Age | Commit message (Collapse) | Author |
|
This rework removes any assumption that monkeysphere-host is just
managing a single host key, or that the keys are used specifically for
ssh. The UI is exactly backwards compatible except that hostnames
('example.com') must be replaced by full service names
('ssh://example.com'). This incarnation passes the old tests with
those changes only.
There are a couple of things that still need to be done:
- need to see if a transition script is needed (some local file names
have changed)
- need to fill in check_service_name function to verify that a
specified service name fits the expected format.
- update diagnostics appropriately
|
|
any hostname guessing. this is so that we don't have to worry about
prompting the user when guessing the hostname. also updated
documentation.
|
|
|
|
|
|
did a lot of work to bring them up-to-date, and better handle argument
checking. also updated man page, changelog, and tests/basic.
|
|
to import from stdin. modify man page and test accordingly.
|
|
|
|
MHTMPDIR, since it's not needed.
|
|
much gpg output as possible. then cleanup gpg invocations.
|
|
it's never needed to be run manually, and can therefore be supressed
in the usage/documentation. Also, add setup to the postinst script so
that it's setup on installation.
Also add pipefail to ma, and try to supress unnecessary gpg output,
and redirect other to log debug.
|
|
probably don't want the host keyring to be accepting any certifications for anything.
|
|
every function that alters the host keyring, so that all changes will
show up in exported pub key file, and in show-key.
|
|
|
|
|
|
the fingerprint from the host pgp public key. Prevents us from having
to maintain the ssh pub key file, and generally makes things simpler.
Also allows us to go back to having import_key take the key on stdin
(which dkg will like).
|
|
|
|
dkg won't like this, but I think it's necessary so that we can generate the ssh pub key file, which is needed for subsequenty works.
|
|
full host key info.
|
|
- create_*_*_file to create the key files
- load_*fingerprint to load the host fingerprint into an exported
variable (HOST_FINGERPRINT)
- check_host_*key to check for the presence of a host key
modified {import,gen}_key to use these new functions.
|
|
HOST_FINGERPRINT variables.
|
|
|
|
gpg_host_export_to_ssh_file functions, and update the {gen,import}_key
functions accordingly.
|
|
|
|
- remove stuff about expiration, so we assume keys imported/generated
with no expiration
- set expiration with 'set-expire' function
- update tests to test key importing and generation
- fix some bugs
|
|
- fix some references to old function names
- move fingerprint_server_key to be fingerprint_host_key
- update diagnostic scripts
|
|
|
|
scripts
|
|
Makefile as well)
|