Age | Commit message (Collapse) | Author | |
---|---|---|---|
2010-01-18 | removing superfluous eval | Daniel Kahn Gillmor | |
2010-01-18 | flesh out check for reasonable-looking service names | Daniel Kahn Gillmor | |
2010-01-18 | canonicalize prompting to prompt if MONKEYSPHERE_PROMPT != 'false' | Jameson Rollins | |
2010-01-18 | add prompt if a service name is already being used then importing a key or ↵ | Jameson Rollins | |
adding a name. This can be overridden with the MONKEYSPHERE_PROMPT var. | |||
2010-01-18 | monkeysphere-host: reverting from host_fingerprints() to ↵ | Daniel Kahn Gillmor | |
list_primary_fingerprints() | |||
2010-01-18 | made public use of m-h show-keys instead of show-key, fixed stupid ↵ | Daniel Kahn Gillmor | |
field-numbering bug in fingerprint extraction | |||
2010-01-18 | renaming host_keys.pub.gpg to host_keys.pub.pgp | Daniel Kahn Gillmor | |
2010-01-18 | got rid of monkeysphere-host fprs file | Daniel Kahn Gillmor | |
2010-01-18 | remove reference to HOST_KEY_FPR_FILE | Jameson Rollins | |
except in update_gpg_pub_file, which dkg is going to modify to just hold the host keys and not any other keys (like revoker keys). this file alone can then be used to get host key info for non-priviledged users. | |||
2010-01-18 | suppress superfulous error output | Jameson Rollins | |
2010-01-18 | fix show_key function to handle user ID input (needed for import_key) | Jameson Rollins | |
2010-01-16 | small tweaks to failure messages | Jameson Rollins | |
2010-01-15 | Try to fix monkeysphere-host and tests/basic for revoke-key test | Jameson Rollins | |
Unfortunately there's still a problem that I can't quite figure out. gpg is for some reason failing to import that revocation certificate. Could it be because gpg can't accept ascii armored certificates as input? I'm at a loss. | |||
2010-01-15 | Major rework of monkeysphere-host to handle multiple host keys. | Jameson Rollins | |
This rework removes any assumption that monkeysphere-host is just managing a single host key, or that the keys are used specifically for ssh. The UI is exactly backwards compatible except that hostnames ('example.com') must be replaced by full service names ('ssh://example.com'). This incarnation passes the old tests with those changes only. There are a couple of things that still need to be done: - need to see if a transition script is needed (some local file names have changed) - need to fill in check_service_name function to verify that a specified service name fits the expected format. - update diagnostics appropriately | |||
2010-01-11 | normalize output for monkeysphere when no subcommand is issued or when an ↵ | Daniel Kahn Gillmor | |
unknown subcommand is issued | |||
2010-01-11 | fix invocation without subcommands to call usage function and exit 1 explicitlly | Jameson Rollins | |
2010-01-04 | Its more useful and standard to actually output the 'help' output when | Micah Anderson | |
an improper number of arguments is passed, rather output a line telling the user how to get the help output. | |||
2009-07-14 | improvements monkeysphere-host diagnostics | Jameson Graef Rollins | |
I made a couple of improvements to the mh diagnostics script, including rearranging some of the test, to try to better handle some of the possible low-level failures that one might run into. Hopefully this will be a little more informative. closes MS #624. | |||
2009-07-14 | simplifying find_host_user_id function. | Daniel Kahn Gillmor | |
2009-07-14 | fixing find_host_userid -- did this ever work? | Daniel Kahn Gillmor | |
2009-07-11 | Check for a host key before running monkeysphere-host diagnostics | Greg Lyle | |
Closes #624 | |||
2009-07-11 | improve function to get primary group to make it more portable | Jameson Graef Rollins | |
2009-07-11 | explicitly set MONKEYSPHERE_GROUP | Jameson Graef Rollins | |
The monkeysphere group is now determined from the system "groups" command, and then MONKEYSPHERE_GROUP is explicitly set from this, and then used when setting group ownership. | |||
2009-03-10 | Merge commit 'dkg/master' | Jameson Graef Rollins | |
2009-03-10 | cleaning up a lingering non-portable mktemp invocation. | Daniel Kahn Gillmor | |
2009-03-07 | fix the marginal ui output so that it's not prefixed by the | Jameson Graef Rollins | |
LOG_PREFIX. also make sure to always export the LOG_PREFIX, so that it gets passed to subprocces su_monkeysphere_user. | |||
2009-03-03 | fix to logging to prefix all log output with log prefix, and allow changing ↵ | Jameson Graef Rollins | |
of log prefix. | |||
2009-03-02 | usage review/tweaks for m-a and m-h | Daniel Kahn Gillmor | |
2009-03-02 | very small tweaks to usages. | Jameson Graef Rollins | |
2009-03-01 | break out default variables into their own file: defaultenv | Jameson Graef Rollins | |
this allows the common file to be sourced without reseting variables to their defaults, which was causing a problem with su_monkeysphere_user. also added some more debug messages. | |||
2009-02-28 | openpgp2ssh in ms-host show-key function takes the host gpg key from the ↵ | Jameson Graef Rollins | |
temporary gpghome, instead of from the saved ssh_host_key_rsa.pub.gpg key file. | |||
2009-02-22 | fix some return code setting stuf that was no longer being used, and change ↵ | Jameson Graef Rollins | |
name of return code variable in update_users, since all-caps variables should be reserved for global vars. | |||
2009-02-22 | Fix how version number is saved/retrieved. Version is now stored in | Jameson Graef Rollins | |
VERSION file, which is created in the tarball target. This is then installed at /usr/share/monkeysphere/VERSION, and cat'ed when the version number is requested by the front-end ui. No more manual setting of version number required (to avoid future problems, aka "0.23.1"). This system is also more flexible, as the VERSION file could potentially hold more info than just the release number. | |||
2009-02-21 | adjusting extraction of revokers. | Daniel Kahn Gillmor | |
2009-02-21 | make show-key so that it works even if there are no revokers. | Jameson Graef Rollins | |
2009-02-21 | extend show-key to show fingerprints of revokers as well. | Jameson Graef Rollins | |
2009-02-21 | add FIXME to show key about how it should show revokers as well. | Jameson Graef Rollins | |
2009-02-21 | import-key now requires a hostname be specified, and no longer does | Jameson Graef Rollins | |
any hostname guessing. this is so that we don't have to worry about prompting the user when guessing the hostname. also updated documentation. | |||
2009-02-20 | monkeysphere-host revoke-key should now be capable of publishing the | Daniel Kahn Gillmor | |
revocation certificate to the keyservers directly, should the admin want that. It can also run without prompting, if MONKEYSPHERE_PROMPT=false. In the no-prompts case, it never publishes to the keyserver, it indicates that the key was compromised, and it writes a boilerplate description to make it easy to identify this kind of certificate. | |||
2009-02-19 | Modify/cleanup add_certifier and add_revoker, so that their code base | Jameson Graef Rollins | |
is more similar, and so that they can read keys from stdin instead of just from a file. Also fix the permissions on the tempdir in publish_key. | |||
2009-02-19 | modify import_key to take the key file to import as an argument. can be '-' ↵ | Jameson Graef Rollins | |
to import from stdin. modify man page and test accordingly. | |||
2009-02-19 | don't use /dev/stdin hack with ssh-keygen to get ssh fingerprint. just use ↵ | Jameson Graef Rollins | |
a tmp file. | |||
2009-02-19 | make sure fingerprint is loaded for update_gpg_pub_file | Jameson Graef Rollins | |
2009-02-19 | fix call to transition script in postinst script, and fix lintian error ↵ | Jameson Graef Rollins | |
about transitions README | |||
2009-02-19 | small usage changes | Jameson Graef Rollins | |
2009-02-19 | Cleanup how variables are specified and loaded: | Jameson Graef Rollins | |
- define more common variables in share/common - cleanup how defaults are specified - fix how CHECK_KEYSERVER was determined in monkeysphere Fix calls to update_known_hosts and update_authorized_keys in monkeysphere so that some of the checks are done within the functions themselves, as opposed in the monkeysphere wrapper, so that other functions can call them easier. Fix ssh-proxycommand that had some left over cruft from the transition. | |||
2009-02-18 | new msmktempdir function, to simplify making temporary directories. remove ↵ | Jameson Graef Rollins | |
MHTMPDIR, since it's not needed. | |||
2009-02-18 | add no-tty, quiet, and no-greeting to gpg wrapper invocations to supress as ↵ | Jameson Graef Rollins | |
much gpg output as possible. then cleanup gpg invocations. | |||
2009-02-18 | fix some log output | Jameson Graef Rollins | |
2009-02-17 | fix ma so that the setup command is folded into the other commands, so | Jameson Graef Rollins | |
it's never needed to be run manually, and can therefore be supressed in the usage/documentation. Also, add setup to the postinst script so that it's setup on installation. Also add pipefail to ma, and try to supress unnecessary gpg output, and redirect other to log debug. |