Files
git/Documentation
Christian Noé Ramos López 88e452fdd8 doc: gpg: say which date SSH key lifetimes are checked against
The description of gpg.ssh.allowedSignersFile says that Git marks a
signature as valid if the signing key was valid at the time of the
signature's creation. An SSH signature does not record when it was
made, though. When verifying a commit or a tag, Git passes the
committer or tagger date to ssh-keygen with -Overify-time, and the
valid-after and valid-before options of a key are checked against
that date.

Say which date is used, and that the signer chooses it. While at it,
fix the spelling of "OpenSSH" in the same paragraph.

Helped-by: Phillip Wood <phillip.wood@dunelm.org.uk>
Helped-by: Junio C Hamano <gitster@pobox.com>
Helped-by: Patrick Steinhardt <ps@pks.im>
Signed-off-by: Christian Noé Ramos López <chris@nortesoftware.dev>
Signed-off-by: Junio C Hamano <gitster@pobox.com>
2026-10-30 09:19:25 -07:00
..
2026-10-19 12:22:54 -07:00
…
2025-12-14 17:04:37 +09:00
2026-10-01 11:26:40 -07:00
…
2025-12-16 09:42:44 +09:00
…
…
2026-10-02 09:46:18 -07:00