Skip to content

Improve issue/errors feedback while validating X509 signed commits

I would like to submit a request to improve the visual feedback when a Issue handling the commits which are X509 signed.

Problem

GitLab(self-hosted) was in loop trying to validate the commit on the project main page. image

When checking the commit history I got this loop on the commit, plus a error message: image

Since I am the instance admin I tried check is the Admin >> Settings >> Network >> Outbound Request was changed, but was okay.

Then I did a throubleshooting and I found the certificate created recently was missing the email(RFC822) entry on subjectAltName. This an Issue with my employer but I was hopping GitLab could inform the commit as insecure/unverified or something else.

Requested Solution

I would like when signing with X509, and the required steps can't be satisfied, the badge which show verified could visual inform a ! which when I click on it, show a text with information why it didn't certified the commit, in my specific case, could say the signing certificate email used didn't match with the verified email address on GitLab. Also it could link the url used for throubleshooting.

Edited by Gustavo Brondani Schenkel