git-authenticate: Disallow SHA1 (and MD5) signatures.
authorLudovic Courtès <ludo@gnu.org>
Wed, 10 Jun 2020 12:54:13 +0000 (14:54 +0200)
committerLudovic Courtès <ludo@gnu.org>
Fri, 12 Jun 2020 16:56:11 +0000 (18:56 +0200)
commit52c529ff20b389eb64ac033586e6b1a5c5d82cb5
treea7ebdb0c7a019a4062508a58168d7c9a35500879
parent7def5056b631978e246211fabe81e0754c795ebe
git-authenticate: Disallow SHA1 (and MD5) signatures.

* guix/git-authenticate.scm (commit-signing-key): Add
 #:disallowed-hash-algorithms and honor it.
(authenticate-commit)[recent-commit?]: New variable.
Pass #:disallowed-hash-algorithms to 'commit-signing-key'.
* tests/git-authenticate.scm ("signed commits, SHA1 signature"): New test.
guix/git-authenticate.scm
tests/git-authenticate.scm