@@ -400,17 +400,16 @@ func ParseCommitWithSignature(c *git.Commit) *CommitVerification {
400
400
}
401
401
}
402
402
403
- //Generating hash of commit
404
- hash , err := populateHash (sig .Hash , []byte (c .Signature .Payload ))
405
- if err != nil { //Skipping ailed to generate hash
406
- log .Error (3 , "PopulateHash: %v" , err )
407
- return & CommitVerification {
408
- Verified : false ,
409
- Reason : "gpg.error.generate_hash" ,
410
- }
411
- }
412
-
413
403
for _ , k := range keys {
404
+ //Generating hash of commit
405
+ hash , err := populateHash (sig .Hash , []byte (c .Signature .Payload ))
406
+ if err != nil { //Skipping ailed to generate hash
407
+ log .Error (3 , "PopulateHash: %v" , err )
408
+ return & CommitVerification {
409
+ Verified : false ,
410
+ Reason : "gpg.error.generate_hash" ,
411
+ }
412
+ }
414
413
//We get PK
415
414
if err := verifySign (sig , hash , k ); err == nil {
416
415
return & CommitVerification { //Everything is ok
@@ -422,6 +421,16 @@ func ParseCommitWithSignature(c *git.Commit) *CommitVerification {
422
421
}
423
422
//And test also SubsKey
424
423
for _ , sk := range k .SubsKey {
424
+
425
+ //Generating hash of commit
426
+ hash , err := populateHash (sig .Hash , []byte (c .Signature .Payload ))
427
+ if err != nil { //Skipping ailed to generate hash
428
+ log .Error (3 , "PopulateHash: %v" , err )
429
+ return & CommitVerification {
430
+ Verified : false ,
431
+ Reason : "gpg.error.generate_hash" ,
432
+ }
433
+ }
425
434
if err := verifySign (sig , hash , sk ); err == nil {
426
435
return & CommitVerification { //Everything is ok
427
436
Verified : true ,
0 commit comments