Age | Commit message (Collapse) | Author | |
---|---|---|---|
2010-01-18 | remove reference to HOST_KEY_FPR_FILE | Jameson Rollins | |
except in update_gpg_pub_file, which dkg is going to modify to just hold the host keys and not any other keys (like revoker keys). this file alone can then be used to get host key info for non-priviledged users. | |||
2010-01-18 | suppress superfulous error output | Jameson Rollins | |
2010-01-18 | add check that service name isn't already in use in import_key | Jameson Rollins | |
2010-01-18 | fix show_key function to handle user ID input (needed for import_key) | Jameson Rollins | |
2010-01-18 | Merge remote branch 'jrollins/master' | Daniel Kahn Gillmor | |
2010-01-18 | fix stupid think-o that caused keytrans adduserid to misbehave if another ↵ | Daniel Kahn Gillmor | |
key came in the input stream after the desired key was already found | |||
2010-01-18 | added non-public "keytrans listfprs" subcommand | Daniel Kahn Gillmor | |
2010-01-16 | small tweaks to failure messages | Jameson Rollins | |
2010-01-15 | Try to fix monkeysphere-host and tests/basic for revoke-key test | Jameson Rollins | |
Unfortunately there's still a problem that I can't quite figure out. gpg is for some reason failing to import that revocation certificate. Could it be because gpg can't accept ascii armored certificates as input? I'm at a loss. | |||
2010-01-15 | Major rework of monkeysphere-host to handle multiple host keys. | Jameson Rollins | |
This rework removes any assumption that monkeysphere-host is just managing a single host key, or that the keys are used specifically for ssh. The UI is exactly backwards compatible except that hostnames ('example.com') must be replaced by full service names ('ssh://example.com'). This incarnation passes the old tests with those changes only. There are a couple of things that still need to be done: - need to see if a transition script is needed (some local file names have changed) - need to fill in check_service_name function to verify that a specified service name fits the expected format. - update diagnostics appropriately | |||
2010-01-15 | add trap to remove temp dir in list_primary_fingerprints function | Jameson Rollins | |
2010-01-12 | touching up the switch to keys-for-userid | Daniel Kahn Gillmor | |
2010-01-11 | rename keys-from-userid command to more accurate keys-for-userid | Jameson Rollins | |
leave the old command for now, but warn as deprecated. | |||
2010-01-11 | normalize output for monkeysphere when no subcommand is issued or when an ↵ | Daniel Kahn Gillmor | |
unknown subcommand is issued | |||
2010-01-11 | fix invocation without subcommands to call usage function and exit 1 explicitlly | Jameson Rollins | |
2010-01-11 | add standard --version option for version output | Jameson Rollins | |
2010-01-10 | Merge remote branch 'mjgoins/master' | Jameson Rollins | |
2010-01-10 | Merge branch 'master' of git://labs.riseup.net/~micah/monkeysphere | Matthew James Goins | |
2010-01-10 | Fix patch for gen_key to test gpg version. | Jameson Rollins | |
This patch checks the version of gpg (for v1 and v2) and sets the key type command for the gen_subkey gpg edit-key script appropriately. | |||
2010-01-10 | added notes about what version needs what keyType | Daniel Kahn Gillmor | |
2010-01-10 | Add new keys-from-userid subcommand to monkeysphere UI. | Jameson Rollins | |
This new subcommand calls a new function, keys_from_userid, that outputs to stdout all acceptable keys for a given user ID literal. | |||
2010-01-10 | Clean up REQUIRED_KEY_CAPABILITY option passing to process_user_id. | Jameson Rollins | |
Get rid of 'MODE' stuff, since it was not very clear and wasn't really being used. | |||
2010-01-04 | Its more useful and standard to actually output the 'help' output when | Micah Anderson | |
an improper number of arguments is passed, rather output a line telling the user how to get the help output. | |||
2009-12-20 | fix ms Issue #1536 for gpg edit/addkey UI change | Jameson Graef Rollins | |
gnupg apparently changed their edit-key/addkey function ordering such that the monkeysphere gen-subkey subcommand was creating DSA authentication subkeys instead of RSA subkeys. DSA subkeys are not supported by the ms key translation utilities, so this is a big problem. This patch fixes the problem, but it means that we have require gnupg >=1.4.10 from now on, or at least until gnupg changes their UI again for no good reason. | |||
2009-12-12 | hush up m-a setup because the dd was making noise | Daniel Kahn Gillmor | |
2009-09-24 | avoid noisy warning message when ssh-askpass not available | Daniel Kahn Gillmor | |
2009-08-01 | cleaning up log function in checkperms for future expandability. | Daniel Kahn Gillmor | |
2009-08-01 | swap order of bitwise and to avoid confusion in perl < 5.10 | Daniel Kahn Gillmor | |
2009-08-01 | removing duplicate check that snuck in somehow | Daniel Kahn Gillmor | |
2009-08-01 | attempting to resolve MS #675 | Daniel Kahn Gillmor | |
2009-08-01 | switch to using new checkperms script. | Daniel Kahn Gillmor | |
2009-08-01 | whitespace fixing and using environment variables exported from monkeysphere ↵ | Daniel Kahn Gillmor | |
for checkperms. | |||
2009-08-01 | export LOG_PREFIX in monkeysphere | Jameson Graef Rollins | |
2009-08-01 | added new perl script to check permissions. | Daniel Kahn Gillmor | |
2009-07-26 | ensuring that STRICT_MODES gets passed through to the monkeysphere subshell ↵ | Daniel Kahn Gillmor | |
properly, and that we set it to a literal "false" in the tests. This should resolve the FTBFS associated with MS #659 | |||
2009-07-26 | added MONKEYSPHERE_STRICT_MODES environment option to disable permissions ↵ | Daniel Kahn Gillmor | |
checking. | |||
2009-07-24 | small bug fix, and readbility improvements | Jameson Graef Rollins | |
2009-07-24 | Revert "proposed fix for #1147 by checking for known_hosts file" | Jameson Graef Rollins | |
This reverts commit 189781e00c89227612942ff7dc30eaa756cb78ae. This is reverted because we're going with dkg's better solution. | |||
2009-07-24 | Merge commit 'dkg/master' | Jameson Graef Rollins | |
2009-07-24 | shoring up known_hosts creation with proper umask and with multi-level ↵ | Daniel Kahn Gillmor | |
directory creation. | |||
2009-07-24 | make sure we check for the host key existence in the correct known_hosts file. | Daniel Kahn Gillmor | |
do not look for a host key in a non-existant file. (should close MS 1147) | |||
2009-07-24 | make failures with unwritable known_hosts slightly less cryptic. | Daniel Kahn Gillmor | |
2009-07-24 | Merge commit 'dkg/master' | Jameson Graef Rollins | |
2009-07-24 | only touch the known_hosts file if it does not exist, and create the parent ↵ | Daniel Kahn Gillmor | |
directory if it does not exist. if more than one level of enclosing directory does not exist, this will fail cryptically. | |||
2009-07-24 | improve the marginal ui a bit. note number of invalid keys. closes ms #1141 | Jameson Graef Rollins | |
2009-07-24 | proposed fix for #1147 by checking for known_hosts file | Jameson Graef Rollins | |
2009-07-23 | proposed fix to marginal ui in case where host key not retrieved (should fix ↵ | Jameson Graef Rollins | |
1141) | |||
2009-07-18 | add refresh-keys subcommand to monkeysphere-authentication | Jameson Graef Rollins | |
2009-07-14 | improvements monkeysphere-host diagnostics | Jameson Graef Rollins | |
I made a couple of improvements to the mh diagnostics script, including rearranging some of the test, to try to better handle some of the possible low-level failures that one might run into. Hopefully this will be a little more informative. closes MS #624. | |||
2009-07-14 | make sure that revokehostname sees the pieces it needs to see in order to ↵ | Daniel Kahn Gillmor | |
create a useful revocation certificate. |