forgejo/modules/setting
zeripath fcb535c5c3
Sign merges, CRUD, Wiki and Repository initialisation with gpg key (#7631)
This PR fixes #7598 by providing a configurable way of signing commits across the Gitea instance. Per repository configurability and import/generation of trusted secure keys is not provided by this PR - from a security PoV that's probably impossible to do properly. Similarly web-signing, that is asking the user to sign something, is not implemented - this could be done at a later stage however.

## Features
- [x] If commit.gpgsign is set in .gitconfig sign commits and files created through repofiles. (merges should already have been signed.)
- [x] Verify commits signed with the default gpg as valid
- [x] Signer, Committer and Author can all be different
    - [x] Allow signer to be arbitrarily different - We still require the key to have an activated email on Gitea. A more complete implementation would be to use a keyserver and mark external-or-unactivated with an "unknown" trust level icon.
- [x] Add a signing-key.gpg endpoint to get the default gpg pub key if available
    - Rather than add a fake web-flow user I've added this as an endpoint on /api/v1/signing-key.gpg
    - [x] Try to match the default key with a user on gitea - this is done at verification time
- [x] Make things configurable?
    - app.ini configuration done
    - [x] when checking commits are signed need to check if they're actually verifiable too
- [x] Add documentation

I have decided that adjusting the docker to create a default gpg key is not the correct thing to do and therefore have not implemented this.
2019-10-16 14:42:42 +01:00
..
cache.go Use gitea forked macaron (#7933) 2019-08-23 12:40:29 -04:00
cors.go Use gitea forked macaron (#7933) 2019-08-23 12:40:29 -04:00
cron.go Update migrated repositories' issues/comments/prs poster id if user has a github external user saved (#7751) 2019-10-14 09:10:42 +03:00
database.go Move database settings from models to setting (#7806) 2019-08-24 11:24:45 +02:00
database_sqlite.go Move database settings from models to setting (#7806) 2019-08-24 11:24:45 +02:00
database_test.go Move database settings from models to setting (#7806) 2019-08-24 11:24:45 +02:00
git.go Support git.PATH entry in app.ini (#6772) 2019-07-07 03:26:56 -04:00
indexer.go Restore Graceful Restarting & Socket Activation (#7274) 2019-10-15 14:39:51 +01:00
indexer_test.go Restrict repository indexing by glob match (#7767) 2019-09-11 20:26:28 +03:00
log.go Restore Graceful Restarting & Socket Activation (#7274) 2019-10-15 14:39:51 +01:00
mailer.go Use gitea forked macaron (#7933) 2019-08-23 12:40:29 -04:00
markup.go split setting.go to multiple files (#6154) 2019-03-16 11:12:44 +08:00
repository.go Sign merges, CRUD, Wiki and Repository initialisation with gpg key (#7631) 2019-10-16 14:42:42 +01:00
service.go Add support for DEFAULT_ORG_MEMBER_VISIBLE (#7669) 2019-08-24 15:28:59 +03:00
session.go Use gitea forked macaron (#7933) 2019-08-23 12:40:29 -04:00
setting.go Fix password complexity regex for special characters (on master) (#8525) 2019-10-16 11:09:58 +08:00
task.go Move migrating repository from frontend to backend (#6200) 2019-10-13 21:23:14 +08:00
webhook.go Add support for MS Teams webhooks (#6632) 2019-04-19 10:18:06 -04:00