Solution for detached gnupg signatures in properties?

[Johannes Graumann <jo...@web.de>]

Hi,

Is there anything comparable to this idea out there:
- checking in a change;
- svn already sees the file has changed by it's internal mechanisms;
- svn asks the user (his gpg-agent) for authentication/documentation
purposes automatically for a passphrase to a pre-configured key;
- the file is signed detachedly and the signature is stored in a dedicated
property (let's say "svn:gpg");
- the file is submitted to the repository;

There should clearly be some infrastructure to check the signature(s) via
gnupg ... it would be really nifty to also implement a signing time
stamping server, which svn would submit the signature to for independent
time verification - the resulting signature of the signature could be
stored in a further property like "svn:gpgTS" ...

This is just a crackpot idea of someone using SVN to document laboratory
work ...

Lemme know what you think. Thanks, Joh


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org

Re: Solution for detached gnupg signatures in properties?

[Paul Koning <Pa...@dell.com>]

Sounds like an interesting idea.  The client side would require a
wrapper around "svn" and at the server end you could enforce the
signing with a pre-commit hook and timestamp the commit with a
post-commit hook.

	    paul


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org