News for hackers. Stuff that matters.

A comment on Gitlab 9.5 released.

Re:Gitlab 9.5 released by jakebasile on Tuesday August 22, 2017 @05:16PM (#15076470)
It appears that the GPG support doesn't support subkey signing, commits signed with my signing subkey do not show as verified, while the same commit on GitHub does. Both GitHub and GitLab have the same public key export available, and the same email addresses verified.

Examples:

https://gitlab.com/jakebasile/gpg-sign-test/commits/master

https://github.com/jakebasile/gpg-sign-test/commits/master

Edit: it is possible I am just doing something wrong, I don't routinely sign commits. But seeing as the exact same commit in GitHub shows as verified I think there is a problem here.

[ Parent | on HN ]
Re:Gitlab 9.5 released by kiallmacinnes on Tuesday August 22, 2017 @08:03PM (#15077377)
It wouldn't surprise me at all if subkeys got missed in v1 of the feature, it's rare to use gpg, and even rarer to use subkeys :)

I'm sure if you file a bug with the details, they'll sort it it!

[ Parent | on HN ]
Re:Gitlab 9.5 released by jakebasile on Tuesday August 22, 2017 @11:33PM (#15078317)
Looks like someone beat me to it!

https://gitlab.com/gitlab-org/gitlab-ce/issues/36829

[ Parent | on HN ]