From 7f4faecbb894780fcf17025fdccc37bf906f24e0 Mon Sep 17 00:00:00 2001 From: Quentin Bourgeois Date: Sun, 28 Aug 2022 21:53:14 +0000 Subject: [PATCH 1/3] Remove the public specification for OpenSSH key commit signature The specification of signature of Git commit with an OpenSSH key mentioned that one used the public part to perform the signature. However, this is the private part that is used to sign and the public part used for other to verify the signature. --- .../about-commit-signature-verification.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/authentication/managing-commit-signature-verification/about-commit-signature-verification.md b/content/authentication/managing-commit-signature-verification/about-commit-signature-verification.md index b2287d3a5e..472d47ccce 100644 --- a/content/authentication/managing-commit-signature-verification/about-commit-signature-verification.md +++ b/content/authentication/managing-commit-signature-verification/about-commit-signature-verification.md @@ -87,7 +87,7 @@ To sign commits using GPG and have those commits verified on {% data variables.p {% ifversion ssh-commit-verification %} ## SSH commit signature verification -You can use SSH to sign commits with an SSH public key that you generate yourself. If you already use an SSH key to authenticate with {% data variables.product.product_name %}, +You can use SSH to sign commits with an SSH key that you generate yourself. If you already use an SSH key to authenticate with {% data variables.product.product_name %}, you can also upload that same key again for use as a signing key. There's no limit on the number of signing keys you can add to your account. {% data variables.product.product_name %} uses [ssh_data](https://github.com/github/ssh_data), an open source Ruby library, to confirm that your locally signed commits and tags are cryptographically verifiable against a public key you have added to your account on {% ifversion ghae %}{% data variables.product.product_name %}{% else %}{% data variables.product.product_location %}{% endif %}. From f9084f1b33b830a5e742393b8c74d753f2d42bb4 Mon Sep 17 00:00:00 2001 From: Rachael Rose Renk <91027132+rachaelrenk@users.noreply.github.com> Date: Thu, 20 Oct 2022 13:46:19 -0600 Subject: [PATCH 2/3] Update content/authentication/managing-commit-signature-verification/about-commit-signature-verification.md --- .../about-commit-signature-verification.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/authentication/managing-commit-signature-verification/about-commit-signature-verification.md b/content/authentication/managing-commit-signature-verification/about-commit-signature-verification.md index 472d47ccce..f06050dc73 100644 --- a/content/authentication/managing-commit-signature-verification/about-commit-signature-verification.md +++ b/content/authentication/managing-commit-signature-verification/about-commit-signature-verification.md @@ -87,7 +87,7 @@ To sign commits using GPG and have those commits verified on {% data variables.p {% ifversion ssh-commit-verification %} ## SSH commit signature verification -You can use SSH to sign commits with an SSH key that you generate yourself. If you already use an SSH key to authenticate with {% data variables.product.product_name %}, +You can use SSH to [sign commits with an SSH key](https://git-scm.com/docs/git-config#Documentation/git-config.txt-usersigningKey) that you generate yourself. If you already use an SSH key to authenticate with {% data variables.product.product_name %}, you can also upload that same key again for use as a signing key. There's no limit on the number of signing keys you can add to your account. {% data variables.product.product_name %} uses [ssh_data](https://github.com/github/ssh_data), an open source Ruby library, to confirm that your locally signed commits and tags are cryptographically verifiable against a public key you have added to your account on {% ifversion ghae %}{% data variables.product.product_name %}{% else %}{% data variables.product.product_location %}{% endif %}. From e6b5cb71c13fd82d04671179716e5ac7a2d76e0d Mon Sep 17 00:00:00 2001 From: Rachael Rose Renk <91027132+rachaelrenk@users.noreply.github.com> Date: Thu, 20 Oct 2022 15:20:02 -0600 Subject: [PATCH 3/3] Update content/authentication/managing-commit-signature-verification/about-commit-signature-verification.md --- .../about-commit-signature-verification.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/authentication/managing-commit-signature-verification/about-commit-signature-verification.md b/content/authentication/managing-commit-signature-verification/about-commit-signature-verification.md index f06050dc73..7ca4ea260f 100644 --- a/content/authentication/managing-commit-signature-verification/about-commit-signature-verification.md +++ b/content/authentication/managing-commit-signature-verification/about-commit-signature-verification.md @@ -87,7 +87,7 @@ To sign commits using GPG and have those commits verified on {% data variables.p {% ifversion ssh-commit-verification %} ## SSH commit signature verification -You can use SSH to [sign commits with an SSH key](https://git-scm.com/docs/git-config#Documentation/git-config.txt-usersigningKey) that you generate yourself. If you already use an SSH key to authenticate with {% data variables.product.product_name %}, +You can use SSH to sign commits with an SSH key that you generate yourself. For more information, see the [Git reference documentation](https://git-scm.com/docs/git-config#Documentation/git-config.txt-usersigningKey) for `user.Signingkey`. If you already use an SSH key to authenticate with {% data variables.product.product_name %}, you can also upload that same key again for use as a signing key. There's no limit on the number of signing keys you can add to your account. {% data variables.product.product_name %} uses [ssh_data](https://github.com/github/ssh_data), an open source Ruby library, to confirm that your locally signed commits and tags are cryptographically verifiable against a public key you have added to your account on {% ifversion ghae %}{% data variables.product.product_name %}{% else %}{% data variables.product.product_location %}{% endif %}.