Kim's IT Blog

Introduction

With Git Version 2.34 comes a new feature that lets you sign commits with your SSH key (see the blog post on GitHub).
This is a great alternative to GPG and S/MIME, since the experience with both is kind of impractical; Who uses GPG and S/MIME anyway?

How To

1. Change the gpg format for git signing to ssh

git config --global commit.gpgsign true
git config --global gpg.format ssh

2. Set a key from your ~/.ssh directory

git config --global user.signingkey "ssh-ed25519 <your key id>"

3. Create and set the file for allowed signers

git config --global gpg.ssh.allowedSignersFile ~/.ssh/allowed_signers
touch ~/.ssh/allowed_signers

4. Add your email address and key to the file for authorized signatures

echo "your@email.com ssh-ed25519 <your key id>" > ~/.ssh/authorized_signatures

5. Test it with a commit

git commit --allow-empty --message="Testing SSH signing"
git show --show-signature