git/list[1] front-page[2] threads[3] people[4] search[5] about
 

Re: user.signingkey without gpg? (using s/mime or ssh?)

From
brian m. carlson <sandals@crustytoothpaste.net>
Date
Apr 18, 2014, 21:44 UTC
Message-ID
<20140418214408.GB57656@vauxhall.crustytoothpaste.net>
In-Reply-To
<trinity-c71c6cb0-0c4f-4283-bca9-ae4aa0f3419c-1397851490695@3capp-gmx-bs08>
On Fri, Apr 18, 2014 at 10:04:50PM +0200, Thomas Schittli wrote:
> We already have trusted Certificates from a CA. Can we use them
> instead of an additional PGP key?

Git wants a key that can be used by GnuPG, and X.509 certificates can't be. It invokes the gpg binary that's in your path, so X.509 integration isn't possible unless gpg learns about it.

Show 8 quoted lines
> We already have:
> - s/mime certificate
> - web server ssl/tls certificate
> - XMPP Jabber ssl/tls certificate
> - Object Code Signing certificate
>  
> Or if we have to use a new pgp key: can we sign it using any of our
> certificates?

Only in the sense that you can sign any arbitrary piece of text or data with your certificates.

-- 
brian m. carlson / brian with sandals: Houston, Texas, US
+1 832 623 2791 | http://www.crustytoothpaste.net/~bmc | My opinion only
OpenPGP: RSA v4 4096b: 88AC E9B2 9196 305B A994 7552 F1BA 225C 0223 B187
Previous: Thomas Schittli
Message 2 of 2 in “user.signingkey without gpg? (using s/mime or ssh?)”
  1. Thomas SchittliApr 18, 2014
  2. brian m. carlsonApr 18, 2014

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.