git/list[1] front-page[2] threads[3] people[4] search[5] about
 

Error when verifying tags signed using 1.7.3.1

From
Stephan Hugel <urschrei@gmail.com>
Date
Oct 4, 2010, 22:13 UTC
Message-ID
<AANLkTikguMr4E+1m9QEX1x1beQPaHNBqSNPQUQWcFZgF@mail.gmail.com>

Hello, git list. I seem to be unable to verify tags I create and sign using the git -s command in 1.7.3.1 Existing tags (i.e. created with 1.7.2.x, using the same key and GnuPG version) can be verified, but attempts to verify created tags result in the following:

object 791abd4848d86ea98071f35bbce4d4b274ef0788 type commit tag v1.4 tagger name <name@host.com> 1286228562 +0100

Better header detection and regex
-----BEGIN PGP MESSAGE-----
Version: GnuPG v1.4.9 (Darwin)

iD8DBQBMqkph8Y2TgZsQ1pARAgxrAJ40ATxZw219CWI6FCaDAtbY8UHdoACePF6Q PyNkf67w7AA8hkQqLAYGcyI= =VLWl -----END PGP MESSAGE----- gpg: Signature made Mon 4 Oct 22:42:57 2010 IST using DSA key ID 9B10D690 gpg: BAD signature from "name <name@host.com>" error: could not verify the tag 'v1.4'

I have confirmed that my key is valid (have signed/encrypted/decrypted/verified using it after this error occurred). I have also tried to create a tag using a newly-created key, with the same result. I have attempted to created signed tags in multiple repos. Is this a known bug?

Next: Daniel Johnson
Message 1 of 39 in “Error when verifying tags signed using 1.7.3.1”
  1. Stephan HugelOct 4, 2010
  2. Daniel JohnsonOct 4, 2010
  3. Stephan HugelOct 4, 2010
  4. Daniel JohnsonOct 4, 2010
  5. Stephan HugelOct 5, 2010
  6. Michael J GruberOct 5, 2010
  7. Stephan HugelOct 5, 2010
  8. Michael J GruberOct 5, 2010
  9. Stephan HugelOct 5, 2010
  10. Michael J GruberOct 5, 2010
  11. tag,verify-tag: do not trip over rfc1991 signaturesMichael J Gruber, Oct 5, 2010
  12. Junio C HamanoOct 5, 2010
  13. Michael J GruberOct 5, 2010
  14. Stephan HugelOct 5, 2010
  15. Michael J GruberOct 5, 2010
  16. 0/5 Handling of rfc1991 signaturesMichael J Gruber, Nov 6, 2010
  17. 0/5 Handling of rfc1991 signaturesMichael J Gruber, Nov 10, 2010
  18. Junio C HamanoNov 10, 2010
  19. 1/5 t/t7004-tag: test handling of rfc1991 signaturesMichael J Gruber, Nov 10, 2010
  20. 2/5 verify-tag: factor out signature detectionMichael J Gruber, Nov 10, 2010
  21. 3/5 tag: factor out sig detection for body editsMichael J Gruber, Nov 10, 2010
  22. 4/5 tag: factor out sig detection for tag displayMichael J Gruber, Nov 10, 2010
  23. 5/5 tag: recognize rfc1991 signaturesMichael J Gruber, Nov 10, 2010
  24. 1/5 t/t7004-tag: test handling of rfc1991 signaturesMichael J Gruber, Nov 6, 2010
  25. Junio C HamanoNov 9, 2010
  26. Michael J GruberNov 9, 2010
  27. Junio C HamanoNov 10, 2010
  28. Michael J GruberNov 10, 2010
  29. 2/5 verify-tag: factor out signature detectionMichael J Gruber, Nov 6, 2010
  30. Thiago FarinaNov 6, 2010
  31. 3/5 tag: factor out sig detection for body editsMichael J Gruber, Nov 6, 2010
  32. 4/5 tag: factor out sig detection for tag displayMichael J Gruber, Nov 6, 2010
  33. 5/5 tag: recognize rfc1991 signaturesMichael J Gruber, Nov 6, 2010
  34. Thiago FarinaNov 6, 2010
  35. Junio C HamanoNov 8, 2010
  36. Todd ZullingerOct 5, 2010
  37. Michael J GruberOct 5, 2010
  38. Stephan HugelOct 5, 2010
  39. Pat ThoytsOct 5, 2010

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.