diff options
author | Matt Corallo <git@bluematt.me> | 2015-10-23 02:05:42 -0700 |
---|---|---|
committer | Matt Corallo <git@bluematt.me> | 2015-10-23 02:05:42 -0700 |
commit | 1d94b72019e31066b33947af5709383b8075e43a (patch) | |
tree | e83ac333adc4b84830cc4482bcee2abde9a15e26 /contrib/verify-commits/verify-commits.sh | |
parent | 27252b73894d00f9dbe27b664159b2a999683069 (diff) |
Whitelist commits signed with Pieter's now-revoked key
Diffstat (limited to 'contrib/verify-commits/verify-commits.sh')
-rwxr-xr-x | contrib/verify-commits/verify-commits.sh | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/contrib/verify-commits/verify-commits.sh b/contrib/verify-commits/verify-commits.sh index 5841fa2077..9ba781008a 100755 --- a/contrib/verify-commits/verify-commits.sh +++ b/contrib/verify-commits/verify-commits.sh @@ -7,11 +7,23 @@ git log "$DIR" VERIFIED_ROOT=$(cat "${DIR}/trusted-git-root") +IS_REVSIG_ALLOWED () { + while read LINE; do + [ "$LINE" = "$1" ] && return 0 + done < "${DIR}/allow-revsig-commits" + return 1 +} + HAVE_FAILED=false IS_SIGNED () { if [ $1 = $VERIFIED_ROOT ]; then return 0; fi + if IS_REVSIG_ALLOWED "$1"; then + export BITCOIN_VERIFY_COMMITS_ALLOW_REVSIG=1 + else + export BITCOIN_VERIFY_COMMITS_ALLOW_REVSIG=0 + fi if ! git -c "gpg.program=${DIR}/gpg.sh" verify-commit $1 > /dev/null 2>&1; then return 1; fi |