summaryrefslogtreecommitdiff
path: root/src/share/mh
AgeCommit message (Collapse)Author
2010-05-06do not fail or bail when admin interactively declines to publish a key with m-hDaniel Kahn Gillmor
2010-05-06support x509 anchors for monkeysphere-host, allow shared anchors between m-a ↵Daniel Kahn Gillmor
and mh (closes MS #2288)
2010-01-19re-work monkeysphere-host diagnostics with an eye toward multiple host keysDaniel Kahn Gillmor
2010-01-18canonicalize prompting to prompt if MONKEYSPHERE_PROMPT != 'false'Jameson Rollins
2010-01-18add prompt if a service name is already being used then importing a key or ↵Jameson Rollins
adding a name. This can be overridden with the MONKEYSPHERE_PROMPT var.
2010-01-18renaming m-h update_gpg_pub_file to update_pgp_pub_fileDaniel Kahn Gillmor
2010-01-18add check that service name isn't already in use in import_keyJameson Rollins
2010-01-15Major rework of monkeysphere-host to handle multiple host keys.Jameson Rollins
This rework removes any assumption that monkeysphere-host is just managing a single host key, or that the keys are used specifically for ssh. The UI is exactly backwards compatible except that hostnames ('example.com') must be replaced by full service names ('ssh://example.com'). This incarnation passes the old tests with those changes only. There are a couple of things that still need to be done: - need to see if a transition script is needed (some local file names have changed) - need to fill in check_service_name function to verify that a specified service name fits the expected format. - update diagnostics appropriately
2009-07-14improvements monkeysphere-host diagnosticsJameson Graef Rollins
I made a couple of improvements to the mh diagnostics script, including rearranging some of the test, to try to better handle some of the possible low-level failures that one might run into. Hopefully this will be a little more informative. closes MS #624.
2009-07-14make sure that revokehostname sees the pieces it needs to see in order to ↵Daniel Kahn Gillmor
create a useful revocation certificate.
2009-07-14ensure proper usage flags on new hostname selfsigsDaniel Kahn Gillmor
2009-07-14simplifying find_host_user_id function.Daniel Kahn Gillmor
2009-07-14fixing find_host_userid -- did this ever work?Daniel Kahn Gillmor
2009-07-14tests/basic now tests for adding and revoking hostnames.Daniel Kahn Gillmor
2009-07-14monkeysphere-host add-hostname now uses perl backend.Daniel Kahn Gillmor
2009-07-11Merge commit 'mlcastle/master'Jameson Graef Rollins
2009-07-11more replacement of read -p with printf; read (re #446)mike castleman
2009-07-11explicitly set MONKEYSPHERE_GROUPJameson Graef Rollins
The monkeysphere group is now determined from the system "groups" command, and then MONKEYSPHERE_GROUP is explicitly set from this, and then used when setting group ownership.
2009-03-22some more pruning of unnecessary usage of cat for the gnupg scripts.Jameson Graef Rollins
2009-03-18remove some extraneous invocations of cat.Daniel Kahn Gillmor
2009-03-01refer to the m-h set-expire instead of m-h extend-key in m-h diagnostics.Daniel Kahn Gillmor
2009-02-21make sure all prompt messages are going to stderrJameson Graef Rollins
2009-02-21fix output formatting for cases where multiple fingerprints are found, in ↵Jameson Graef Rollins
functions that are doing that sort of thing
2009-02-21add tests to add_revoker and add_certifier that more than one key was not ↵Jameson Graef Rollins
found when adding by using key ID.
2009-02-21import-key now requires a hostname be specified, and no longer doesJameson Graef Rollins
any hostname guessing. this is so that we don't have to worry about prompting the user when guessing the hostname. also updated documentation.
2009-02-21fix failure message in import_keyJameson Graef Rollins
2009-02-20tweak/cleanup some of the prompts.Jameson Graef Rollins
2009-02-20tune automated revocation certificate description; add FIXME to allow it to ↵Daniel Kahn Gillmor
be set explicitly.
2009-02-20monkeysphere-host revoke-key should now be capable of publishing theDaniel Kahn Gillmor
revocation certificate to the keyservers directly, should the admin want that. It can also run without prompting, if MONKEYSPHERE_PROMPT=false. In the no-prompts case, it never publishes to the keyserver, it indicates that the key was compromised, and it writes a boilerplate description to make it easy to identify this kind of certificate.
2009-02-20trivial implementation of monkeysphere-host revoke-key: just prints ↵Daniel Kahn Gillmor
ascii-armored revocation certificate to stdout, and admin is expected to know what to do with it.
2009-02-20clarify revoke_hostname warningDaniel Kahn Gillmor
2009-02-20explicitly set GNUPGHOME in su_monkeysphere_user calls to gpg in ↵Jameson Graef Rollins
add_revoker, to avoid any confusion about having GNUPGHOME as a tempdir exported to the environment.
2009-02-20stupid bug fixJameson Graef Rollins
2009-02-20add_revoker fully working. also cleanup of add_certifier.Jameson Graef Rollins
add_revoker and add_certifier to many similar procedures, so I'm trying to keep them in sync as I figure out the right way to handle things.
2009-02-19Merge commit 'jrollins/master'Daniel Kahn Gillmor
2009-02-19clean up the diagnostics functions, check for ID-Certifiers in m-a dDaniel Kahn Gillmor
2009-02-19diagnostics should now check for cruft from old versions of the monkeysphere.Daniel Kahn Gillmor
2009-02-19fix arg parsing in add_certifier to allow of - for stdin read.Jameson Graef Rollins
2009-02-19Modify/cleanup add_certifier and add_revoker, so that their code baseJameson Graef Rollins
is more similar, and so that they can read keys from stdin instead of just from a file. Also fix the permissions on the tempdir in publish_key.
2009-02-19The monkeysphere {import,gen}_subkey functions were not up-to-date.Jameson Graef Rollins
did a lot of work to bring them up-to-date, and better handle argument checking. also updated man page, changelog, and tests/basic.
2009-02-19modify import_key to take the key file to import as an argument. can be '-' ↵Jameson Graef Rollins
to import from stdin. modify man page and test accordingly.
2009-02-19fail if hostname can not be determined in import_keyJameson Graef Rollins
2009-02-19tweak some of the prompting, to change defaults, and add PROMPT usage where ↵Jameson Graef Rollins
missing
2009-02-18new msmktempdir function, to simplify making temporary directories. remove ↵Jameson Graef Rollins
MHTMPDIR, since it's not needed.
2009-02-18add no-tty, quiet, and no-greeting to gpg wrapper invocations to supress as ↵Jameson Graef Rollins
much gpg output as possible. then cleanup gpg invocations.
2009-02-17fix ma so that the setup command is folded into the other commands, soJameson Graef Rollins
it's never needed to be run manually, and can therefore be supressed in the usage/documentation. Also, add setup to the postinst script so that it's setup on installation. Also add pipefail to ma, and try to supress unnecessary gpg output, and redirect other to log debug.
2009-02-17remove setting of ultimate owner trust on imported host key, since we ↵Jameson Graef Rollins
probably don't want the host keyring to be accepting any certifications for anything.
2009-02-17add ability to bypass prompting with a MONKEYSPHERE_PROMPT variable,Jameson Graef Rollins
for functions that prompt for confirmation. Also fix publish_key function (NOT TESTED).
2009-02-17rename create_gpg_pub_file to be update_gpg_pub_file, and add it toJameson Graef Rollins
every function that alters the host keyring, so that all changes will show up in exported pub key file, and in show-key.
2009-02-17tweak the show-key output, and fix some comments.Jameson Graef Rollins