pub enum Options {
OpenPgp {
program: OsString,
program_arguments: Vec<OsString>,
environment: Vec<(OsString, OsString)>,
minimum_trust: TrustLevel,
},
X509 {
program: OsString,
program_arguments: Vec<OsString>,
environment: Vec<(OsString, OsString)>,
minimum_trust: TrustLevel,
},
Ssh {
program: OsString,
program_arguments: Vec<OsString>,
environment: Vec<(OsString, OsString)>,
allowed_signers: PathBuf,
revocation_file: Option<PathBuf>,
verify_time: Time,
minimum_trust: TrustLevel,
},
}signature only.Expand description
Fully resolved options for verifying a commit or annotated-tag signature.
Variants§
OpenPgp
Verify an OpenPGP signature.
Fields
program_arguments: Vec<OsString>Additional arguments passed before Git’s fixed arguments.
Useful for selecting an alternate key store or configuring a wrapper around the verifier.
minimum_trust: TrustLevelThe minimum trust required for Outcome::is_valid() to return true.
X509
Verify an X.509 signature.
Fields
program_arguments: Vec<OsString>Additional arguments passed before Git’s fixed arguments, useful for selecting an alternate key store or configuring a wrapper around the verifier.
minimum_trust: TrustLevelThe minimum trust required for Outcome::is_valid() to return true.
Ssh
Verify an SSH signature.
Fields
program_arguments: Vec<OsString>Additional arguments passed before Git’s fixed arguments, useful for selecting an alternate key store or configuring a wrapper around the verifier.
verify_time: TimeThe signature creation time passed to ssh-keygen as -Overify-time when evaluating valid-after and
valid-before constraints in the allowed-signers file.
For commits this should be the committer timestamp, so key rotation or expiry does not invalidate a signature created while the key was authorized.
minimum_trust: TrustLevelThe minimum trust required for Outcome::is_valid() to return true.