the search for the end of a trust level to parse relied on
> the TRUST_ line being space-separated.  But that is not always the case for
> gpg1 (only the lowest-two trust levels contain a space followed by additional
> information in gpg1).
Side question: are there any tests running with alternate GPG packages? I have a platform where the official GPG itself is not available, so am looking for alternatives for that community.

Cheers, Randall

Previous: Hans Jerry IllikainenNext: Hans Jerry Illikainen
Message 5 of 19 in “gpg-interface: add minTrustLevel as a configuration option”
  1. 0/1 gpg-interface: add minTrustLevel as a configuration optionHans Jerry Illikainen, Dec 16, 2019
  2. 1/1 gpg-interface: add minTrustLevel as a configuration optionHans Jerry Illikainen, Dec 16, 2019
  3. SZEDER GáborDec 20, 2019
  4. Hans Jerry IllikainenDec 21, 2019
  5. Randall S. BeckerDec 23, 2019
  6. Hans Jerry IllikainenDec 24, 2019
  7. Randall S. BeckerDec 24, 2019
  8. Junio C HamanoDec 16, 2019
  9. Hans Jerry IllikainenDec 18, 2019
  10. 0/1 gpg-interface: add minTrustLevel as a configuration optionHans Jerry Illikainen, Dec 19, 2019
  11. 1/1 gpg-interface: add minTrustLevel as a configuration optionHans Jerry Illikainen, Dec 19, 2019
  12. 0/1 gpg-interface: add minTrustLevel as a configuration optionHans Jerry Illikainen, Dec 22, 2019
  13. 1/1 gpg-interface: add minTrustLevel as a configuration optionHans Jerry Illikainen, Dec 22, 2019
  14. Junio C HamanoDec 24, 2019
  15. Hans Jerry IllikainenDec 27, 2019
  16. Junio C HamanoDec 27, 2019
  17. Hans Jerry IllikainenDec 22, 2019
  18. 0/1 gpg-interface: add minTrustLevel as a configuration optionHans Jerry Illikainen, Dec 27, 2019
  19. 1/1 gpg-interface: add minTrustLevel as a configuration optionHans Jerry Illikainen, Dec 27, 2019

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.