Re: [PATCH 0/3] More on pulling signed tags

From: Linus Torvalds <torvalds@linux-foundation.org>
Date: Jan 5, 2012, 00:30 UTC
Message-ID: <CA+55aFxuHjADrnT4METD=JRqhO0L1tKv=_pB9aOODbokM7rd-g@mail.gmail.com>
In-Reply-To: <7vobujngl3.fsf@alter.siamese.dyndns.org>

On Wed, Jan 4, 2012 at 4:22 PM, Junio C Hamano <gitster@pobox.com> wrote:

>
> ... and this is a fix-up patch on top of the series. With this, the output
> becomes like this:

Looking good, this is very useful. The hacks to extract the signatures with 'git cat-file' were pretty ugly.

This is also nice for the case where the person doing the merge doesn't yet have the pgp key something was signed with, so when you do the "git pull", you get the "unknown key" thing instead of a "good signature" message in the editor buffer.

It *used* to be the case that you had to abort the merge, fetch the key, and re-pull in order to verify the key.

Now you can just say "ok, I'll commit the merge" and finish up, then fetch the key, do "git show --show-signature", and if it doesn't show up as good (which would be very rare) you can then 'git reset' instead. Which while less anal, is a lot more convenient.

                    Linus