Skip to content
GitLab
Next
    • GitLab: the DevOps platform
    • Explore GitLab
    • Install GitLab
    • How GitLab compares
    • Get started
    • GitLab docs
    • GitLab Learn
  • Pricing
  • Talk to an expert
  • /
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
    Projects Groups Snippets
  • Sign up now
  • Login
  • Sign in / Register
  • gitaly gitaly
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
    • Locked Files
  • Issues 656
    • Issues 656
    • List
    • Boards
    • Service Desk
    • Milestones
    • Iterations
    • Requirements
  • Merge requests 55
    • Merge requests 55
  • CI/CD
    • CI/CD
    • Pipelines
    • Jobs
    • Schedules
    • Test Cases
  • Deployments
    • Deployments
    • Environments
    • Releases
  • Packages and registries
    • Packages and registries
    • Container Registry
  • Monitor
    • Monitor
    • Incidents
  • Analytics
    • Analytics
    • Value stream
    • CI/CD
    • Code review
    • Insights
    • Issue
    • Repository
  • Snippets
    • Snippets
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
Collapse sidebar
  • GitLab.orgGitLab.org
  • gitalygitaly
  • Issues
  • #2545
Closed
Open
Issue created Mar 09, 2020 by Anders Borum@palmin

fails to verify signed commits from Working Copy verified by command line git and GitHub

Summary

GitLab doesn't verify signed commits made by the iOS Git client Working Copy that uses ObjectivePGP for signing.

This despite having configured and verified the email address gpglab@algoritmer.dk and configured the PGP public key (included below) on the GitLab account.

Steps to reproduce

  1. View commit 24b61823
  2. Tap Unverified near the top
  3. Notice the error message:
This commit was signed with an unverified signature.

GPG Key ID: A25980CD7A4B157B

Example Project

https://gitlab.com/palmin/gpglab

What is the current bug behavior?

GitLab does not verify the commit.

What is the expected correct behavior?

GitLab should verify the commit.

Command line Git verifies the commit as shown by the following terminal command and output:

% git log --show-signature                  
commit 24b61823939cedfa2b08b30d7805604608206007 (HEAD -> master, origin/master, origin/HEAD, github/master)
Warning: Failed to set locale category LC_NUMERIC to en_DK.
Warning: Failed to set locale category LC_TIME to en_DK.
Warning: Failed to set locale category LC_COLLATE to en_DK.
Warning: Failed to set locale category LC_MONETARY to en_DK.
Warning: Failed to set locale category LC_MESSAGES to en_DK.
gpg: Signature made Mon Mar  9 10:57:05 2020 CET
gpg:                using RSA key A25980CD7A4B157B
gpg: Good signature from "Anders Borum <gpglab@algoritmer.dk>" [ultimate]
Author: Anders Borum <gpglab@algoritmer.dk>
Date:   Mon Mar 9 10:57:05 2020 +0100

    sign from device

commit f2ddede15779f29477914397ce687a3062883410
Warning: Failed to set locale category LC_NUMERIC to en_DK.
Warning: Failed to set locale category LC_TIME to en_DK.
Warning: Failed to set locale category LC_COLLATE to en_DK.
Warning: Failed to set locale category LC_MONETARY to en_DK.
Warning: Failed to set locale category LC_MESSAGES to en_DK.
gpg: Signature made Mon Mar  9 10:51:45 2020 CET
gpg:                using RSA key 88D35AC70DAE7119419A5CACA25980CD7A4B157B
gpg:                issuer "gpglab@algoritmer.dk"
gpg: Good signature from "Anders Borum <gpglab@algoritmer.dk>" [ultimate]
Author: Anders Borum <gpglab@algoritmer.dk>
Date:   Mon Mar 9 10:51:45 2020 +0100

    Signed commit

commit c9158806696380224a211579101d15181dbd10a7
Author: Anders Borum <anders@appliedphasor.com>
Date:   Mon Mar 9 09:45:00 2020 +0000

    Initial commit

Configuring the email address gpglab@algoritmer.dk on GitHub.com and uploading the same GPG public key shows the same commit as verified. https://github.com/palmin/gpglab/commit/24b61823939cedfa2b08b30d7805604608206007

Public Key

-----BEGIN PGP PUBLIC KEY BLOCK-----
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=Js1w
-----END PGP PUBLIC KEY BLOCK-----
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information
Assignee
Assign to
Time tracking