`\-', then the key will be imported from stdin. Only RSA keys are
supported at the moment. NAME[:PORT] is used to specify the
fully-qualified hostname (and port) used in the user ID of the new
`\-', then the key will be imported from stdin. Only RSA keys are
supported at the moment. NAME[:PORT] is used to specify the
fully-qualified hostname (and port) used in the user ID of the new
.B diagnostics
Review the state of the monkeysphere server host key and report on
suggested changes. Among other checks, this includes making sure
.B diagnostics
Review the state of the monkeysphere server host key and report on
suggested changes. Among other checks, this includes making sure
To enable host verification via the monkeysphere, an OpenPGP key must
be made out of the host's ssh key, and the key must be published to
the Web of Trust. This is not done by default. The first step is to
To enable host verification via the monkeysphere, an OpenPGP key must
be made out of the host's ssh key, and the key must be published to
the Web of Trust. This is not done by default. The first step is to
-import the host's ssh key into a monkeysphere OpenPGP key. This is
-done with the import\-key command. When importing a key, you must
+import the host's ssh key into a monkeysphere-style OpenPGP key. This
+is done with the import\-key command. When importing a key, you must
specify the path to the host's ssh RSA key to import, and a hostname
to use as the key's user ID:
specify the path to the host's ssh RSA key to import, and a hostname
to use as the key's user ID:
On most systems, the ssh host RSA key is stored at
/etc/ssh/ssh_host_rsa_key.
On most systems, the ssh host RSA key is stored at
/etc/ssh/ssh_host_rsa_key.
see http://web.monkeysphere.info/signing-host-keys/ for more
information. Once an admin's signature is published, users logging
into the host can use it to validate the host's key without having to
see http://web.monkeysphere.info/signing-host-keys/ for more
information. Once an admin's signature is published, users logging
into the host can use it to validate the host's key without having to
.TP
/var/lib/monkeysphere/host/ssh_host_rsa_key.pub.gpg
A world-readable copy of the host's public key in OpenPGP format,
.TP
/var/lib/monkeysphere/host/ssh_host_rsa_key.pub.gpg
A world-readable copy of the host's public key in OpenPGP format,
Jameson Rollins <jrollins@fifthhorseman.net>,
Daniel Kahn Gillmor <dkg@fifthhorseman.net>,
Matthew Goins <mjgoins@openflows.com>
Jameson Rollins <jrollins@fifthhorseman.net>,
Daniel Kahn Gillmor <dkg@fifthhorseman.net>,
Matthew Goins <mjgoins@openflows.com>