| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2010-10-04 | fix need for only single argument to gpg_sphere | Jameson Rollins | |
| The use of $* instead of $@ in the call to su_monkeysphere_user is what we want to not split the input to the bash subcalls into separate words. | |||
| 2010-10-03 | Merge remote branch 'jrollins/master' | Daniel Kahn Gillmor | |
| 2010-10-02 | fix formatting of b3f0bbedbf242d2640d3bc56cce62ae726081400 to conform to ↵ | Jameson Rollins | |
| standard | |||
| 2010-10-02 | add debugging to monkeysphere-host publish-key, closes: #2289 | Micah Anderson | |
| 2010-10-02 | Assume that space- or tab-prefixed lines contain ssh authorized_keys options ↵ | Clint Adams | |
| applicable to the preceding user ID. | |||
| 2010-10-01 | fix revoke_key typo in creating temporary directory | Micah Anderson | |
| fix variable specifying which key to revoke monkeysphere-host revoke-key <key-id> would produce the following errors, this commit fixes that: Really publish this cert to zimmermann.mayfirst.org ? (Y/n) y /usr/share/monkeysphere/mh/revoke_key: line 96: mkmstempdir: command not found gpg: new configuration file `/root/.gnupg/gpg.conf' created gpg: WARNING: options in `/root/.gnupg/gpg.conf' are not yet active during this run gpg: "0x!" not a key ID: skipping | |||
| 2010-09-21 | Merge remote branch 'jamie/master' | Daniel Kahn Gillmor | |
| 2010-09-21 | change log level for outputting message: "! primary key could not be | Jamie McClelland | |
| translated (not RSA?)." from "error" to "verbose" | |||
| 2010-09-14 | fix *all* install paths, including in man pages and transition scripts | Jameson Rollins | |
| 2010-07-04 | Merge remote branch 'dkg/master' | Jameson Rollins | |
| 2010-07-04 | fix debug message in checkperms | Jameson Rollins | |
| 2010-07-04 | add keys-for-user subcommand to monkeysphere-authentication | Jameson Rollins | |
| This subcommand will output all valid key for a given user. The user's authorized_user_ids file will be read for OpenPGP user IDs, one per line. The ssh-formated RSA keys will be output to stdout. Also included is a simple script that takes the user as it's one argument and exec's this command. This is something that would be suitable for the proposed sshd AuthorizedKeysCommand. | |||
| 2010-05-06 | reporting new expiration date when key expiry is updated (closes MS #2291) | Daniel Kahn Gillmor | |
| 2010-05-06 | do not fail or bail when admin interactively declines to publish a key with m-h | Daniel Kahn Gillmor | |
| 2010-05-06 | support x509 anchors for monkeysphere-host, allow shared anchors between m-a ↵ | Daniel Kahn Gillmor | |
| and mh (closes MS #2288) | |||
| 2010-04-17 | do not try to add to known_hosts if HASH_KNOWN_HOSTS is true but ssh-keygen ↵ | Daniel Kahn Gillmor | |
| is not available (includes some comments about how to fix these corner cases). | |||
| 2010-04-17 | degrade gracefully in the absence of ssh | Daniel Kahn Gillmor | |
| 2010-04-17 | handling ssh fingerprinting internally with keytrans for sshfprs-for-userid | Daniel Kahn Gillmor | |
| 2010-04-17 | make comment more nit-pickingly accurate | Daniel Kahn Gillmor | |
| 2010-04-17 | keytrans openpgp2sshfpr now prints out the key size and type | Daniel Kahn Gillmor | |
| 2010-04-17 | added internal openpgp2sshfpr subcommand for keytrans | Daniel Kahn Gillmor | |
| 2010-03-14 | warn if keyserver query fails (Closes: MS #1750) | Daniel Kahn Gillmor | |
| 2010-03-14 | enable use of hkps (closes: MS #1749) | Daniel Kahn Gillmor | |
| 2010-03-08 | fix my email address | Jameson Rollins | |
| 2010-02-18 | enforce --no-armor when exporting to openpgp2ssh in case weird gpg.conf ↵ | Daniel Kahn Gillmor | |
| options (see bug 1625) | |||
| 2010-01-19 | re-work monkeysphere-host diagnostics with an eye toward multiple host keys | Daniel Kahn Gillmor | |
| 2010-01-19 | dump gpg --import error spew to /dev/null during hackish uses of gpg | Daniel Kahn Gillmor | |
| 2010-01-19 | ignoring time conflict when extracting info in a hacky way from gpg. ↵ | Daniel Kahn Gillmor | |
| warnings still come out to stderr | |||
| 2010-01-19 | add get_cert_info() to common | Daniel Kahn Gillmor | |
| 2010-01-18 | flesh out check for reasonable-looking service names | Daniel Kahn Gillmor | |
| 2010-01-18 | canonicalize prompting to prompt if MONKEYSPHERE_PROMPT != 'false' | Jameson Rollins | |
| 2010-01-18 | add prompt if a service name is already being used then importing a key or ↵ | Jameson Rollins | |
| adding a name. This can be overridden with the MONKEYSPHERE_PROMPT var. | |||
| 2010-01-18 | renaming m-h update_gpg_pub_file to update_pgp_pub_file | Daniel Kahn Gillmor | |
| 2010-01-18 | add check that service name isn't already in use in import_key | Jameson Rollins | |
| 2010-01-18 | fix stupid think-o that caused keytrans adduserid to misbehave if another ↵ | Daniel Kahn Gillmor | |
| key came in the input stream after the desired key was already found | |||
| 2010-01-18 | added non-public "keytrans listfprs" subcommand | Daniel Kahn Gillmor | |
| 2010-01-15 | Major rework of monkeysphere-host to handle multiple host keys. | Jameson Rollins | |
| This rework removes any assumption that monkeysphere-host is just managing a single host key, or that the keys are used specifically for ssh. The UI is exactly backwards compatible except that hostnames ('example.com') must be replaced by full service names ('ssh://example.com'). This incarnation passes the old tests with those changes only. There are a couple of things that still need to be done: - need to see if a transition script is needed (some local file names have changed) - need to fill in check_service_name function to verify that a specified service name fits the expected format. - update diagnostics appropriately | |||
| 2010-01-15 | add trap to remove temp dir in list_primary_fingerprints function | Jameson Rollins | |
| 2010-01-11 | rename keys-from-userid command to more accurate keys-for-userid | Jameson Rollins | |
| leave the old command for now, but warn as deprecated. | |||
| 2010-01-10 | Fix patch for gen_key to test gpg version. | Jameson Rollins | |
| This patch checks the version of gpg (for v1 and v2) and sets the key type command for the gen_subkey gpg edit-key script appropriately. | |||
| 2010-01-10 | added notes about what version needs what keyType | Daniel Kahn Gillmor | |
| 2010-01-10 | Add new keys-from-userid subcommand to monkeysphere UI. | Jameson Rollins | |
| This new subcommand calls a new function, keys_from_userid, that outputs to stdout all acceptable keys for a given user ID literal. | |||
| 2010-01-10 | Clean up REQUIRED_KEY_CAPABILITY option passing to process_user_id. | Jameson Rollins | |
| Get rid of 'MODE' stuff, since it was not very clear and wasn't really being used. | |||
| 2009-12-20 | fix ms Issue #1536 for gpg edit/addkey UI change | Jameson Graef Rollins | |
| gnupg apparently changed their edit-key/addkey function ordering such that the monkeysphere gen-subkey subcommand was creating DSA authentication subkeys instead of RSA subkeys. DSA subkeys are not supported by the ms key translation utilities, so this is a big problem. This patch fixes the problem, but it means that we have require gnupg >=1.4.10 from now on, or at least until gnupg changes their UI again for no good reason. | |||
| 2009-12-12 | hush up m-a setup because the dd was making noise | Daniel Kahn Gillmor | |
| 2009-09-24 | avoid noisy warning message when ssh-askpass not available | Daniel Kahn Gillmor | |
| 2009-08-01 | cleaning up log function in checkperms for future expandability. | Daniel Kahn Gillmor | |
| 2009-08-01 | swap order of bitwise and to avoid confusion in perl < 5.10 | Daniel Kahn Gillmor | |
| 2009-08-01 | removing duplicate check that snuck in somehow | Daniel Kahn Gillmor | |
| 2009-08-01 | attempting to resolve MS #675 | Daniel Kahn Gillmor | |
 |
index : monkeysphere | |
| Unnamed repository; edit this file 'description' to name the repository. | Jonas Smedegaard |
| summaryrefslogtreecommitdiff |