X.509 signatures Rake task

Tier: Free, Premium, Ultimate Offering: Self-managed

When signing commits with X.509, the trust anchor might change and the signatures stored in the database must be updated.

Update all X.509 signatures

This task:

  • Iterates through all X.509-signed commits.
  • Updates their verification status based on the current certificate store.
  • Modifies only the database entries for the signatures.
  • Leaves the commits unchanged.

To update all X.509 signatures, run:

Linux package (Omnibus)
sudo gitlab-rake gitlab:x509:update_signatures
Self-compiled (source)
sudo -u git -H bundle exec rake gitlab:x509:update_signatures RAILS_ENV=production