Skip to content

Expose public key that is used for Web commits signing

Javiera Tapia requested to merge 442533-view-public-key-that-is-used-for-web-commits-signing into master

What does this MR do and why?

Create an endpoint that calls the Gitaly RPC (Gitaly::ServerSignatureRequest) and displays the public key that is used to signing web commits.

This is the second part of Create RPC to return web-commit signing public ... (gitaly#6220 - closed)

MR acceptance checklist

Please evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

How to set up and validate locally

  1. Modify Gitaly config (gitaly.config.toml or gitaly-0.praefect.toml file) and specify git.signing_key option:
# # Git settings
[git]
use_bundled_binaries = true
catfile_cache_size = 10
ignore_gitconfig = true
signing_key = "<path-to-gdk>/gitaly/internal/praefect/testdata/signing_ssh_key_ed25519"
  1. Restart your GDK instance
  2. Go to http://<gdk-host>:<gdk-port>/api/v4/web_commits/public_key. This should return the public signing key.

Related to #442533 (closed)

Edited by Javiera Tapia

Merge request reports