Age | Commit message (Collapse) | Author | |
---|---|---|---|
2010-10-26 | add note about CHECK_KEYSERVER var in msph-auth man page | Jameson Rollins | |
2010-10-17 | fix keys-for-user | Jameson Rollins | |
This function now properly outputs to stdout exactly what would have been written to the monkeysphere-controlled authorized_keys file, but without actually touching it. | |||
2010-10-08 | default HASH_KNOWN_HOSTS to false (closes MS #2483) | Daniel Kahn Gillmor | |
2010-10-02 | Minimal documentation of ssh authorized_keys options specification. | Clint Adams | |
2010-09-14 | fix *all* install paths, including in man pages and transition scripts | Jameson Rollins | |
2010-07-04 | small tweak to monkeysphere man page | Jameson Rollins | |
2010-07-04 | add keys-for-user subcommand to monkeysphere-authentication | Jameson Rollins | |
This subcommand will output all valid key for a given user. The user's authorized_user_ids file will be read for OpenPGP user IDs, one per line. The ssh-formated RSA keys will be output to stdout. Also included is a simple script that takes the user as it's one argument and exec's this command. This is something that would be suitable for the proposed sshd AuthorizedKeysCommand. | |||
2010-05-06 | support x509 anchors for monkeysphere-host, allow shared anchors between m-a ↵ | Daniel Kahn Gillmor | |
and mh (closes MS #2288) | |||
2010-03-14 | deprecate sshfpr; add sshfprs-for-userid (closes: MS #1436) | Daniel Kahn Gillmor | |
2010-03-14 | enable use of hkps (closes: MS #1749) | Daniel Kahn Gillmor | |
2010-03-09 | fixed monkeysphere.7 synopsis to be less ssh-specific | Daniel Kahn Gillmor | |
2010-03-08 | fix my email address | Jameson Rollins | |
2010-03-01 | fix hyphen-used-as-minus-sign man page lint | Jameson Rollins | |
2010-02-04 | fix monkeysphere-authentication man page reference to AuthorizedKeysFile for ↵ | Jameson Rollins | |
sshd_config | |||
2010-01-19 | small man page typo tweak | Jameson Rollins | |
2010-01-18 | renaming host_keys.pub.gpg to host_keys.pub.pgp | Daniel Kahn Gillmor | |
2010-01-18 | got rid of monkeysphere-host fprs file | Daniel Kahn Gillmor | |
2010-01-18 | more tweaks to man pages | Daniel Kahn Gillmor | |
2010-01-16 | some improvements to man pages | Jameson Rollins | |
2010-01-16 | tweaks to the monkeysphere-host man page | Jameson Rollins | |
2010-01-15 | overhaul monkeysphere-host(8) to match new multi-key capable interface | Daniel Kahn Gillmor | |
2010-01-14 | update monkeysphere-authentication(8) to acknowledge use of monkeysphere ↵ | Daniel Kahn Gillmor | |
beyond OpenSSH | |||
2010-01-14 | update monkeysphere(1) to acknowledge use beyond OpenSSH | Daniel Kahn Gillmor | |
2010-01-12 | touching up the switch to keys-for-userid | Daniel Kahn Gillmor | |
2010-01-10 | Add new keys-from-userid subcommand to monkeysphere UI. | Jameson Rollins | |
This new subcommand calls a new function, keys_from_userid, that outputs to stdout all acceptable keys for a given user ID literal. | |||
2010-01-09 | fix pem2openpgp(1) synopsis. | Daniel Kahn Gillmor | |
2009-07-26 | added MONKEYSPHERE_STRICT_MODES environment option to disable permissions ↵ | Daniel Kahn Gillmor | |
checking. | |||
2009-07-18 | add refresh-keys subcommand to monkeysphere-authentication | Jameson Graef Rollins | |
2009-07-06 | describe authorized_user_ids more clearly in man pages. | Daniel Kahn Gillmor | |
2009-05-25 | break out signature timestamp from key timestamp, allow them to be set ↵ | Daniel Kahn Gillmor | |
independently. | |||
2009-04-30 | Add sshfpr subcommand to monkeysphere | Jameson Graef Rollins | |
This is a very simple subcommand that outputs the ssh fingerprint of a key in your gpg keyring, by keyid. | |||
2009-03-24 | fix typo in monkeysphere-host.8 (thanks, Suno Ano) | Daniel Kahn Gillmor | |
2009-03-24 | fixing typo in monkeysphere.1 (thanks, Suno Ano) | Daniel Kahn Gillmor | |
2009-03-23 | improving usage and man page for monkeysphere ssh-proxycommand. | Daniel Kahn Gillmor | |
2009-03-02 | update man page for subkey-to-ssh-agent, to add info about ↵ | Jameson Graef Rollins | |
MONKEYSPHERE_SUBKEYS_FOR_AGENT | |||
2009-03-02 | don't reference tests for key publication in m-h diagnostics man entry. | Jameson Graef Rollins | |
2009-03-02 | more man page tweaking. | Daniel Kahn Gillmor | |
2009-03-02 | expanded/clarified setup examples | Jameson Graef Rollins | |
2009-03-01 | small formatting change to man pages, for consistency. | Jameson Graef Rollins | |
2009-03-01 | caught a couple more hyphen/minus clarifications. | Daniel Kahn Gillmor | |
2009-03-01 | more manpage cleanup. | Daniel Kahn Gillmor | |
2009-03-01 | syntactic cleanup of keytrans-related man pages. | Daniel Kahn Gillmor | |
2009-03-01 | syntactic cleanup on monkeysphere.1 (thanks, lintian -I) | Daniel Kahn Gillmor | |
2009-03-01 | fix openpgp2ssh man page to reflect new implementation. | Daniel Kahn Gillmor | |
2009-02-27 | wrote a first pass at explaining the concept of identity certifiers | Daniel Kahn Gillmor | |
2009-02-25 | remove left over references to expert subcommand in man pages. | Jameson Graef Rollins | |
2009-02-21 | import-key now requires a hostname be specified, and no longer does | Jameson Graef Rollins | |
any hostname guessing. this is so that we don't have to worry about prompting the user when guessing the hostname. also updated documentation. | |||
2009-02-20 | monkeysphere-host revoke-key should now be capable of publishing the | Daniel Kahn Gillmor | |
revocation certificate to the keyservers directly, should the admin want that. It can also run without prompting, if MONKEYSPHERE_PROMPT=false. In the no-prompts case, it never publishes to the keyserver, it indicates that the key was compromised, and it writes a boilerplate description to make it easy to identify this kind of certificate. | |||
2009-02-20 | trivial implementation of monkeysphere-host revoke-key: just prints ↵ | Daniel Kahn Gillmor | |
ascii-armored revocation certificate to stdout, and admin is expected to know what to do with it. | |||
2009-02-19 | remove import_subkey from monkeysphere usage and man page until we get | Jameson Graef Rollins | |
a chance to fully implement it. |