summaryrefslogtreecommitdiff
path: root/src/monkeysphere-host
AgeCommit message (Collapse)Author
2010-01-15Try to fix monkeysphere-host and tests/basic for revoke-key testJameson Rollins
Unfortunately there's still a problem that I can't quite figure out. gpg is for some reason failing to import that revocation certificate. Could it be because gpg can't accept ascii armored certificates as input? I'm at a loss.
2010-01-15Major rework of monkeysphere-host to handle multiple host keys.Jameson Rollins
This rework removes any assumption that monkeysphere-host is just managing a single host key, or that the keys are used specifically for ssh. The UI is exactly backwards compatible except that hostnames ('example.com') must be replaced by full service names ('ssh://example.com'). This incarnation passes the old tests with those changes only. There are a couple of things that still need to be done: - need to see if a transition script is needed (some local file names have changed) - need to fill in check_service_name function to verify that a specified service name fits the expected format. - update diagnostics appropriately
2010-01-11normalize output for monkeysphere when no subcommand is issued or when an ↵Daniel Kahn Gillmor
unknown subcommand is issued
2010-01-11fix invocation without subcommands to call usage function and exit 1 explicitllyJameson Rollins
2010-01-04Its more useful and standard to actually output the 'help' output whenMicah Anderson
an improper number of arguments is passed, rather output a line telling the user how to get the help output.
2009-07-14improvements monkeysphere-host diagnosticsJameson Graef Rollins
I made a couple of improvements to the mh diagnostics script, including rearranging some of the test, to try to better handle some of the possible low-level failures that one might run into. Hopefully this will be a little more informative. closes MS #624.
2009-07-14simplifying find_host_user_id function.Daniel Kahn Gillmor
2009-07-14fixing find_host_userid -- did this ever work?Daniel Kahn Gillmor
2009-07-11Check for a host key before running monkeysphere-host diagnosticsGreg Lyle
Closes #624
2009-07-11improve function to get primary group to make it more portableJameson Graef Rollins
2009-07-11explicitly set MONKEYSPHERE_GROUPJameson Graef Rollins
The monkeysphere group is now determined from the system "groups" command, and then MONKEYSPHERE_GROUP is explicitly set from this, and then used when setting group ownership.
2009-03-10Merge commit 'dkg/master'Jameson Graef Rollins
2009-03-10cleaning up a lingering non-portable mktemp invocation.Daniel Kahn Gillmor
2009-03-07fix the marginal ui output so that it's not prefixed by theJameson Graef Rollins
LOG_PREFIX. also make sure to always export the LOG_PREFIX, so that it gets passed to subprocces su_monkeysphere_user.
2009-03-03fix to logging to prefix all log output with log prefix, and allow changing ↵Jameson Graef Rollins
of log prefix.
2009-03-02usage review/tweaks for m-a and m-hDaniel Kahn Gillmor
2009-03-02very small tweaks to usages.Jameson Graef Rollins
2009-03-01break out default variables into their own file: defaultenvJameson Graef Rollins
this allows the common file to be sourced without reseting variables to their defaults, which was causing a problem with su_monkeysphere_user. also added some more debug messages.
2009-02-28openpgp2ssh in ms-host show-key function takes the host gpg key from the ↵Jameson Graef Rollins
temporary gpghome, instead of from the saved ssh_host_key_rsa.pub.gpg key file.
2009-02-22fix some return code setting stuf that was no longer being used, and change ↵Jameson Graef Rollins
name of return code variable in update_users, since all-caps variables should be reserved for global vars.
2009-02-22Fix how version number is saved/retrieved. Version is now stored inJameson Graef Rollins
VERSION file, which is created in the tarball target. This is then installed at /usr/share/monkeysphere/VERSION, and cat'ed when the version number is requested by the front-end ui. No more manual setting of version number required (to avoid future problems, aka "0.23.1"). This system is also more flexible, as the VERSION file could potentially hold more info than just the release number.
2009-02-21adjusting extraction of revokers.Daniel Kahn Gillmor
2009-02-21make show-key so that it works even if there are no revokers.Jameson Graef Rollins
2009-02-21extend show-key to show fingerprints of revokers as well.Jameson Graef Rollins
2009-02-21add FIXME to show key about how it should show revokers as well.Jameson Graef Rollins
2009-02-21import-key now requires a hostname be specified, and no longer doesJameson Graef Rollins
any hostname guessing. this is so that we don't have to worry about prompting the user when guessing the hostname. also updated documentation.
2009-02-20monkeysphere-host revoke-key should now be capable of publishing theDaniel Kahn Gillmor
revocation certificate to the keyservers directly, should the admin want that. It can also run without prompting, if MONKEYSPHERE_PROMPT=false. In the no-prompts case, it never publishes to the keyserver, it indicates that the key was compromised, and it writes a boilerplate description to make it easy to identify this kind of certificate.
2009-02-19Modify/cleanup add_certifier and add_revoker, so that their code baseJameson Graef Rollins
is more similar, and so that they can read keys from stdin instead of just from a file. Also fix the permissions on the tempdir in publish_key.
2009-02-19modify import_key to take the key file to import as an argument. can be '-' ↵Jameson Graef Rollins
to import from stdin. modify man page and test accordingly.
2009-02-19don't use /dev/stdin hack with ssh-keygen to get ssh fingerprint. just use ↵Jameson Graef Rollins
a tmp file.
2009-02-19make sure fingerprint is loaded for update_gpg_pub_fileJameson Graef Rollins
2009-02-19fix call to transition script in postinst script, and fix lintian error ↵Jameson Graef Rollins
about transitions README
2009-02-19small usage changesJameson Graef Rollins
2009-02-19Cleanup how variables are specified and loaded:Jameson Graef Rollins
- define more common variables in share/common - cleanup how defaults are specified - fix how CHECK_KEYSERVER was determined in monkeysphere Fix calls to update_known_hosts and update_authorized_keys in monkeysphere so that some of the checks are done within the functions themselves, as opposed in the monkeysphere wrapper, so that other functions can call them easier. Fix ssh-proxycommand that had some left over cruft from the transition.
2009-02-18new msmktempdir function, to simplify making temporary directories. remove ↵Jameson Graef Rollins
MHTMPDIR, since it's not needed.
2009-02-18add no-tty, quiet, and no-greeting to gpg wrapper invocations to supress as ↵Jameson Graef Rollins
much gpg output as possible. then cleanup gpg invocations.
2009-02-18fix some log outputJameson Graef Rollins
2009-02-17fix ma so that the setup command is folded into the other commands, soJameson Graef Rollins
it's never needed to be run manually, and can therefore be supressed in the usage/documentation. Also, add setup to the postinst script so that it's setup on installation. Also add pipefail to ma, and try to supress unnecessary gpg output, and redirect other to log debug.
2009-02-17fix typoDaniel Kahn Gillmor
2009-02-17add ability to bypass prompting with a MONKEYSPHERE_PROMPT variable,Jameson Graef Rollins
for functions that prompt for confirmation. Also fix publish_key function (NOT TESTED).
2009-02-17rename create_gpg_pub_file to be update_gpg_pub_file, and add it toJameson Graef Rollins
every function that alters the host keyring, so that all changes will show up in exported pub key file, and in show-key.
2009-02-17tweak the show-key output, and fix some comments.Jameson Graef Rollins
2009-02-17fix a couple of left over references to expertJameson Graef Rollins
2009-02-17check host for gpg pub key file instead of fingerprint, and modify show_key ↵Jameson Graef Rollins
to be able to show full key info to all users.
2009-02-16make host show_key use just the pgp pub key file to get the ssh fingerprint, ↵Jameson Graef Rollins
as it should have been doing before
2009-02-16fix reference to HOST_FINGERPRINT in show-key, and fix some referencesJameson Graef Rollins
to "expert" in test.
2009-02-16REMOVE GEN_KEY. The gen_key function is entirely removed. DecidedJameson Graef Rollins
this was OK now that import_key works, and we can't really see a reason to keep it around. We can resurect it down the line if need be. Also, removed "expert" subcommand, after promting import_key, since it may be need semi-regularly. The other "expert" commands are now just not listed in the usage.
2009-02-16Stop all creation of a ssh_host_rsa_key.pub. Use openpgp2ssh to getJameson Graef Rollins
the fingerprint from the host pgp public key. Prevents us from having to maintain the ssh pub key file, and generally makes things simpler. Also allows us to go back to having import_key take the key on stdin (which dkg will like).
2009-02-16make sure MHTMPDIR is defined and createdJameson Graef Rollins
2009-02-15unbreakout some functions that were broken out earlier for handling creating ↵Jameson Graef Rollins
ssh key files, since they are actually done in different ways under different circumstances.