monkeysphere - Unnamed repository; edit this file 'description' to name the repository.

Age	Commit message (Collapse)	Author
2010-10-17	fixed bug in remove_monkeysphere_lines function	Jameson Rollins
	it was matching MonkeySphere strings as full lines and therefore not actually removing monkeysphere lines. I'm not sure exactly why, upon further consideration, why we actually need to be removing all monkeysphere lines in update_authorized_keys.
2010-10-17	remove unneccessary export of TMP_AUTHORIZED_USER_IDS	Jameson Rollins

2010-10-17	fix keys-for-user	Jameson Rollins
	This function now properly outputs to stdout exactly what would have been written to the monkeysphere-controlled authorized_keys file, but without actually touching it.
2010-10-15	make sure authorized_keys options lines are skipped in keys-for-user	Jameson Rollins

2010-10-15	attempt to fix apostroproblem in ma/keys-for-user	Jameson Rollins
	This is an attempt to fix #600304 by properly passing the string litteral in to be processed, instead of escaping problematic characters.
2010-10-06	Fix more calls to gpg_shere, finishing what was started in ↵	Jameson Rollins
	90166e0bb8e4ebc1c1174d9bc2021c604b7a1bd7 There were another calls to gpg_sphere that were packing everything into a single argument. Since we fixed the need to do that, we fix all these other calls that were fixed in the first round.
2010-10-04	fix need for only single argument to gpg_sphere	Jameson Rollins
	The use of $* instead of $@ in the call to su_monkeysphere_user is what we want to not split the input to the bash subcalls into separate words.
2010-10-03	Merge remote branch 'jrollins/master'	Daniel Kahn Gillmor

2010-10-02	fix formatting of b3f0bbedbf242d2640d3bc56cce62ae726081400 to conform to ↵	Jameson Rollins
	standard
2010-10-02	add debugging to monkeysphere-host publish-key, closes: #2289	Micah Anderson

2010-10-02	Assume that space- or tab-prefixed lines contain ssh authorized_keys options ↵	Clint Adams
	applicable to the preceding user ID.
2010-10-01	fix revoke_key typo in creating temporary directory	Micah Anderson
	fix variable specifying which key to revoke monkeysphere-host revoke-key <key-id> would produce the following errors, this commit fixes that: Really publish this cert to zimmermann.mayfirst.org ? (Y/n) y /usr/share/monkeysphere/mh/revoke_key: line 96: mkmstempdir: command not found gpg: new configuration file `/root/.gnupg/gpg.conf' created gpg: WARNING: options in `/root/.gnupg/gpg.conf' are not yet active during this run gpg: "0x!" not a key ID: skipping
2010-09-21	Merge remote branch 'jamie/master'	Daniel Kahn Gillmor

2010-09-21	change log level for outputting message: "! primary key could not be	Jamie McClelland
	translated (not RSA?)." from "error" to "verbose"
2010-09-14	fix all install paths, including in man pages and transition scripts	Jameson Rollins

2010-07-04	Merge remote branch 'dkg/master'	Jameson Rollins

2010-07-04	fix debug message in checkperms	Jameson Rollins

2010-07-04	add keys-for-user subcommand to monkeysphere-authentication	Jameson Rollins
	This subcommand will output all valid key for a given user. The user's authorized_user_ids file will be read for OpenPGP user IDs, one per line. The ssh-formated RSA keys will be output to stdout. Also included is a simple script that takes the user as it's one argument and exec's this command. This is something that would be suitable for the proposed sshd AuthorizedKeysCommand.
2010-05-06	reporting new expiration date when key expiry is updated (closes MS #2291)	Daniel Kahn Gillmor

2010-05-06	do not fail or bail when admin interactively declines to publish a key with m-h	Daniel Kahn Gillmor

2010-05-06	support x509 anchors for monkeysphere-host, allow shared anchors between m-a ↵	Daniel Kahn Gillmor
	and mh (closes MS #2288)
2010-04-17	do not try to add to known_hosts if HASH_KNOWN_HOSTS is true but ssh-keygen ↵	Daniel Kahn Gillmor
	is not available (includes some comments about how to fix these corner cases).
2010-04-17	degrade gracefully in the absence of ssh	Daniel Kahn Gillmor

2010-04-17	handling ssh fingerprinting internally with keytrans for sshfprs-for-userid	Daniel Kahn Gillmor

2010-04-17	make comment more nit-pickingly accurate	Daniel Kahn Gillmor

2010-04-17	keytrans openpgp2sshfpr now prints out the key size and type	Daniel Kahn Gillmor

2010-04-17	added internal openpgp2sshfpr subcommand for keytrans	Daniel Kahn Gillmor

2010-03-14	warn if keyserver query fails (Closes: MS #1750)	Daniel Kahn Gillmor

2010-03-14	enable use of hkps (closes: MS #1749)	Daniel Kahn Gillmor

2010-03-08	fix my email address	Jameson Rollins

2010-02-18	enforce --no-armor when exporting to openpgp2ssh in case weird gpg.conf ↵	Daniel Kahn Gillmor
	options (see bug 1625)
2010-01-19	re-work monkeysphere-host diagnostics with an eye toward multiple host keys	Daniel Kahn Gillmor

2010-01-19	dump gpg --import error spew to /dev/null during hackish uses of gpg	Daniel Kahn Gillmor

2010-01-19	ignoring time conflict when extracting info in a hacky way from gpg. ↵	Daniel Kahn Gillmor
	warnings still come out to stderr
2010-01-19	add get_cert_info() to common	Daniel Kahn Gillmor

2010-01-18	flesh out check for reasonable-looking service names	Daniel Kahn Gillmor

2010-01-18	canonicalize prompting to prompt if MONKEYSPHERE_PROMPT != 'false'	Jameson Rollins

2010-01-18	add prompt if a service name is already being used then importing a key or ↵	Jameson Rollins
	adding a name. This can be overridden with the MONKEYSPHERE_PROMPT var.
2010-01-18	renaming m-h update_gpg_pub_file to update_pgp_pub_file	Daniel Kahn Gillmor

2010-01-18	add check that service name isn't already in use in import_key	Jameson Rollins

2010-01-18	fix stupid think-o that caused keytrans adduserid to misbehave if another ↵	Daniel Kahn Gillmor
	key came in the input stream after the desired key was already found
2010-01-18	added non-public "keytrans listfprs" subcommand	Daniel Kahn Gillmor

2010-01-15	Major rework of monkeysphere-host to handle multiple host keys.	Jameson Rollins
	This rework removes any assumption that monkeysphere-host is just managing a single host key, or that the keys are used specifically for ssh. The UI is exactly backwards compatible except that hostnames ('example.com') must be replaced by full service names ('ssh://example.com'). This incarnation passes the old tests with those changes only. There are a couple of things that still need to be done: - need to see if a transition script is needed (some local file names have changed) - need to fill in check_service_name function to verify that a specified service name fits the expected format. - update diagnostics appropriately
2010-01-15	add trap to remove temp dir in list_primary_fingerprints function	Jameson Rollins

2010-01-11	rename keys-from-userid command to more accurate keys-for-userid	Jameson Rollins
	leave the old command for now, but warn as deprecated.
2010-01-10	Fix patch for gen_key to test gpg version.	Jameson Rollins
	This patch checks the version of gpg (for v1 and v2) and sets the key type command for the gen_subkey gpg edit-key script appropriately.
2010-01-10	added notes about what version needs what keyType	Daniel Kahn Gillmor

2010-01-10	Add new keys-from-userid subcommand to monkeysphere UI.	Jameson Rollins
	This new subcommand calls a new function, keys_from_userid, that outputs to stdout all acceptable keys for a given user ID literal.
2010-01-10	Clean up REQUIRED_KEY_CAPABILITY option passing to process_user_id.	Jameson Rollins
	Get rid of 'MODE' stuff, since it was not very clear and wasn't really being used.
2009-12-20	fix ms Issue #1536 for gpg edit/addkey UI change	Jameson Graef Rollins
	gnupg apparently changed their edit-key/addkey function ordering such that the monkeysphere gen-subkey subcommand was creating DSA authentication subkeys instead of RSA subkeys. DSA subkeys are not supported by the ms key translation utilities, so this is a big problem. This patch fixes the problem, but it means that we have require gnupg >=1.4.10 from now on, or at least until gnupg changes their UI again for no good reason.