Re: [PATCH v2 0/9] X509 (gpgsm) commit signing support
From: brian m. carlson <hidden>
Date: 2018-07-14 18:33:20
On Tue, Jul 10, 2018 at 01:12:24PM -0400, Jeff King wrote:
On Tue, Jul 10, 2018 at 10:52:22AM +0200, Henning Schild wrote:quoted
This series can be seen as a follow up of a series that appeared under the name "gpg-interface: Multiple signing tools" in april 2018 [1]. After that series was not merged i decided to get my patches ready. The original series aimed at being generic for any sort of signing tool, while this series just introduced the X509 variant of gpg. (gpgsm) I collected authors and reviewers of that first series and already put them on cc.This series is a fine replacement for that earlier work. It's flexible enough to allow what we really wanted out of that series (gpgsm support, or another drop-in tool that uses the same interface). It doesn't lay any groundwork for further tools (like signify), but I think the consensus on the list was to punt on that until somebody had more concrete plans for adding such a tool.
I actually think this moves in a nice direction for adding support for minisign/signify and other schemes. There's a way to look up what algorithm is in use in a particular context based on the first line and a general interface for deciding what format to write. Granted, it currently still is very specific to gpg-style tools, but I think this is an improvement in that regard. As an OpenPGP user, I have no interest in adding support for other tools, but I think this should make it easier if someone else wants to do that. -- brian m. carlson: Houston, Texas, US OpenPGP: https://keybase.io/bk2204
Attachments
- signature.asc [application/pgp-signature] 867 bytes