Age | Commit message (Collapse) | Author | |
---|---|---|---|
2009-07-14 | make sure that revokehostname sees the pieces it needs to see in order to ↵ | Daniel Kahn Gillmor | |
create a useful revocation certificate. | |||
2009-07-14 | ensure proper usage flags on new hostname selfsigs | Daniel Kahn Gillmor | |
2009-07-14 | simplifying find_host_user_id function. | Daniel Kahn Gillmor | |
2009-07-14 | fixing find_host_userid -- did this ever work? | Daniel Kahn Gillmor | |
2009-07-14 | tests/basic now tests for adding and revoking hostnames. | Daniel Kahn Gillmor | |
2009-07-14 | monkeysphere-host add-hostname now uses perl backend. | Daniel Kahn Gillmor | |
2009-07-11 | Merge commit 'mlcastle/master' | Jameson Graef Rollins | |
2009-07-11 | more replacement of read -p with printf; read (re #446) | mike castleman | |
2009-07-11 | explicitly set MONKEYSPHERE_GROUP | Jameson Graef Rollins | |
The monkeysphere group is now determined from the system "groups" command, and then MONKEYSPHERE_GROUP is explicitly set from this, and then used when setting group ownership. | |||
2009-03-22 | some more pruning of unnecessary usage of cat for the gnupg scripts. | Jameson Graef Rollins | |
2009-03-18 | remove some extraneous invocations of cat. | Daniel Kahn Gillmor | |
2009-03-01 | refer to the m-h set-expire instead of m-h extend-key in m-h diagnostics. | Daniel Kahn Gillmor | |
2009-02-21 | make sure all prompt messages are going to stderr | Jameson Graef Rollins | |
2009-02-21 | fix output formatting for cases where multiple fingerprints are found, in ↵ | Jameson Graef Rollins | |
functions that are doing that sort of thing | |||
2009-02-21 | add tests to add_revoker and add_certifier that more than one key was not ↵ | Jameson Graef Rollins | |
found when adding by using key ID. | |||
2009-02-21 | import-key now requires a hostname be specified, and no longer does | Jameson Graef Rollins | |
any hostname guessing. this is so that we don't have to worry about prompting the user when guessing the hostname. also updated documentation. | |||
2009-02-21 | fix failure message in import_key | Jameson Graef Rollins | |
2009-02-20 | tweak/cleanup some of the prompts. | Jameson Graef Rollins | |
2009-02-20 | tune automated revocation certificate description; add FIXME to allow it to ↵ | Daniel Kahn Gillmor | |
be set explicitly. | |||
2009-02-20 | monkeysphere-host revoke-key should now be capable of publishing the | Daniel Kahn Gillmor | |
revocation certificate to the keyservers directly, should the admin want that. It can also run without prompting, if MONKEYSPHERE_PROMPT=false. In the no-prompts case, it never publishes to the keyserver, it indicates that the key was compromised, and it writes a boilerplate description to make it easy to identify this kind of certificate. | |||
2009-02-20 | trivial implementation of monkeysphere-host revoke-key: just prints ↵ | Daniel Kahn Gillmor | |
ascii-armored revocation certificate to stdout, and admin is expected to know what to do with it. | |||
2009-02-20 | clarify revoke_hostname warning | Daniel Kahn Gillmor | |
2009-02-20 | explicitly set GNUPGHOME in su_monkeysphere_user calls to gpg in ↵ | Jameson Graef Rollins | |
add_revoker, to avoid any confusion about having GNUPGHOME as a tempdir exported to the environment. | |||
2009-02-20 | stupid bug fix | Jameson Graef Rollins | |
2009-02-20 | add_revoker fully working. also cleanup of add_certifier. | Jameson Graef Rollins | |
add_revoker and add_certifier to many similar procedures, so I'm trying to keep them in sync as I figure out the right way to handle things. | |||
2009-02-19 | Merge commit 'jrollins/master' | Daniel Kahn Gillmor | |
2009-02-19 | clean up the diagnostics functions, check for ID-Certifiers in m-a d | Daniel Kahn Gillmor | |
2009-02-19 | diagnostics should now check for cruft from old versions of the monkeysphere. | Daniel Kahn Gillmor | |
2009-02-19 | fix arg parsing in add_certifier to allow of - for stdin read. | Jameson Graef Rollins | |
2009-02-19 | Modify/cleanup add_certifier and add_revoker, so that their code base | Jameson Graef Rollins | |
is more similar, and so that they can read keys from stdin instead of just from a file. Also fix the permissions on the tempdir in publish_key. | |||
2009-02-19 | The monkeysphere {import,gen}_subkey functions were not up-to-date. | Jameson Graef Rollins | |
did a lot of work to bring them up-to-date, and better handle argument checking. also updated man page, changelog, and tests/basic. | |||
2009-02-19 | modify import_key to take the key file to import as an argument. can be '-' ↵ | Jameson Graef Rollins | |
to import from stdin. modify man page and test accordingly. | |||
2009-02-19 | fail if hostname can not be determined in import_key | Jameson Graef Rollins | |
2009-02-19 | tweak some of the prompting, to change defaults, and add PROMPT usage where ↵ | Jameson Graef Rollins | |
missing | |||
2009-02-18 | new msmktempdir function, to simplify making temporary directories. remove ↵ | Jameson Graef Rollins | |
MHTMPDIR, since it's not needed. | |||
2009-02-18 | add no-tty, quiet, and no-greeting to gpg wrapper invocations to supress as ↵ | Jameson Graef Rollins | |
much gpg output as possible. then cleanup gpg invocations. | |||
2009-02-17 | fix ma so that the setup command is folded into the other commands, so | Jameson Graef Rollins | |
it's never needed to be run manually, and can therefore be supressed in the usage/documentation. Also, add setup to the postinst script so that it's setup on installation. Also add pipefail to ma, and try to supress unnecessary gpg output, and redirect other to log debug. | |||
2009-02-17 | remove setting of ultimate owner trust on imported host key, since we ↵ | Jameson Graef Rollins | |
probably don't want the host keyring to be accepting any certifications for anything. | |||
2009-02-17 | add ability to bypass prompting with a MONKEYSPHERE_PROMPT variable, | Jameson Graef Rollins | |
for functions that prompt for confirmation. Also fix publish_key function (NOT TESTED). | |||
2009-02-17 | rename create_gpg_pub_file to be update_gpg_pub_file, and add it to | Jameson Graef Rollins | |
every function that alters the host keyring, so that all changes will show up in exported pub key file, and in show-key. | |||
2009-02-17 | tweak the show-key output, and fix some comments. | Jameson Graef Rollins | |
2009-02-17 | set ultimate ownertrust on hostkey after import | Jameson Graef Rollins | |
2009-02-17 | fix a couple of left over references to expert | Jameson Graef Rollins | |
2009-02-16 | add some minimal checks to import_key that the default hostname is legitimate. | Jameson Graef Rollins | |
2009-02-16 | REMOVE GEN_KEY. The gen_key function is entirely removed. Decided | Jameson Graef Rollins | |
this was OK now that import_key works, and we can't really see a reason to keep it around. We can resurect it down the line if need be. Also, removed "expert" subcommand, after promting import_key, since it may be need semi-regularly. The other "expert" commands are now just not listed in the usage. | |||
2009-02-16 | Stop all creation of a ssh_host_rsa_key.pub. Use openpgp2ssh to get | Jameson Graef Rollins | |
the fingerprint from the host pgp public key. Prevents us from having to maintain the ssh pub key file, and generally makes things simpler. Also allows us to go back to having import_key take the key on stdin (which dkg will like). | |||
2009-02-16 | make sure MHTMPDIR is defined and created | Jameson Graef Rollins | |
2009-02-15 | unbreakout some functions that were broken out earlier for handling creating ↵ | Jameson Graef Rollins | |
ssh key files, since they are actually done in different ways under different circumstances. | |||
2009-02-15 | Change import_key to take the path to the file to import as an argument. ↵ | Jameson Graef Rollins | |
dkg won't like this, but I think it's necessary so that we can generate the ssh pub key file, which is needed for subsequenty works. | |||
2009-02-15 | fix the publish_key function for new gpg_sphere. | Jameson Graef Rollins | |