X-Git-Url: https://codewiz.org/gitweb?a=blobdiff_plain;f=man%2Fman1%2Fmonkeysphere.1;h=25421cef9fcf7580c1826c1315091e7b1ad9aefa;hb=072e05ac7a9872edc3a3e18e103bbba2706254bf;hp=1c9217fe5b170751bcf0ca4e9eb7c10214d98da6;hpb=eb815bce0da27a24ad718c31b77e45032e3a5916;p=monkeysphere.git diff --git a/man/man1/monkeysphere.1 b/man/man1/monkeysphere.1 index 1c9217f..25421ce 100644 --- a/man/man1/monkeysphere.1 +++ b/man/man1/monkeysphere.1 @@ -11,9 +11,11 @@ monkeysphere - Monkeysphere client user interface .SH DESCRIPTION \fBMonkeysphere\fP is a framework to leverage the OpenPGP web of trust -for OpenSSH authentication. OpenPGP keys are tracked via GnuPG, and -added to the authorized_keys and known_hosts files used by OpenSSH for -connection authentication. +for OpenSSH and TLS key-based authentication. OpenPGP keys are +tracked via GnuPG, and added to the authorized_keys and known_hosts +files used by OpenSSH for connection authentication. Monkeysphere can +also be used by a validation agent to validate TLS connections +(e.g. https). \fBmonkeysphere\fP is the Monkeysphere client utility. @@ -126,9 +128,12 @@ specify the full fingerprints of specific keys to add to the agent (space separated), instead of adding them all. `s' may be used in place of `subkey\-to\-ssh\-agent'. .TP -.B sshfpr KEYID -Output the ssh fingerprint of a key in your gpg keyring. `f' may be -used in place of `fingerprint'. +.B keys\-for\-userid USERID +Output to stdout all acceptable keys for a given user ID. +`u' may be used in place of `keys\-for\-userid'. +.TP +.B sshfprs\-for\-userid USERID +Output the ssh fingerprints of acceptable keys for a given user ID. .TP .B version Show the monkeysphere version number. `v' may be used in place of @@ -168,6 +173,11 @@ Path to ssh authorized_keys file. (~/.ssh/authorized_keys) MONKEYSPHERE_PROMPT If set to `false', never prompt the user for confirmation. (true) .TP +MONKEYSPHERE_STRICT_MODES +If set to `false', ignore too-loose permissions on known_hosts, +authorized_keys, and authorized_user_ids files. NOTE: setting this to +false may expose you to abuse by other users on the system. (true) +.TP MONKEYSPHERE_SUBKEYS_FOR_AGENT A space-separated list of authentication-capable subkeys to add to the ssh agent with subkey-to-ssh-agent. @@ -190,7 +200,7 @@ added to the given user's authorized_keys file. .SH AUTHOR Written by: -Jameson Rollins , +Jameson Rollins , Daniel Kahn Gillmor .SH SEE ALSO