summaryrefslogtreecommitdiffstats
path: root/gitformat-signature.txt
diff options
context:
space:
mode:
authorJunio C Hamano <gitster@pobox.com>2023-03-06 22:15:21 -0800
committerJunio C Hamano <gitster@pobox.com>2023-03-06 22:15:21 -0800
commitf8c9d08c90610f6063181bdc2c41e83dd8fc2113 (patch)
treea75a7af46af6b3c0e71a66abd2077c104af96733 /gitformat-signature.txt
parent33614a27871f44d78c9212ce8042ed091f0e499c (diff)
downloadgit-htmldocs-f8c9d08c90610f6063181bdc2c41e83dd8fc2113.tar.gz
Autogenerated HTML docs for v2.40.0-rc2
Diffstat (limited to 'gitformat-signature.txt')
-rw-r--r--gitformat-signature.txt22
1 files changed, 17 insertions, 5 deletions
diff --git a/gitformat-signature.txt b/gitformat-signature.txt
index d8e3eb1ba..d4d3a31f0 100644
--- a/gitformat-signature.txt
+++ b/gitformat-signature.txt
@@ -17,12 +17,24 @@ DESCRIPTION
Git uses cryptographic signatures in various places, currently objects (tags,
commits, mergetags) and transactions (pushes). In every case, the command which
is about to create an object or transaction determines a payload from that,
-calls gpg to obtain a detached signature for the payload (`gpg -bsa`) and
-embeds the signature into the object or transaction.
+calls an external program to obtain a detached signature for the payload
+(`gpg -bsa` in the case of PGP signatures), and embeds the signature into the
+object or transaction.
-Signatures always begin with `-----BEGIN PGP SIGNATURE-----`
-and end with `-----END PGP SIGNATURE-----`, unless gpg is told to
-produce RFC1991 signatures which use `MESSAGE` instead of `SIGNATURE`.
+Signatures begin with an "ASCII Armor" header line and end with a tail line,
+which differ depending on signature type (as selected by `gpg.format`, see
+linkgit:git-config[1]). These are, for `gpg.format` values:
+
+`gpg` (PGP)::
+ `-----BEGIN PGP SIGNATURE-----` and `-----END PGP SIGNATURE-----`.
+ Or, if gpg is told to produce RFC1991 signatures,
+ `-----BEGIN PGP MESSAGE-----` and `-----END PGP MESSAGE-----`
+
+`ssh` (SSH)::
+ `-----BEGIN SSH SIGNATURE-----` and `-----END SSH SIGNATURE-----`
+
+`x509` (X.509)::
+ `-----BEGIN SIGNED MESSAGE-----` and `-----END SIGNED MESSAGE-----`
Signatures sometimes appear as a part of the normal payload
(e.g. a signed tag has the signature block appended after the payload