summaryrefslogtreecommitdiff
path: root/src/common
AgeCommit message (Collapse)Author
2008-08-15Merge commit 'dkg/master'Jameson Graef Rollins
Conflicts: src/monkeysphere-server Resolved conflicts in revoke-hostname, and finish work on them.
2008-08-15more work on hostname add/revokeJameson Graef Rollins
2008-08-15first pass at revoking hostnames.Daniel Kahn Gillmor
2008-08-14Add sorting of the processed key lines so that "good" keys are outputJameson Graef Rollins
at the end. This is done so that they take precedence over "bad" when being processed in key files. If bad keys are processed after good keys, there is a possibility of malicious bad key causing good keys to be continually removed from key files, which would be a big nuisance.
2008-08-13Merge commit 'dkg/master'Jameson Graef Rollins
2008-08-12fix another bug when processing ssh key files that do not exist.Jameson Graef Rollins
2008-08-12unescape *all* colons, instead of just the first one in encoded user IDsDaniel Kahn Gillmor
2008-08-08made clearer comments, earlier bailouts for some user ID processingDaniel Kahn Gillmor
2008-08-03- Fixed bug in monkeysphere update-authorized_keys subcommand that hadJameson Graef Rollins
been preventing disallowed user ids from being properly removed from authorized_keys file. - Fixed file md5sum checking.
2008-08-03rework out user id processing is done to provide better diagnostic output.Jameson Graef Rollins
2008-08-02Fix how file modification check is done, and fix accidental extraneousJameson Graef Rollins
output.
2008-07-31Fix inaccurate comment in process_user_id function.Jameson Graef Rollins
2008-07-27Tweak how empty authorized_user_ids and known_hosts files are handled.Jameson Graef Rollins
2008-07-25allowing expiration dates with strings longer than one digit (e.g. "10m" ↵Daniel Kahn Gillmor
meaning "10 months")
2008-07-10Added file permission check function, and fixed bug in key writing forJameson Graef Rollins
untranslated keys.
2008-07-10Update man pages, and tweak default error return code.Jameson Graef Rollins
2008-07-09A bunch of changes for variable scoping, exit codes, etc. SeeJameson Graef Rollins
debian/changelog.
2008-07-01A bunch of work on man pages to shore up interface and behavior beforeJameson Graef Rollins
developer release. Still do a bit of work to make sure actual commands meet the outlined behaviors. Small tweak to remove_line function to make sure it doesn't accidentally have a regexp match.
2008-06-29More work on priviledge separation for host/authentication keyring.Jameson Graef Rollins
Working now using dkg's new method with trust signatures. Implement better return codes for functions. Cleanup of functions.
2008-06-24Priviledge separation: use new monkeysphere user to handleJameson Graef Rollins
authentication keychain for server. This required a bunch of changes to all ms-server functions. Seems to be working ok, although it feels kind of hackish.
2008-06-24Move to /var/lib/monkeysphere instead of /var/cache/monkeysphere.Jameson Graef Rollins
Improve ms-server update-user function. Update/fix config files to remove some unwanted configs, and clarify some things.
2008-06-23fix some authorized_keys updating bugs in ms-server, and update to useJameson Graef Rollins
new ability of openpgp to handle 40 char fingerprints.
2008-06-23Merge commit 'dkg/master'Jameson Graef Rollins
2008-06-23switched shortcut for monkeysphere-server update-users to "u", added some ↵Daniel Kahn Gillmor
FIXMEs to monkeysphere-server.
2008-06-23Add trap to remove lockfiles on exit.Jameson Graef Rollins
2008-06-23Provide better (ie. more informative) return codes. Required someJameson Graef Rollins
modifications to a couple of different functions.
2008-06-22Improve trust-key function.Jameson Graef Rollins
2008-06-21Improved gen-key function for server.Jameson Graef Rollins
Update TODO.
2008-06-21tiny change to commentJameson Graef Rollins
2008-06-20add file locking to known_hosts and authorized_keysJameson Graef Rollins
2008-06-19Better handling of unknown users in server update-users. Updated TODO file.Jameson Graef Rollins
2008-06-19Remove {update,remove}-userids functions, since we decided theyJameson Graef Rollins
weren't worth it. Updated man pages as well.
2008-06-19Added server config variable to specify user authorized_user_ids file,Jameson Graef Rollins
and changed default.
2008-06-19clarify why monkeysphere-server publish_key is currently non-functional.Daniel Kahn Gillmor
2008-06-18Update to new agreed default host key usage flag (only "a" requiredJameson Graef Rollins
for users and hosts). Update TODO file. Some other small changes.
2008-06-17Very small change to comment field for authorized_keys lines.Jameson Graef Rollins
2008-06-17Major rework to remove all caching. Everything processed straightJameson Graef Rollins
from gpg keyring. Major code simplification and cleanup.
2008-06-16Merge branch 'master' into no-cacheJameson Graef Rollins
Conflicts: src/common src/monkeysphere src/monkeysphere-ssh-proxycommand
2008-06-16Total rework of uid processing: rid of cache directoryJameson Graef Rollins
2008-06-16Add log output for keyserver checking.Jameson Graef Rollins
Fix bug in proxy command to export CHECK_KEYSERVER variable.
2008-06-16Fix bug in configuration handling for HASH_KNOWN_HOSTS andJameson Graef Rollins
USER_CONTROLLED_AUTHORIZED_KEYS
2008-06-16Allow for specification of whether to check keyserver.Jameson Graef Rollins
Update proxy command to check keyserver if host not found in known_hosts.
2008-06-15Separate required key capability variables for users and hosts.Jameson Graef Rollins
Change default for user to be "a", and host to be "e a".
2008-06-14Add lsign-key to the trust_keys function so that the trusted keyJameson Graef Rollins
actually ends up with full validity.
2008-06-13Add 'remove_userid' function, inverse of 'update_userids'.Jameson Graef Rollins
Also, tweaked some of the output and man pages.
2008-06-13More cleanup:Jameson Graef Rollins
- Batch mode for trust_key function. - fix some loggging. - Clean up publish_server_key function -> STILL NON-FUNCTIONING - more work on monkeysphere-ssh-proxycommand man page
2008-06-13Modify how logging is handled. Now send most everything to stderr.Jameson Graef Rollins
Change to known_hosts hashing on by default.
2008-06-13fix bugs in ssh key export functionsJameson Graef Rollins
2008-06-13further debianization work. (also, made src/common non-executable,Daniel Kahn Gillmor
since it is sourced, not executed).
2008-06-12Man page work.Jameson Graef Rollins
- flesh out more of the man pages for monkeysphere and monkeysphere-server - move the server cache directory to /var/cache, where it should be.