From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp11.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms5.migadu.com with LMTPS id YI6MB4nMWWOsdQEAbAwnHQ (envelope-from ) for ; Thu, 27 Oct 2022 02:10:49 +0200 Received: from aspmx1.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp11.migadu.com with LMTPS id AD+HB4nMWWOSnQAA9RJhRA (envelope-from ) for ; Thu, 27 Oct 2022 02:10:49 +0200 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id D5ECD423D2 for ; Thu, 27 Oct 2022 02:10:48 +0200 (CEST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1onqRC-000868-59; Wed, 26 Oct 2022 20:07:58 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1onqRA-0007tG-8e for guix-devel@gnu.org; Wed, 26 Oct 2022 20:07:56 -0400 Received: from mx1.dismail.de ([78.46.223.134]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1onqR7-0003jV-Sh for guix-devel@gnu.org; Wed, 26 Oct 2022 20:07:55 -0400 Received: from mx1.dismail.de (localhost [127.0.0.1]) by mx1.dismail.de (OpenSMTPD) with ESMTP id 79f18cfa; Thu, 27 Oct 2022 02:07:49 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=dismail.de; h=date :message-id:from:to:cc:subject:in-reply-to:references :mime-version:content-type:content-transfer-encoding; s= 20190914; bh=08xjJB9Cspr9YfV1scy7UUReXxmlIEc1d5RVW7N3Ed4=; b=heK 8OcyRMK6Oxo8eMa1Re3MvFkkwATnSyXKzl6c0f2W8BdaTQQ7YI+OIv2JXLrNbl5Z 39j7GNP0ma+MTYSLirgqIHUT1dQUHrDKgtDeSZ4nC9j5JyliRHV4UPjQ+Bd8o2DL JE6OPZDvYIO7GsHCs8eU4jG4MbikPsytD2DYfU/VjuSj8Mr+BnsqXuEsjy2s9Wtu TXCHvMgGHD//mIGNejNbRIVgl4kVb/9yo3dvTIgluU0pMY9dHEGofBs8qd5JywRz WJEXinbZqXiw2Q1EfAo6XSit7Fpgh73xTj20xyGTrmpoaMR+teu8kIoFuk8xsQtR BASUcnIQ9Yv3BRXn0Ow== Received: from smtp2.dismail.de ( [10.240.26.12]) by mx1.dismail.de (OpenSMTPD) with ESMTP id 886b646c; Thu, 27 Oct 2022 02:07:49 +0200 (CEST) Received: from smtp2.dismail.de (localhost [127.0.0.1]) by smtp2.dismail.de (OpenSMTPD) with ESMTP id 4ec34121; Thu, 27 Oct 2022 02:07:48 +0200 (CEST) Received: by dismail.de (OpenSMTPD) with ESMTPSA id c8dc99b4 (TLSv1.3:TLS_AES_256_GCM_SHA384:256:NO); Thu, 27 Oct 2022 02:07:47 +0200 (CEST) Date: Wed, 26 Oct 2022 19:07:40 -0500 Message-ID: <20221026190740.GB15216@dismail.de> From: jgart To: Julien Lepiller Cc: guix-devel@gnu.org Subject: Re: guix git authenticate throws hard In-Reply-To: <0395BB1B-3B58-493F-BC74-25810A47098F@lepiller.eu> References: <20221025213350.GB13409@dismail.de> <20221026003520.GB24994@dismail.de> <0395BB1B-3B58-493F-BC74-25810A47098F@lepiller.eu> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit Received-SPF: pass client-ip=78.46.223.134; envelope-from=jgart@dismail.de; helo=mx1.dismail.de X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: "Guix-devel" Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org X-Migadu-Flow: FLOW_IN X-Migadu-Country: US ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1666829448; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:list-id:list-help: list-unsubscribe:list-subscribe:list-post:dkim-signature; bh=m8LVMUnTJ/H5GXNSCVcZ0xHHOpH7+hBopbsVkfYNeQw=; b=l3kg+SQOwgwcFWnbCmBk/+YU9FKp53MNSqXwmQlIA+fFZNEjKcC1xnv3PHuuL3NNy2OUTD C7mqcnA+9tL+CXeAMVpVmpV0j40fqqoYdu1Rq145Z8WDdD/vc85RsVViR7kx9Zn88VYZeq wuAgsodAubIBQtMjVJNuxiQXUB7HDMk2g9XaK7yLqg8b6bkZVbFpCkBv65j+YMhpX7U9fH ClLePCov7vCxVsjUDX+LyrTigyuL2Flk9bzXgqACSNSOHwKyLj+/hJrQMJ6RVVYfW0B7NX Zn/ZJlMt7GWi8dvR5cY6SISPsb7H80s13W/OQ4SI/+oghEoDJgS4Kp5NUtBZAw== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1666829448; a=rsa-sha256; cv=none; b=MyCB/C01c+35AEgd5WScf3CdHeGVJ9TPSuMzz5pZdg+J5zVAsbDoAXouVNj4KPKetFclmY 4ZW4aLiWMDAEcrzma9wlCu+fYrR399NthtVxzg3ONFRelv2XE+6ZGMOgtP7l35klCj+kaC nv0yo0Pp3u2T+9dlJjz1gYChGAkLJIg7dBE/8VSUxGWhLshnu/UBKcBIIJM4RUtfJoVqtp uo/NH6qUJCAToyv4IbeResFKUeIbVb6YaQxIBfy3tu/15zGqwmomkHjuzMSD2VcNPzE0v3 EhtHzou8cuoz4mdkFclRbQ5iQDgIOIlfJlrcCn/LGkS9y0s6vjibD5Si2uu+eg== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=dismail.de header.s=20190914 header.b="heK 8Ocy"; dmarc=pass (policy=reject) header.from=dismail.de; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org" X-Migadu-Spam-Score: -3.52 Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=dismail.de header.s=20190914 header.b="heK 8Ocy"; dmarc=pass (policy=reject) header.from=dismail.de; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org" X-Migadu-Queue-Id: D5ECD423D2 X-Spam-Score: -3.52 X-Migadu-Scanner: scn1.migadu.com X-TUID: /BUB5jFdb1YP On Wed, 26 Oct 2022 09:07:57 +0200 Julien Lepiller wrote: > It says fingerprint, so it's fingerprint. Using email or name would not be as secure. > > Le 26 octobre 2022 07:35:20 GMT+02:00, jgart a écrit : > >On Wed, 26 Oct 2022 07:21:35 +0200 Julien Lepiller wrote: > >> From the manual: "signer is the OpenPGP fingerprint of public key used to sign commit.", but we should still catch this error :) > > > >Is it possible to give the email instead of the fingerprint? > > > >Deduce the fingerprint from the email? Julien and/or anyone else, What do you think if we have a CLI flag for git authenticate that would allow us to do this to authenticate the last 5 commits against the 3B1D7F19E36BB60C0F5B2CA9A52AA2B477B6DD35 fingerprint, for example: guix git authenticate 3B1D7F19E36BB60C0F5B2CA9A52AA2B477B6DD35 -5 I've run into situations where I can't remember if I signed a commit or not. IWBC if I could just say authenticate the last commits against my fingerprint instead of going one by one. If this already exists and is not documented then we should definitely document that usage with an example to let others know. all best, jgart