Merge branch 'jc/push-cert'
authorJunio C Hamano <gitster@pobox.com>
Mon, 20 Apr 2015 22:28:31 +0000 (15:28 -0700)
committerJunio C Hamano <gitster@pobox.com>
Mon, 20 Apr 2015 22:28:31 +0000 (15:28 -0700)
commit268d5bc2b2a6f261c6da99c3c9557426468a765b
treed7787ad5d04e74439f65bfe72542b44d97599511
parent6b1258b07b8ad5671f36bf7e998e905a0142c223
parentafcb6ee30acf17f4e0338c49fbab301131abfbba
Merge branch 'jc/push-cert'

The "git push --signed" protocol extension did not limit what the
"nonce" that is a server-chosen string can contain or how long it
can be, which was unnecessarily lax.  Limit both the length and the
alphabet to a reasonably small space that can still have enough
entropy.

* jc/push-cert:
  push --signed: tighten what the receiving end can ask to sign
send-pack.c