projects
/
monkeysphere.git
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
raw
|
inline
| side by side
minor change to setup website levels
[monkeysphere.git]
/
man
/
man1
/
monkeysphere.1
diff --git
a/man/man1/monkeysphere.1
b/man/man1/monkeysphere.1
index 5badaa9be70e6d52f8b045f74cb9de9bf7a9be63..25421cef9fcf7580c1826c1315091e7b1ad9aefa 100644
(file)
--- a/
man/man1/monkeysphere.1
+++ b/
man/man1/monkeysphere.1
@@
-11,9
+11,11
@@
monkeysphere - Monkeysphere client user interface
.SH DESCRIPTION
\fBMonkeysphere\fP is a framework to leverage the OpenPGP web of trust
.SH DESCRIPTION
\fBMonkeysphere\fP is a framework to leverage the OpenPGP web of trust
-for OpenSSH authentication. OpenPGP keys are tracked via GnuPG, and
-added to the authorized_keys and known_hosts files used by OpenSSH for
-connection authentication.
+for OpenSSH and TLS key-based authentication. OpenPGP keys are
+tracked via GnuPG, and added to the authorized_keys and known_hosts
+files used by OpenSSH for connection authentication. Monkeysphere can
+also be used by a validation agent to validate TLS connections
+(e.g. https).
\fBmonkeysphere\fP is the Monkeysphere client utility.
\fBmonkeysphere\fP is the Monkeysphere client utility.
@@
-126,9
+128,12
@@
specify the full fingerprints of specific keys to add to the agent
(space separated), instead of adding them all. `s' may be used in
place of `subkey\-to\-ssh\-agent'.
.TP
(space separated), instead of adding them all. `s' may be used in
place of `subkey\-to\-ssh\-agent'.
.TP
-.B sshfpr KEYID
-Output the ssh fingerprint of a key in your gpg keyring. `f' may be
-used in place of `fingerprint'.
+.B keys\-for\-userid USERID
+Output to stdout all acceptable keys for a given user ID.
+`u' may be used in place of `keys\-for\-userid'.
+.TP
+.B sshfprs\-for\-userid USERID
+Output the ssh fingerprints of acceptable keys for a given user ID.
.TP
.B version
Show the monkeysphere version number. `v' may be used in place of
.TP
.B version
Show the monkeysphere version number. `v' may be used in place of
@@
-168,6
+173,11
@@
Path to ssh authorized_keys file. (~/.ssh/authorized_keys)
MONKEYSPHERE_PROMPT
If set to `false', never prompt the user for confirmation. (true)
.TP
MONKEYSPHERE_PROMPT
If set to `false', never prompt the user for confirmation. (true)
.TP
+MONKEYSPHERE_STRICT_MODES
+If set to `false', ignore too-loose permissions on known_hosts,
+authorized_keys, and authorized_user_ids files. NOTE: setting this to
+false may expose you to abuse by other users on the system. (true)
+.TP
MONKEYSPHERE_SUBKEYS_FOR_AGENT
A space-separated list of authentication-capable subkeys to add to the
ssh agent with subkey-to-ssh-agent.
MONKEYSPHERE_SUBKEYS_FOR_AGENT
A space-separated list of authentication-capable subkeys to add to the
ssh agent with subkey-to-ssh-agent.
@@
-182,13
+192,15
@@
User monkeysphere config file.
System-wide monkeysphere config file.
.TP
~/.monkeysphere/authorized_user_ids
System-wide monkeysphere config file.
.TP
~/.monkeysphere/authorized_user_ids
-OpenPGP user IDs associated with keys that will be checked for
-addition to the authorized_keys file.
+A list of OpenPGP user IDs, one per line. OpenPGP keys with an
+exactly-matching User ID (calculated valid by the designated identity
+certifiers), will have any valid authorization-capable keys or subkeys
+added to the given user's authorized_keys file.
.SH AUTHOR
Written by:
.SH AUTHOR
Written by:
-Jameson Rollins <jrollins@fi
fthhorseman
.net>,
+Jameson Rollins <jrollins@fi
nestructure
.net>,
Daniel Kahn Gillmor <dkg@fifthhorseman.net>
.SH SEE ALSO
Daniel Kahn Gillmor <dkg@fifthhorseman.net>
.SH SEE ALSO