@@ -62,3 +62,51 @@ signed tag
62
62
63
63
signed tag message body
64
64
----
65
+
66
+ == Commit signatures
67
+
68
+ - created by: `git commit -S`
69
+ - payload: commit object
70
+ - embedding: header entry `gpgsig`
71
+ (content is preceded by a space)
72
+ - example: commit with subject `signed commit`
73
+
74
+ ----
75
+ tree eebfed94e75e7760540d1485c740902590a00332
76
+ parent 04b871796dc0420f8e7561a895b52484b701d51a
77
+ author A U Thor <
[email protected] > 1465981137 +0000
78
+ committer C O Mitter <
[email protected] > 1465981137 +0000
79
+ gpgsig -----BEGIN PGP SIGNATURE-----
80
+ Version: GnuPG v1
81
+
82
+ iQEcBAABAgAGBQJXYRjRAAoJEGEJLoW3InGJ3IwIAIY4SA6GxY3BjL60YyvsJPh/
83
+ HRCJwH+w7wt3Yc/9/bW2F+gF72kdHOOs2jfv+OZhq0q4OAN6fvVSczISY/82LpS7
84
+ DVdMQj2/YcHDT4xrDNBnXnviDO9G7am/9OE77kEbXrp7QPxvhjkicHNwy2rEflAA
85
+ zn075rtEERDHr8nRYiDh8eVrefSO7D+bdQ7gv+7GsYMsd2auJWi1dHOSfTr9HIF4
86
+ HJhWXT9d2f8W+diRYXGh4X0wYiGg6na/soXc+vdtDYBzIxanRqjg8jCAeo1eOTk1
87
+ EdTwhcTZlI0x5pvJ3H0+4hA2jtldVtmPM4OTB0cTrEWBad7XV6YgiyuII73Ve3I=
88
+ =jKHM
89
+ -----END PGP SIGNATURE-----
90
+
91
+ signed commit
92
+
93
+ signed commit message body
94
+ ----
95
+
96
+ - verify with: `git verify-commit [-v]` (or `git show --show-signature`)
97
+
98
+ ----
99
+ gpg: Signature made Wed Jun 15 10:58:57 2016 CEST using RSA key ID B7227189
100
+ gpg: Good signature from "Eris Discordia <
[email protected] >"
101
+ gpg: WARNING: This key is not certified with a trusted signature!
102
+ gpg: There is no indication that the signature belongs to the owner.
103
+ Primary key fingerprint: D4BE 2231 1AD3 131E 5EDA 29A4 6109 2E85 B722 7189
104
+ tree eebfed94e75e7760540d1485c740902590a00332
105
+ parent 04b871796dc0420f8e7561a895b52484b701d51a
106
+ author A U Thor <
[email protected] > 1465981137 +0000
107
+ committer C O Mitter <
[email protected] > 1465981137 +0000
108
+
109
+ signed commit
110
+
111
+ signed commit message body
112
+ ----
0 commit comments