diff options
| author | Jameson Graef Rollins <jrollins@phys.columbia.edu> | 2008-07-01 00:45:36 -0400 |
|---|---|---|
| committer | Jameson Graef Rollins <jrollins@phys.columbia.edu> | 2008-07-01 00:45:36 -0400 |
| commit | 56e8fa26a4ce594f2c5c71b600df11fc9f255956 (patch) | |
| tree | 664e1ace928f3594548e55a408ceb3e0cd1d6472 /man/man5 | |
| parent | 5470209cd829eda1e75719e93fe6c69cf2c1a61d (diff) | |
A bunch of work on man pages to shore up interface and behavior before
developer release. Still do a bit of work to make sure actual
commands meet the outlined behaviors.
Small tweak to remove_line function to make sure it doesn't
accidentally have a regexp match.
Diffstat (limited to 'man/man5')
| -rw-r--r-- | man/man5/monkeysphere.5 | 54 |
1 files changed, 54 insertions, 0 deletions
diff --git a/man/man5/monkeysphere.5 b/man/man5/monkeysphere.5 new file mode 100644 index 0000000..50ad2b3 --- /dev/null +++ b/man/man5/monkeysphere.5 @@ -0,0 +1,54 @@ +.TH MONKEYSPHERE "5" "June 2008" "monkeysphere" "System Frameworks" + +.SH NAME + +monkeysphere \- ssh authentication framework using OpenPGP Web of +Trust + +.SH DESCRIPTION + +\fBMonkeySphere\fP is a framework to leverage the OpenPGP Web of Trust +for ssh authentication. OpenPGP keys are tracked via GnuPG, and added +to the authorized_keys and known_hosts files used by ssh for +connection authentication. + +.SH IDENTITY CERTIFIERS + +FIXME: describe identity certifier concept + +.SH KEY ACCEPTABILITY + +During known_host and authorized_keys updates, the monkeysphere +commands work from a set of user IDs to determine acceptable keys for +ssh authentication. OpenPGP keys are considered acceptable if the +following criteria are met: +.TP +.B capability +The key must have the "authentication" ("a") usage flag set. +.TP +.B validity +The key itself must be valid, i.e. it must be well-formed, not +expired, and not revoked. +.TP +.B certification +The relevant user ID must be signed by a trusted identity certifier. + +.SH HOST IDENTIFICATION + +The OpenPGP keys for hosts have associated user IDs that use the ssh +URI specification for the host, i.e. "ssh://host.full.domain[:port]". + +.SH AUTHOR + +Written by Jameson Rollins <jrollins@fifthhorseman.net>, Daniel Kahn +Gillmor <dkg@fifthhorseman.net> + +.SH SEE ALSO + +.BR monkeysphere (1), +.BR monkeysphere-server (8), +.BR monkeysphere-ssh-proxycommand (1), +.BR gpg (1), +.BR ssh (1), +.BR http://tools.ietf.org/html/rfc4880, +.BR http://tools.ietf.org/wg/secsh/draft-ietf-secsh-scp-sftp-ssh-uri/ |