git/list[1] front-page[2] threads[3] people[4] search[5] about
 

Ambiguous verification response when ssh-based signatures

From
TRThor Andreas Rognan <thor.rognan@gmail.com>
Date
Nov 19, 2021, 02:46 UTC
Message-ID
<CAMn8hCcFLR-YyLaawtbtjpVUKd45Z4C6t1kWj+-WBZVNtNgozw@mail.gmail.com>

Thank you for filling out a Git bug report! Please answer the following questions to help us understand your issue.

What did you do before the bug happened? (Steps to reproduce your issue)
$ ssh-keygen -t ed25519 -C "me@example.com"
$ mkdir -pv ~/tmp/example && cd ~/tmp/example && git init
$ git config commit.gpgsign true
$ git config gpg.format ssh
$ git config user.signingkey "$(cat ~/.ssh/id_ed25519.pub)"
$ mkdir -p ~/.config/git/ && touch ~/.config/git/allowed_signers\
 && chmod 0600 ~/.config/git/allowed_signers
$ cat ~/.ssh/id_ed25519.pub | awk '{print email " " $0}' email=$(git
config user.email)\
 >> ~/.config/git/allowed_signers
$ git config gpg.ssh.allowedSignersFile "$HOME/.config/git/allowed_signers"
$ git commit --allow-empty -m "Initial commit"
$ git verify-commit HEAD
What did you expect to happen? (Expected behavior)
A verified signature without any error message.
What happened instead? (Actual behavior)

$ git verify-commit HEAD Good "git" signature with ED25519 key SHA256:... Too few arguments for sign/verify: missing namespace $ git log --show-signature commit 4697b474dd5ec0de14870d5b0eba5f579b852bbd (HEAD -> main) Good "git" signature with ED25519 key SHA256:... Too few arguments for sign/verify: missing namespace^M

What's different between what you expected and what actually happened?
Ambiguous signature verification message.
Anything else you want to add:

Please review the rest of the bug report below. You can delete any lines you don't wish to share.

[System Info] git version: git version 2.34.0 cpu: x86_64 no commit associated with this build sizeof-long: 8 sizeof-size_t: 8 shell-path: /bin/sh uname: Darwin 20.6.0 Darwin Kernel Version 20.6.0: Mon Aug 30 06:12:21 PDT 2021; root:xnu-7195.141.6~3/RELEASE_X86_64 x86_64 compiler info: clang: 13.0.0 (clang-1300.0.29.3) libc info: no libc information available $SHELL (typically, interactive shell): /usr/local/bin/bash

[Enabled Hooks]
Next: Fabian Stelzer
Message 1 of 5 in “Ambiguous verification response when ssh-based signatures”
  1. Thor Andreas RognanNov 19, 2021
  2. Fabian StelzerNov 19, 2021
  3. Thor Andreas RognanNov 19, 2021
  4. Fabian StelzerNov 19, 2021
  5. Thor Andreas RognanNov 19, 2021

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.