Skip to main content


Eclipse Community Forums
Forum Search:

Search      Help    Register    Login    Home
Home » Eclipse Projects » EGit / JGit » Possible to use a SSH Public Key for Commit Signing?(EGit not using ssh public key to sign even though GIT allows this)
Possible to use a SSH Public Key for Commit Signing? [message #1856723] Sat, 24 December 2022 21:24 Go to next message
Jason Reed is currently offline Jason ReedFriend
Messages: 4
Registered: November 2010
Junior Member
Ok so from command line I can configure git to use my SSH key not only to authenticate me with GitHub, but also to sign my commits (using the public key). I do this with the standard configurations

git config --global gpg.format ssh
git config --global user.signingkey PATH/TO/MY/PUBLIC/KEY.pub

and when I do git commit -m "MyMessage" then it commits with no problem and when I do a git push origin branch then it pushes with no problem.

Yet when I try to use the EGit (6.0.0) in my Eclipse IDE (2022-12) no matter if I use the external GPG or the BouncyCastle it cannot load my public key as it is configured in GIT, I receive a "Unable to find GPG key for signing with key id "PATH/TO/MY/PUBLIC/KEY.pub"

It's pointing to the key correctly, but simply refuses to use it.

Now my key uses the ed25519 algorithm. I'm not certain if this is the problem or simply that EGit cannot use the ssh gpg.format to perform signing.

I would much rather work completely inside my IDE and not have to switch between IDE and command line, or IDE and GitHub Desktop. That's the whole reason I have EGit installed.
Re: Possible to use a SSH Public Key for Commit Signing? [message #1856734 is a reply to message #1856723] Mon, 26 December 2022 10:58 Go to previous messageGo to next message
Thomas Wolf is currently offline Thomas WolfFriend
Messages: 576
Registered: August 2016
Senior Member
This is not implemented in JGit (yet).
Re: Possible to use a SSH Public Key for Commit Signing? [message #1856758 is a reply to message #1856734] Thu, 29 December 2022 13:07 Go to previous messageGo to next message
Jason Reed is currently offline Jason ReedFriend
Messages: 4
Registered: November 2010
Junior Member
That's a shame. From your answer I'm assuming that it is on the roadmap. Is there a time frame for when this feature would be implemented? Is there a way for me to get involved to help move this feature forward? I personally find that this feature very important.
Re: Possible to use a SSH Public Key for Commit Signing? [message #1856780 is a reply to message #1856758] Sun, 01 January 2023 22:36 Go to previous messageGo to next message
Thomas Wolf is currently offline Thomas WolfFriend
Messages: 576
Registered: August 2016
Senior Member
There is no roadmap, and there is no time frame. Like many FOSS projects, JGit is developed and maintained by volunteers.

I agree that it is a feature that JGit should support, but personally I won't have much time to implement it in the near future. If it is important to you, the best way to get the feature into JGit would be to help implementing it. The Contributor's Guide gives some help on getting started.

I did once quickly look at it. There is good support for the heavy lifting (reading SSH keys, actually signing) in Apache MINA sshd. The signing infrastructure in core JGit would need some improvements: recognizing SSH signatures on tags, and I'm not sure the current signer interfaces are good enough. Probably a new fragment providing an implementation of these interfaces using Apache MINA sshd would be a good start, plus a way to load the signer depending on the git configuration.
Re: Possible to use a SSH Public Key for Commit Signing? [message #1856785 is a reply to message #1856780] Mon, 02 January 2023 11:12 Go to previous messageGo to next message
Jason Reed is currently offline Jason ReedFriend
Messages: 4
Registered: November 2010
Junior Member
Sounds good. Thanks for the information. I'll get a clone of the repository and take a look and see if I can wrap my head around what's needed.
Re: Possible to use a SSH Public Key for Commit Signing? [message #1858854 is a reply to message #1856785] Wed, 26 April 2023 14:18 Go to previous message
Pierre-Yves Bigourdan is currently offline Pierre-Yves BigourdanFriend
Messages: 7
Registered: April 2020
Junior Member
Jason Reed wrote on Mon, 02 January 2023 11:12
Sounds good. Thanks for the information. I'll get a clone of the repository and take a look and see if I can wrap my head around what's needed.


Hello Jason, did you have time to look into this? I'd be interested in the functionality as well. :)
Previous Topic:GIT Clone and branch switching operations are very slow in EGIT
Next Topic:[solved]JGIT Push takes a long time to add an empty commit (no changes) when executed from cloud
Goto Forum:
  


Current Time: Thu Mar 28 11:24:54 GMT 2024

Powered by FUDForum. Page generated in 0.26231 seconds
.:: Contact :: Home ::.

Powered by: FUDforum 3.0.2.
Copyright ©2001-2010 FUDforum Bulletin Board Software

Back to the top