summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)Author
2009-01-31change log level for unacceptable keys that can not be translated toJameson Graef Rollins
be "debug" instead of "error".
2009-01-15work on fleshing out the new functionality for the next release,Jameson Graef Rollins
including new functions: import-key, add-revoker, revoke-key, etc.
2009-01-11pem2openpgp: reorganization, cleanup of comments, adding a warning about ↵Daniel Kahn Gillmor
secret material on stdout
2009-01-11pem2openpgp: cleaning up some comments, not fetching unnecessary parameters ↵Daniel Kahn Gillmor
from OpenSSL.
2009-01-11pem2openpgp: implemented extended euclidean algorithm to find modular ↵Daniel Kahn Gillmor
multiplicative inverse. this lets us compute the value we need for secret key material.
2009-01-11pem2openpgp: reorganized some code, put in initial function to try to create ↵Daniel Kahn Gillmor
secret keys. we seem to be a bit of modular arithmetic away from creating private keys in an OpenPGP-style format.
2009-01-10pem2openpgp: replace raw numbers with semantic labelling to make it more ↵Daniel Kahn Gillmor
readable.
2009-01-08fix stupid typos; switch padding during rsa signatures to that specified in ↵Daniel Kahn Gillmor
RFC 4880
2009-01-07pem2openpgp: make lookup tables of relevant parameters.Daniel Kahn Gillmor
2009-01-07pem2openpgp: break out usage flags, default to creating an ↵Daniel Kahn Gillmor
authentication-capable primary key.
2009-01-07pem2openpgp: clean up comments, treat fingerprint as raw data instead of asciiDaniel Kahn Gillmor
2009-01-07clarifying make_rsa_key_body() to make_rsa_pub_key_body()Daniel Kahn Gillmor
2009-01-07pem2openpgp now accepts a choice of User ID on stdin.Daniel Kahn Gillmor
2009-01-07use bytes in pem2openpgp to ensure that length calculations are done by ↵Daniel Kahn Gillmor
octet and not by character.
2009-01-07removed last hardcoded data in pem2openpgp; it seems to work with our test key.Daniel Kahn Gillmor
2009-01-07clean up a bit of pem2openpgp and remove some of the hardcoded data.Daniel Kahn Gillmor
2009-01-07added first pass at perl script to convert existing PEM-encoded RSA keys ↵Daniel Kahn Gillmor
into OpenPGP keys
2008-12-30clean up option parsing and key checking in gen_key function,Jameson Graef Rollins
including adding checking for validity of existing authentication subkeys.
2008-12-28added version output optionJameson Graef Rollins
2008-12-16get rid of getopts.Jameson Graef Rollins
add checks for root user, and better checking of presence of host key.
2008-11-30add a couple of bugs about posix compliance and the use of getoptsJameson Graef Rollins
instead of getopt.
2008-11-30added yet another FIXME to m-s dDaniel Kahn Gillmor
2008-11-30add new check_host_keyring function for better checks for theJameson Graef Rollins
existence of a host private key for functions that require it to be there.
2008-11-17HA! I figured out how to get ssh-keygen to read stdin by using theJameson Graef Rollins
bash "Here Strings" redirection. No more stupid tempfiles to get ssh key fingerprints.
2008-11-17More work on the marginal case output for the ssh-proxycommand. For aJameson Graef Rollins
key matching that offered by the host, now outputs just the information (including sigs) of the relevant user ID. There is some other useful output for other cases as well. I also added a couple of FIXMEs for some other cases that I think we should think about and maybe tweak behavior for.
2008-11-16really fix the ssh_host_rsa_key.pub.gpg output.Jameson Graef Rollins
2008-11-16fix quoting in output of ssh_host_rsa_key.pub.gpg. remember, at theJameson Graef Rollins
moment the gpg_authentication function can only accept a single argument, so the entire gpg command string needs to be in a single quoted string.
2008-11-16add some more informative debug output to key processing.Jameson Graef Rollins
2008-11-16Merge commit 'dkg/master'Jameson Graef Rollins
Conflicts: packaging/debian/changelog
2008-11-16added some useful output to the ssh-proxycommand for "marginal" casesJameson Graef Rollins
where keys are found for host but do not have full validity. this uses ssh-keyscan to pull the key for the host in question, check this key against the keys against those found via gpg, and output some useful information about the one that matches.
2008-11-16exporting SSH host public key (two variants: one traditional ssh, the other ↵Daniel Kahn Gillmor
OpenPGP) during m-s gen-key
2008-11-16m-s s: avoid failures when $TMPDIR has a space in it. (output might still be ↵Daniel Kahn Gillmor
a bit garbled)
2008-11-15Added info log output when a new key is added to known_hosts file.Jameson Graef Rollins
2008-11-15change from using a filename that is a just a space to an actual temporary fileMicah Anderson
2008-10-30do more testing to make sure that mktemp calls do not fail.Daniel Kahn Gillmor
2008-10-29set DISPLAY in test suite so that passphrase prompting falls through.Jameson Graef Rollins
2008-10-28move to using 'none' for the RAW_AUTHORIZED_KEY value to use for *not*Jameson Graef Rollins
including a user-controlled authorized_keys file. more fixes on test suite.
2008-10-28touch known_hosts file in monkeysphere so that permission checkingJameson Graef Rollins
down't fail. remove spurios directory in monkeysphere.dirs. more work on test suite.
2008-10-28enforce error checking when transferring the authorized keys file. If the ↵Daniel Kahn Gillmor
transfer fails, remove any existing target file so that we fail closed.
2008-10-28chown authorized_keys files as jrollins, and add monkeysphere tmpdir in ↵Jameson Graef Rollins
SYSDATADIR, for atomic moves of authorized_keys.
2008-10-28add more debugging output.Jameson Graef Rollins
2008-10-28fix bugs in authorized_* file permission checking.Jameson Graef Rollins
2008-10-27Move to using empty string for not using a user-controlledJameson Graef Rollins
authorized_keys file in RAW_AUTHORIZED_KEYS variable. Fix spelling mistakes and wording in config files.
2008-10-26Merge commit 'dkg/master'Jameson Graef Rollins
2008-10-26Changes to fix bug in authorized_keys file generation inJameson Graef Rollins
monkeysphere-server update-users.
2008-10-26Removed the gnutls component from our APT repo, since gnutls 2.6 is now in ↵Daniel Kahn Gillmor
debian/unstable. Documented the changes, and changed the warning message that monkeysphere emits too.
2008-10-25add check to su_monkeysphere_user to not use su if the user is theJameson Graef Rollins
monkeysphere user.
2008-10-25switch default keyservers to be pool.sks-keyservers.net, since that pool ↵Daniel Kahn Gillmor
seems to be well-monitored and updated.
2008-10-25add another FIXME for m-s dDaniel Kahn Gillmor
2008-10-11working on improving log outputJameson Graef Rollins