Skip to content

Instantly share code, notes, and snippets.

@toolmantim
Created September 7, 2016 00:57
Show Gist options
  • Select an option

  • Save toolmantim/3e835c5e34bdceed0425a0d8f350338d to your computer and use it in GitHub Desktop.

Select an option

Save toolmantim/3e835c5e34bdceed0425a0d8f350338d to your computer and use it in GitHub Desktop.
How to manually verify a signed git commit with GPG. This assumes you have GPG installed, and you have the public key added to the default keyring.
$ git cat-file -p 1b51f44d6b1e6c6eff3302a4af5a2b983a5d2161
tree fc069c67c550c449ff001fec804ad98c04c128da
parent bf17d1df5061aa67e4647fa3f7f3abd2cbe045ee
author Tim Lucas <[email protected]> 1473126017 +1000
committer Tim Lucas <[email protected]> 1473126017 +1000
gpgsig -----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=4YLH
-----END PGP SIGNATURE-----
Fix account billing links
tree fc069c67c550c449ff001fec804ad98c04c128da
parent bf17d1df5061aa67e4647fa3f7f3abd2cbe045ee
author Tim Lucas <[email protected]> 1473126017 +1000
committer Tim Lucas <[email protected]> 1473126017 +1000
Fix account billing links
-----BEGIN PGP SIGNATURE-----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=4YLH
-----END PGP SIGNATURE-----
10:28 $ gpg --verify 03-test.sig 02-test.data
gpg: Signature made Tue Sep 6 11:40:47 2016 AEST using RSA key ID A3B5BF86
gpg: Good signature from "Tim Lucas <[email protected]>"
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment