summaryrefslogtreecommitdiff
path: root/src/share/mh
AgeCommit message (Collapse)Author
2009-03-01refer to the m-h set-expire instead of m-h extend-key in m-h diagnostics.Daniel Kahn Gillmor
2009-02-21make sure all prompt messages are going to stderrJameson Graef Rollins
2009-02-21fix output formatting for cases where multiple fingerprints are found, in ↵Jameson Graef Rollins
functions that are doing that sort of thing
2009-02-21add tests to add_revoker and add_certifier that more than one key was not ↵Jameson Graef Rollins
found when adding by using key ID.
2009-02-21import-key now requires a hostname be specified, and no longer doesJameson Graef Rollins
any hostname guessing. this is so that we don't have to worry about prompting the user when guessing the hostname. also updated documentation.
2009-02-21fix failure message in import_keyJameson Graef Rollins
2009-02-20tweak/cleanup some of the prompts.Jameson Graef Rollins
2009-02-20tune automated revocation certificate description; add FIXME to allow it to ↵Daniel Kahn Gillmor
be set explicitly.
2009-02-20monkeysphere-host revoke-key should now be capable of publishing theDaniel Kahn Gillmor
revocation certificate to the keyservers directly, should the admin want that. It can also run without prompting, if MONKEYSPHERE_PROMPT=false. In the no-prompts case, it never publishes to the keyserver, it indicates that the key was compromised, and it writes a boilerplate description to make it easy to identify this kind of certificate.
2009-02-20trivial implementation of monkeysphere-host revoke-key: just prints ↵Daniel Kahn Gillmor
ascii-armored revocation certificate to stdout, and admin is expected to know what to do with it.
2009-02-20clarify revoke_hostname warningDaniel Kahn Gillmor
2009-02-20explicitly set GNUPGHOME in su_monkeysphere_user calls to gpg in ↵Jameson Graef Rollins
add_revoker, to avoid any confusion about having GNUPGHOME as a tempdir exported to the environment.
2009-02-20stupid bug fixJameson Graef Rollins
2009-02-20add_revoker fully working. also cleanup of add_certifier.Jameson Graef Rollins
add_revoker and add_certifier to many similar procedures, so I'm trying to keep them in sync as I figure out the right way to handle things.
2009-02-19Merge commit 'jrollins/master'Daniel Kahn Gillmor
2009-02-19clean up the diagnostics functions, check for ID-Certifiers in m-a dDaniel Kahn Gillmor
2009-02-19diagnostics should now check for cruft from old versions of the monkeysphere.Daniel Kahn Gillmor
2009-02-19fix arg parsing in add_certifier to allow of - for stdin read.Jameson Graef Rollins
2009-02-19Modify/cleanup add_certifier and add_revoker, so that their code baseJameson Graef Rollins
is more similar, and so that they can read keys from stdin instead of just from a file. Also fix the permissions on the tempdir in publish_key.
2009-02-19The monkeysphere {import,gen}_subkey functions were not up-to-date.Jameson Graef Rollins
did a lot of work to bring them up-to-date, and better handle argument checking. also updated man page, changelog, and tests/basic.
2009-02-19modify import_key to take the key file to import as an argument. can be '-' ↵Jameson Graef Rollins
to import from stdin. modify man page and test accordingly.
2009-02-19fail if hostname can not be determined in import_keyJameson Graef Rollins
2009-02-19tweak some of the prompting, to change defaults, and add PROMPT usage where ↵Jameson Graef Rollins
missing
2009-02-18new msmktempdir function, to simplify making temporary directories. remove ↵Jameson Graef Rollins
MHTMPDIR, since it's not needed.
2009-02-18add no-tty, quiet, and no-greeting to gpg wrapper invocations to supress as ↵Jameson Graef Rollins
much gpg output as possible. then cleanup gpg invocations.
2009-02-17fix ma so that the setup command is folded into the other commands, soJameson Graef Rollins
it's never needed to be run manually, and can therefore be supressed in the usage/documentation. Also, add setup to the postinst script so that it's setup on installation. Also add pipefail to ma, and try to supress unnecessary gpg output, and redirect other to log debug.
2009-02-17remove setting of ultimate owner trust on imported host key, since we ↵Jameson Graef Rollins
probably don't want the host keyring to be accepting any certifications for anything.
2009-02-17add ability to bypass prompting with a MONKEYSPHERE_PROMPT variable,Jameson Graef Rollins
for functions that prompt for confirmation. Also fix publish_key function (NOT TESTED).
2009-02-17rename create_gpg_pub_file to be update_gpg_pub_file, and add it toJameson Graef Rollins
every function that alters the host keyring, so that all changes will show up in exported pub key file, and in show-key.
2009-02-17tweak the show-key output, and fix some comments.Jameson Graef Rollins
2009-02-17set ultimate ownertrust on hostkey after importJameson Graef Rollins
2009-02-17fix a couple of left over references to expertJameson Graef Rollins
2009-02-16add some minimal checks to import_key that the default hostname is legitimate.Jameson Graef Rollins
2009-02-16REMOVE GEN_KEY. The gen_key function is entirely removed. DecidedJameson Graef Rollins
this was OK now that import_key works, and we can't really see a reason to keep it around. We can resurect it down the line if need be. Also, removed "expert" subcommand, after promting import_key, since it may be need semi-regularly. The other "expert" commands are now just not listed in the usage.
2009-02-16Stop all creation of a ssh_host_rsa_key.pub. Use openpgp2ssh to getJameson Graef Rollins
the fingerprint from the host pgp public key. Prevents us from having to maintain the ssh pub key file, and generally makes things simpler. Also allows us to go back to having import_key take the key on stdin (which dkg will like).
2009-02-16make sure MHTMPDIR is defined and createdJameson Graef Rollins
2009-02-15unbreakout some functions that were broken out earlier for handling creating ↵Jameson Graef Rollins
ssh key files, since they are actually done in different ways under different circumstances.
2009-02-15Change import_key to take the path to the file to import as an argument. ↵Jameson Graef Rollins
dkg won't like this, but I think it's necessary so that we can generate the ssh pub key file, which is needed for subsequenty works.
2009-02-15fix the publish_key function for new gpg_sphere.Jameson Graef Rollins
2009-02-15have the import_key also create the ssh pub file, since it is needed to show ↵Jameson Graef Rollins
full host key info.
2009-02-12tweak some of the log output inconsequentiallyJameson Graef Rollins
2009-02-12add ability to supress confirmation prompt in ma/add_certifierJameson Graef Rollins
fix some logging output
2009-02-12break out a bunch of common functions in monkeysphere-host:Jameson Graef Rollins
- create_*_*_file to create the key files - load_*fingerprint to load the host fingerprint into an exported variable (HOST_FINGERPRINT) - check_host_*key to check for the presence of a host key modified {import,gen}_key to use these new functions.
2009-02-09add much of an add_revoker function. still needs to be fleshed outJameson Graef Rollins
and tested, though, so it's not "active" yet.
2009-02-09rename function to get the host fingerprint, and fix someJameson Graef Rollins
HOST_FINGERPRINT variables.
2009-02-09fix name of set_expire functionJameson Graef Rollins
2009-02-09define variable for public key files (HOST_KEY_PUB, HOST_KEY_PUB_GPG).Jameson Graef Rollins
also, fix some function calls to check_host_fail function.
2009-02-09a couple of small fixes to the {gen,import}_key functionsJameson Graef Rollins
2009-02-09Break out host export commands into gpg_host_export andJameson Graef Rollins
gpg_host_export_to_ssh_file functions, and update the {gen,import}_key functions accordingly.
2009-02-08Merge commit 'dkg/master'Jameson Graef Rollins
generated by cgit v1.2.3 (git 2.39.1) at 2024-06-30 21:43:16 +0000