path: root/man/man1/monkeysphere.1

.TH MONKEYSPHERE "1" "June 2008" "monkeysphere 0.1" "User Commands"

.SH NAME

monkeysphere \- MonkeySphere client user interface

.SH SYNOPSIS

.B monkeysphere \fIsubcommand\fP [\fIargs\fP]

.SH DESCRIPTION

\fBMonkeySphere\fP is a framework to leverage the OpenPGP Web of Trust
for ssh authentication.  OpenPGP keys are tracked via GnuPG, and added
to the authorized_keys and known_hosts files used by ssh for
connection authentication.

\fBmonkeysphere\fP is the MonkeySphere client utility.

.SH SUBCOMMANDS

\fBmonkeysphere\fP takes various subcommands:
.TP
.B update-known_hosts [HOST]...
Update the known_hosts file.  For each specified host, gpg will be
queried for a key associated with the host URI (see HOST
IDENTIFICATION in monkeysphere(5)), optionally querying a keyserver.
If an acceptable key is found for the host (see KEY ACCEPTABILITY in
monkeysphere(5)), the key is added to the user's known_hosts file.  If
a key is found but is unacceptable for the host, any matching keys are
removed from the user's known_hosts file.  If no gpg key is found for
the host, nothing is done.  If no hosts are specified, all hosts
listed in the known_hosts file will be processed.  This subcommand
will exit with a status of 0 if at least one acceptable key was found
for a specified host, 1 if no matching keys were found at all, and 2
if matching keys were found but none were acceptable.  `k' may be used
in place of `update-known_hosts'.
.TP
.B update-authorized_keys
Update the monkeysphere authorized_keys file.  For each user ID in the
user's authorized_user_ids file, gpg will be queried for keys
associated with that user ID, optionally querying a keyserver.  If an
acceptable key is found (see KEY ACCEPTABILITY in monkeysphere(5)),
the key is add to the user's authorized_keys file.  If a key is found
but is unacceptable for the user ID, any matching keys are removed
from the user's authorized_keys file.  If no gpg key is found for the
user ID, nothing is done.  This subcommand will exit with a status of
0 if at least one acceptable key was found for a user ID, 1 if no
matching keys wer found at all, and 2 if matching keys were found but
none were acceptable.  `a' may be used in place of
`update-authorized_keys'.
.TP
.B gen-subkey KEYID
Generate an authentication subkey.  For the primary key with the
specified key ID, generate a subkey with "authentication" capability
that can be used for monkeysphere transactions.  `g' may be used in
place of `gen-subkey'.
.TP
.B help
Output a brief usage summary.  `h' or `?' may be used in place of
`help'.

.SH FILES

.TP
~/.config/monkeysphere/monkeysphere.conf
User monkeysphere config file.
.TP
/etc/monkeysphere/monkeysphere.conf
System-wide monkeysphere config file.
.TP
~/.config/monkeysphere/authorized_user_ids
OpenPGP user IDs associated with keys that will be checked for
addition to the authorized_keys file.

.SH AUTHOR

Written by Jameson Rollins <jrollins@fifthhorseman.net>, Daniel
Kahn Gillmor <dkg@fifthhorseman.net>

.SH SEE ALSO

.BR monkeysphere-ssh-proxycommand (1),
.BR monkeysphere-server (8),
.BR monkeysphere (5),
.BR ssh (1),
.BR gpg (1)