Article 635WX Portable OpenSSH commits now SSH-signed

Portable OpenSSH commits now SSH-signed

by
from OpenBSD Journal on (#635WX)

Damien Miller (djm@)notesthat all (new) commits to the portableOpenSSHrepository are now signed usinggit'sSSH signature support.

Further details areon the OpenSSH developmentmailing list:

[...]We are in the process of converting the portable OpenSSH repositoryto require signed commits, tags and pushes, using git's recent sshsignature support. So far it's gone very smoothly, and we hope to haveit enforced for all commits soon.We maintain our own git repository for portable OpenSSH, that isautomatically mirrored to github. We use "pre-receive" and "update"hooks to check for signed pushes and tags/commits respectively, usingan in-repository allowed_signers file.[...]

This is a most welcome process integrity improvement that hopefully will make the world trust our favorite SSH software even more.

External Content
Source RSS or Atom Feed
Feed Location http://undeadly.org/cgi?action=rss
Feed Title OpenBSD Journal
Feed Link http://undeadly.org/
Reply 0 comments