nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

GPG signature verification of commits signed with subkey

Daan_ssu56m

I'm singing my commits with my GPG key. However I'm not signing with the "main" master key but with a subkey of that GPG key. I do this so that I don't have to carry around the private key of my GPG key (the "master" key), but only the private key of the signing subkey. This way if my laptop gets stolen I can revoke the subkey only and keep the rest of my GPG key safe. So, I've uploaded the public key to BitBucket. It shows the key and even shows all the subkeys. My commits however? Unverified

Accepted answers

Daan_ssu56m

This turns out to be a bug tracked here: https://jira.atlassian.com/browse/BCLOUD-23535

All comments

Ben

Hi @Daan

The GPG key along with any associated subkeys that Bitbucket Cloud will validate against is the one that is stored in Personal Bitbucket Settings > Security > GPG Keys as per our documentation:

Use GPG keys to sign commits

If you're certain that this matches what you have in local - there may be an issue here, as a first step I'd suggest running through the documentation above (if you have not already done so) and double checking that the keys are correct:

gpg --list-secret-keys --keyid-format LONG

If there is still an issue - an investigation would require us to access your workspace directly which can only be achieved with a support ticket. Please raise a ticket, or if you encounter issues - please let me know your timezone so I may raise one on your behalf with the team operating in your region (as per your Premium support entitlement):

https://support.atlassian.com/contact/#/

Cheers!

- Ben (Bitbucket Cloud Support)

Daan_ssu56m

Hi @Ben, thanks for the response. I am indeed certain the GPG key listed in my personal bitbucket settings matches the one I'm signing with. I will go ahead and raise a support ticket then Thanks

Daan_ssu56m

This turns out to be a bug tracked here: https://jira.atlassian.com/browse/BCLOUD-23535

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

cloud

bitbucket

bitbucket-cloud