monkeysphere - Unnamed repository; edit this file 'description' to name the repository.

Age	Commit message (Collapse)	Author
2009-03-23	add FIXME note about IPv6 addresses, and break out hostnames from the last ↵	Daniel Kahn Gillmor
	colon, not the first.
2009-03-23	proposed patch for issue #660, to properly specify host and port number in ↵	Jameson Graef Rollins
	known_hosts lines.
2009-03-22	some more pruning of unnecessary usage of cat for the gnupg scripts.	Jameson Graef Rollins

2009-03-18	remove some extraneous invocations of cat.	Daniel Kahn Gillmor

2009-03-18	modify the ssh_proxycommand marginal ui output so that it better	Jameson Graef Rollins
	handles the case where the host can not be contacted. the new system attempts to retrieve the host ssh key before any ui output is made. this should make things a little clearer in this corner case, and make things a little more flexible down the line.
2009-03-07	fix the marginal ui output so that it's not prefixed by the	Jameson Graef Rollins
	LOG_PREFIX. also make sure to always export the LOG_PREFIX, so that it gets passed to subprocces su_monkeysphere_user.
2009-03-03	fix to logging to prefix all log output with log prefix, and allow changing ↵	Jameson Graef Rollins
	of log prefix.
2009-03-03	quieted down m-a add_certifier: there is no reason why the admin should be ↵	Daniel Kahn Gillmor
	shown gpg noise.
2009-03-02	quieting down the transition script (and m-a setup).	Daniel Kahn Gillmor

2009-03-02	added ability to specify subkeys to add to agent with ↵	Jameson Graef Rollins
	MONKEYSPHERE_SUBKEYS_FOR_AGENT variable.
2009-03-02	fix remove_monkeysphere_line function to properly handle empty files.	Jameson Graef Rollins

2009-03-02	get rid of FILE_OWNER variable, in favor of just using $(whoami) when	Jameson Graef Rollins
	running check_key_file_permissions in update_known_hosts, update_authorized_keys, and process_authorized_user_ids. this is fine, since the policy is just that a user is always updating their own files. closes monkeysphere bug #630.
2009-03-01	proposed fix for issue 630; since m-a u operates on a saved copy of the ↵	Daniel Kahn Gillmor
	users authorized_user_ids file, we should only check filesystem permissions against the monkeysphere user, not the target user.
2009-03-01	refer to the m-h set-expire instead of m-h extend-key in m-h diagnostics.	Daniel Kahn Gillmor

2009-03-01	switched $USER to $FILE_OWNER; new name is more semantically clear and less ↵	Daniel Kahn Gillmor
	likely to collide with other common uses of $USER.
2009-03-01	add defaultenv file that was missed in ebd776722e0fd6dfacc79146c368d148f0e266cb	Jameson Graef Rollins

2009-03-01	explicity set the USER variable, since it's needed for checking file ↵	Jameson Graef Rollins
	permissions. add/modify some debug messages.
2009-03-01	break out default variables into their own file: defaultenv	Jameson Graef Rollins
	this allows the common file to be sourced without reseting variables to their defaults, which was causing a problem with su_monkeysphere_user. also added some more debug messages.
2009-03-01	updating header comments in keytrans now that it serves two purposes.	Daniel Kahn Gillmor

2009-03-01	removed base64 invocation in favor of perl to reduce dependency spread.	Daniel Kahn Gillmor

2009-03-01	transition to the perl-based keytrans implementation.	Daniel Kahn Gillmor

2009-03-01	removed test_gnu_dummy_s2k_extension(); no longer necessary	Daniel Kahn Gillmor

2009-02-22	egrep -q terminates at the first match. m-a list-identity-certifiers chokes ↵	Daniel Kahn Gillmor
	if it cannot write to stdout. Because we are setting pipefail, this causes the pipeline checking for any certifiers to return untrue. solution? do not use -q, and send the output to /dev/null
2009-02-22	really really fix m-a diagnostics checking of identity certifiers.	Daniel Kahn Gillmor

2009-02-22	fix some return code setting stuf that was no longer being used, and change ↵	Jameson Graef Rollins
	name of return code variable in update_users, since all-caps variables should be reserved for global vars.
2009-02-22	Fix how version number is saved/retrieved. Version is now stored in	Jameson Graef Rollins
	VERSION file, which is created in the tarball target. This is then installed at /usr/share/monkeysphere/VERSION, and cat'ed when the version number is requested by the front-end ui. No more manual setting of version number required (to avoid future problems, aka "0.23.1"). This system is also more flexible, as the VERSION file could potentially hold more info than just the release number.
2009-02-21	reverse sense of test for valid identity certifiers in m-a diagnostics.	Daniel Kahn Gillmor

2009-02-21	fix syntax error in m-a diagnostics.	Daniel Kahn Gillmor

2009-02-21	preparing for stupid brown paper bag 0.23.1 release.	Daniel Kahn Gillmor

2009-02-21	fixing stupid internal version number synchronization.	Daniel Kahn Gillmor

2009-02-21	correct return codes for monkeysphere subkey-to-ssh-agent	Daniel Kahn Gillmor

2009-02-21	make sure all prompt messages are going to stderr	Jameson Graef Rollins

2009-02-21	fix output formatting for cases where multiple fingerprints are found, in ↵	Jameson Graef Rollins
	functions that are doing that sort of thing
2009-02-21	Merge commit 'dkg/master'	Jameson Graef Rollins

2009-02-21	add tests to add_revoker and add_certifier that more than one key was not ↵	Jameson Graef Rollins
	found when adding by using key ID.
2009-02-21	un-fix non-typo in ssh_proxycommand. (my mistake!)	Daniel Kahn Gillmor

2009-02-21	fixing typo in ssh_proxycommand.	Daniel Kahn Gillmor

2009-02-21	fix return in subkey_to_ssh_agent, so that it returns, instead of exits	Jameson Graef Rollins

2009-02-21	import-key now requires a hostname be specified, and no longer does	Jameson Graef Rollins
	any hostname guessing. this is so that we don't have to worry about prompting the user when guessing the hostname. also updated documentation.
2009-02-21	make sure we're explicitly capturing return codes in places where they are ↵	Jameson Graef Rollins
	tested, in case things are being run set -e
2009-02-21	fix failure message in import_key	Jameson Graef Rollins

2009-02-20	tweak/cleanup some of the prompts.	Jameson Graef Rollins

2009-02-20	tuning some diagnostic text.	Daniel Kahn Gillmor

2009-02-20	tune automated revocation certificate description; add FIXME to allow it to ↵	Daniel Kahn Gillmor
	be set explicitly.
2009-02-20	monkeysphere-host revoke-key should now be capable of publishing the	Daniel Kahn Gillmor
	revocation certificate to the keyservers directly, should the admin want that. It can also run without prompting, if MONKEYSPHERE_PROMPT=false. In the no-prompts case, it never publishes to the keyserver, it indicates that the key was compromised, and it writes a boilerplate description to make it easy to identify this kind of certificate.
2009-02-20	trivial implementation of monkeysphere-host revoke-key: just prints ↵	Daniel Kahn Gillmor
	ascii-armored revocation certificate to stdout, and admin is expected to know what to do with it.
2009-02-20	clarify revoke_hostname warning	Daniel Kahn Gillmor

2009-02-20	document why monkeysphere import-subkey is not yet working.	Daniel Kahn Gillmor

2009-02-20	explicitly set GNUPGHOME in su_monkeysphere_user calls to gpg in ↵	Jameson Graef Rollins
	add_revoker, to avoid any confusion about having GNUPGHOME as a tempdir exported to the environment.
2009-02-20	stupid bug fix	Jameson Graef Rollins