Re: [task #4633] GPG-Signed Commits

[Derek Price]

Just a quick RFC on how this will integrate into the CVS command line &
config.  I'm thinking that signing will be off by default, with a simple
`-g' global option to enable it.

Since adding -g to a .cvsrc might not be acceptable for users that work
with multiple roots, I think this should also be implemented as a method
option that can be added to a CVSROOT string
<http://ximbiot.com/cvs/wiki/index.php?title=CVS--Concurrent_Versions_System_v1.12.12.1:_The_Repository#The_connection_method>.

Servers would have a three-level GPG requirement setting in CVSROOT/config:

    RequireGPGCommitSignatures=(no|yes|verify)

Where `no' means signatures are allowed but not required, `yes' means
signatures are required, and `verify' means that signatures are required
and that the server verifies that submitted signatures are valid before
allowing a commit.

Regards,

Derek

-- 
Derek R. Price
CVS Solutions Architect
Ximbiot <http://ximbiot.com>
v: +1 717.579.6168
f: +1 717.234.3125
<mailto:derek@ximbiot.com>