1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
|
<?xml version='1.0'?> <!--*-nxml-*-->
<!DOCTYPE refentry PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN"
"http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd">
<!--
Copyright 2016 Colin Walters <walters@verbum.org>
This library is free software; you can redistribute it and/or
modify it under the terms of the GNU Lesser General Public
License as published by the Free Software Foundation; either
version 2 of the License, or (at your option) any later version.
This library is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
Lesser General Public License for more details.
You should have received a copy of the GNU Lesser General
Public License along with this library; if not, see <http://www.gnu.org/licenses/>.
-->
<refentry id="git-evtag">
<refentryinfo>
<title>git-evtag</title>
<productname>git-evtag</productname>
<authorgroup>
<author>
<contrib>Developer</contrib>
<firstname>Colin</firstname>
<surname>Walters</surname>
<email>walters@verbum.org</email>
</author>
</authorgroup>
</refentryinfo>
<refmeta>
<refentrytitle>git-evtag</refentrytitle>
<manvolnum>1</manvolnum>
</refmeta>
<refnamediv>
<refname>git-evtag</refname>
<refpurpose>Sign a git commit with extended checksums</refpurpose>
</refnamediv>
<refsynopsisdiv>
<cmdsynopsis>
<command>git evtag sign</command> <arg choice="opt" rep="repeat">OPTIONS</arg> <arg choice="req">TAGNAME</arg>
</cmdsynopsis>
<cmdsynopsis>
<command>git evtag verify</command> <arg choice="opt" rep="repeat">OPTIONS</arg> <arg choice="req">TAGNAME</arg>
</cmdsynopsis>
</refsynopsisdiv>
<refsect1>
<title>Description</title>
<para>
While git can use GPG to sign tags and commits, it only
covers a commit object, which is subject to SHA1 weaknesses.
This tool uses SHA512 across the entire content of a tag,
creating a stronger level of assurance.
</para>
</refsect1>
<refsect1>
<title>Options</title>
<para>
See the subcommand help, e.g. <command>git-evtag sign --help</command>.
</para>
</refsect1>
</refentry>
|
