From: Jan Harkes <jaharkes@cs.cmu.edu>
Date: Sat, 25 Jun 2005 18:35:19 GMT
Subject: git-verify-tag script
Message-ID: <20050625183519.GB10425@delft.aura.cs.cmu.edu>

Here is a script to simplify validating the gpg signature created by
git-tag-script. Might be useful to add to the git tree so that people
don't have to search for the right post in the git mailinglist archives
when they want to validate a tag.

Jan

----
#!/bin/sh

GIT_DIR=${GIT_DIR:-.git}

tag=$1
[ -f "$GIT_DIR/refs/tags/$tag" ] && tag=$(cat "$GIT_DIR/refs/tags/$tag")

git-cat-file tag $tag > .tmp-vtag || exit 1
cat .tmp-vtag | sed '/-----BEGIN PGP/Q' | gpg --verify .tmp-vtag -
rm -f .tmp-vtag