signing git commits

Search tags: pgp gpg remote gpg-agent gpg forwarding.

Public key must be imported on remote machine

gpg --import usert@example.com-public.asc
 
gpg: key XXXXXXXXXXXXX: public key "User <user@example.com>" imported
gpg: Total number processed: 1
gpg:               imported: 1

git config --global user.signingkey XXXXXXXXXXXXX

Enable signing of each commit by default:

git config --global commit.gpgsign true

git verify commit <HASH>
 
gpg:                using RSA key XXXXXXXXXX
gpg: Good signature from "User <user@example.com>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Primary key fingerprint: XXXX XXXX ...