(C) 2024 Swudu Susuwu, dual licenses: choose GPLv2 or Apache 2 (allows all uses).
./.ssh/
is to compute signatures/certificates.
./.ssh/setup.sh
is to setupgpg.ssh.allowedSignersFile
(allows to usegit verify <ref>
orgit log --show-signature
)./.ssh/id_ed25519.pub
is used at.ssh/setup.sh
to produce.ssh/allowed_signers
+.ssh/sha256.sig
../.ssh/email_of_contributor
is used at.ssh/setup.sh
to produce.ssh/allowed_signers
../.ssh/allowed_signers
is required forgpg.ssh.allowedSignersFile
(included in case.ssh/setup.sh
fails to produce this.)./.ssh/sha256.sig
is for comparison to the results ofgit verify <ref>
orgit log --show-signature
(included in case.ssh/setup.sh
fails to produce this.)