Skip to content

Instantly share code, notes, and snippets.

@skarllot
Created May 3, 2023 02:01
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save skarllot/78619595bfbd50ab1d30d37b9a66f8e5 to your computer and use it in GitHub Desktop.
Save skarllot/78619595bfbd50ab1d30d37b9a66f8e5 to your computer and use it in GitHub Desktop.
Sign commits and tags with X.509 certificates
# 1. Get a free S/MIME e-mail certificate
# Actalis: https://extrassl.actalis.it/portal/uapub/freemail?lang=en
# 2. Install S/MIME Sign
# https://github.com/github/smimesign/releases
#
# Download latest stable release
# eg: https://github.com/github/smimesign/releases/download/v0.2.0/smimesign-windows-amd64-v0.2.0.zip
# Unpack to 'C:\Program Files\Github' folder
# 3. Get the ID of your certificate by running
smimesign --list-keys
# 4. Set your signing key (replace <ID> with the certificate ID
git config --global user.signingkey <ID>
# 5. Configure X.509
git config --global gpg.x509.program 'C:\Program Files\Github\smimesign.exe'
git config --global gpg.format x509
# 6. Sign and verify commits and tags
git config --global commit.gpgsign true
git config --global tag.gpgsign true
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment