monkeysphere.git
15 years agoupdating the changelog.
Daniel Kahn Gillmor [Sat, 21 Feb 2009 22:51:35 +0000 (17:51 -0500)]
updating the changelog.

15 years agoadjusting extraction of revokers. monkeysphere_0.23
Daniel Kahn Gillmor [Sat, 21 Feb 2009 22:34:15 +0000 (17:34 -0500)]
adjusting extraction of revokers.

15 years agomake show-key so that it works even if there are no revokers.
Jameson Graef Rollins [Sat, 21 Feb 2009 22:30:54 +0000 (17:30 -0500)]
make show-key so that it works even if there are no revokers.

15 years agoMerge commit 'dkg/master'
Jameson Graef Rollins [Sat, 21 Feb 2009 22:25:26 +0000 (17:25 -0500)]
Merge commit 'dkg/master'

15 years agoextend show-key to show fingerprints of revokers as well.
Jameson Graef Rollins [Sat, 21 Feb 2009 22:25:11 +0000 (17:25 -0500)]
extend show-key to show fingerprints of revokers as well.

15 years agofixing up some documentation, including version notes in getting started.
Daniel Kahn Gillmor [Sat, 21 Feb 2009 22:24:25 +0000 (17:24 -0500)]
fixing up some documentation, including version notes in getting started.

15 years agoadd FIXME to show key about how it should show revokers as well.
Jameson Graef Rollins [Sat, 21 Feb 2009 22:12:49 +0000 (17:12 -0500)]
add FIXME to show key about how it should show revokers as well.

15 years agofix bug in ssh connection test
Jameson Graef Rollins [Sat, 21 Feb 2009 22:12:33 +0000 (17:12 -0500)]
fix bug in ssh connection test

15 years agocorrect return codes for monkeysphere subkey-to-ssh-agent
Daniel Kahn Gillmor [Sat, 21 Feb 2009 22:06:47 +0000 (17:06 -0500)]
correct return codes for monkeysphere subkey-to-ssh-agent

15 years agoMerge commit 'dkg/master'
Jameson Graef Rollins [Sat, 21 Feb 2009 21:48:43 +0000 (16:48 -0500)]
Merge commit 'dkg/master'

15 years agomake sure all prompt messages are going to stderr
Jameson Graef Rollins [Sat, 21 Feb 2009 21:48:30 +0000 (16:48 -0500)]
make sure all prompt messages are going to stderr

15 years agomaking entry into subshell after failed test run more explicit (thanks for the sugges...
Daniel Kahn Gillmor [Sat, 21 Feb 2009 21:31:21 +0000 (16:31 -0500)]
making entry into subshell after failed test run more explicit (thanks for the suggestion, Ross!)

15 years agoMerge commit 'dkg/master'
Jameson Graef Rollins [Sat, 21 Feb 2009 21:30:50 +0000 (16:30 -0500)]
Merge commit 'dkg/master'

15 years agocleanup of how ssh_test return code is captured in tests/basic
Jameson Graef Rollins [Sat, 21 Feb 2009 21:30:15 +0000 (16:30 -0500)]
cleanup of how ssh_test return code is captured in tests/basic

15 years agofix output formatting for cases where multiple fingerprints are found, in functions...
Jameson Graef Rollins [Sat, 21 Feb 2009 21:29:35 +0000 (16:29 -0500)]
fix output formatting for cases where multiple fingerprints are found, in functions that are doing that sort of thing

15 years agoadded new explicit checks for relevant perl modules in tests/basic.
Daniel Kahn Gillmor [Sat, 21 Feb 2009 21:17:46 +0000 (16:17 -0500)]
added new explicit checks for relevant perl modules in tests/basic.

15 years agoMerge commit 'dkg/master'
Jameson Graef Rollins [Sat, 21 Feb 2009 21:17:20 +0000 (16:17 -0500)]
Merge commit 'dkg/master'

15 years agoadd tests to add_revoker and add_certifier that more than one key was not found when...
Jameson Graef Rollins [Sat, 21 Feb 2009 21:16:58 +0000 (16:16 -0500)]
add tests to add_revoker and add_certifier that more than one key was not found when adding by using key ID.

15 years agoun-fix non-typo in ssh_proxycommand. (my mistake!)
Daniel Kahn Gillmor [Sat, 21 Feb 2009 21:14:38 +0000 (16:14 -0500)]
un-fix non-typo in ssh_proxycommand. (my mistake!)

15 years agofixing typo in ssh_proxycommand.
Daniel Kahn Gillmor [Sat, 21 Feb 2009 21:11:07 +0000 (16:11 -0500)]
fixing typo in ssh_proxycommand.

15 years agomerged jrollins/master
Daniel Kahn Gillmor [Sat, 21 Feb 2009 21:09:08 +0000 (16:09 -0500)]
merged jrollins/master

15 years agofix return in subkey_to_ssh_agent, so that it returns, instead of exits
Jameson Graef Rollins [Sat, 21 Feb 2009 20:39:44 +0000 (15:39 -0500)]
fix return in subkey_to_ssh_agent, so that it returns, instead of exits

15 years agoimport-key now requires a hostname be specified, and no longer does
Jameson Graef Rollins [Sat, 21 Feb 2009 20:37:30 +0000 (15:37 -0500)]
import-key now requires a hostname be specified, and no longer does
any hostname guessing.  this is so that we don't have to worry about
prompting the user when guessing the hostname.  also updated
documentation.

15 years agoremove 'return' line from monkeysphere that was errantly not removed in the previous...
Jameson Graef Rollins [Sat, 21 Feb 2009 20:10:57 +0000 (15:10 -0500)]
remove 'return' line from monkeysphere that was errantly not removed in the previous commit.

15 years agomake sure we're explicitly capturing return codes in places where they are tested...
Jameson Graef Rollins [Sat, 21 Feb 2009 19:57:41 +0000 (14:57 -0500)]
make sure we're explicitly capturing return codes in places where they are tested, in case things are being run set -e

15 years agoupdate TODO
Jameson Graef Rollins [Sat, 21 Feb 2009 19:52:53 +0000 (14:52 -0500)]
update TODO

15 years agoMerge commit 'jrollins/master'
Daniel Kahn Gillmor [Sat, 21 Feb 2009 19:50:18 +0000 (14:50 -0500)]
Merge commit 'jrollins/master'

15 years agotweaking m-h getting started docs.
Daniel Kahn Gillmor [Sat, 21 Feb 2009 19:49:54 +0000 (14:49 -0500)]
tweaking m-h getting started docs.

15 years agofix failure message in import_key
Jameson Graef Rollins [Sat, 21 Feb 2009 19:45:14 +0000 (14:45 -0500)]
fix failure message in import_key

15 years agoadded note about specifying a hostname for import-key in the admin
Jameson Graef Rollins [Sat, 21 Feb 2009 18:08:55 +0000 (13:08 -0500)]
added note about specifying a hostname for import-key in the admin
getting started page.

15 years agosome small tweaks to the test:
Jameson Graef Rollins [Sat, 21 Feb 2009 18:07:31 +0000 (13:07 -0500)]
some small tweaks to the test:
- force all output to go to stdout, so it's more easily grep'able
- add "no-tty" to the gpgadmin function so that the gpg output goes to
the right place
- some small output formating improvements.

15 years agoAdd "true" to prerm script so that lintian will stop complaining that
Jameson Graef Rollins [Fri, 20 Feb 2009 23:09:37 +0000 (18:09 -0500)]
Add "true" to prerm script so that lintian will stop complaining that
the script is empty.
also small doc tweaks.

15 years agoMerge commit 'dkg/master'
Jameson Graef Rollins [Fri, 20 Feb 2009 20:39:07 +0000 (15:39 -0500)]
Merge commit 'dkg/master'

15 years agomore wordsmithing.
Daniel Kahn Gillmor [Fri, 20 Feb 2009 20:29:34 +0000 (15:29 -0500)]
more wordsmithing.

15 years agodocumentation tuning.
Daniel Kahn Gillmor [Fri, 20 Feb 2009 20:25:14 +0000 (15:25 -0500)]
documentation tuning.

15 years agodocumentation overhaul for users just getting started.
Daniel Kahn Gillmor [Fri, 20 Feb 2009 20:23:38 +0000 (15:23 -0500)]
documentation overhaul for users just getting started.

15 years agotweak/cleanup some of the prompts.
Jameson Graef Rollins [Fri, 20 Feb 2009 19:26:15 +0000 (14:26 -0500)]
tweak/cleanup some of the prompts.

15 years agoreadability revision for getting-started-admin.mdwn
Daniel Kahn Gillmor [Fri, 20 Feb 2009 18:22:09 +0000 (13:22 -0500)]
readability revision for getting-started-admin.mdwn

15 years agotuning some diagnostic text.
Daniel Kahn Gillmor [Fri, 20 Feb 2009 18:19:46 +0000 (13:19 -0500)]
tuning some diagnostic text.

15 years agoclean up 0.23 changelog entry
Daniel Kahn Gillmor [Fri, 20 Feb 2009 17:42:24 +0000 (12:42 -0500)]
clean up 0.23 changelog entry

15 years agotune automated revocation certificate description; add FIXME to allow it to be set...
Daniel Kahn Gillmor [Fri, 20 Feb 2009 17:33:14 +0000 (12:33 -0500)]
tune automated revocation certificate description; add FIXME to allow it to be set explicitly.

15 years agomonkeysphere-host revoke-key should now be capable of publishing the
Daniel Kahn Gillmor [Fri, 20 Feb 2009 17:27:01 +0000 (12:27 -0500)]
monkeysphere-host revoke-key should now be capable of publishing the
revocation certificate to the keyservers directly, should the admin
want that.

It can also run without prompting, if MONKEYSPHERE_PROMPT=false.  In
the no-prompts case, it never publishes to the keyserver, it indicates
that the key was compromised, and it writes a boilerplate description
to make it easy to identify this kind of certificate.

15 years agotrivial implementation of monkeysphere-host revoke-key: just prints ascii-armored...
Daniel Kahn Gillmor [Fri, 20 Feb 2009 06:39:29 +0000 (01:39 -0500)]
trivial implementation of monkeysphere-host revoke-key: just prints ascii-armored revocation certificate to stdout, and admin is expected to know what to do with it.

15 years agoclarify revoke_hostname warning
Daniel Kahn Gillmor [Fri, 20 Feb 2009 06:02:06 +0000 (01:02 -0500)]
clarify revoke_hostname warning

15 years agodocument why monkeysphere import-subkey is not yet working.
Daniel Kahn Gillmor [Fri, 20 Feb 2009 05:50:46 +0000 (00:50 -0500)]
document why monkeysphere import-subkey is not yet working.

15 years agoexplicitly set GNUPGHOME in su_monkeysphere_user calls to gpg in add_revoker, to...
Jameson Graef Rollins [Fri, 20 Feb 2009 05:38:59 +0000 (00:38 -0500)]
explicitly set GNUPGHOME in su_monkeysphere_user calls to gpg in add_revoker, to avoid any confusion about having GNUPGHOME as a tempdir exported to the environment.

15 years agostupid bug fix
Jameson Graef Rollins [Fri, 20 Feb 2009 05:23:35 +0000 (00:23 -0500)]
stupid bug fix

15 years agoadd_revoker fully working. also cleanup of add_certifier.
Jameson Graef Rollins [Fri, 20 Feb 2009 05:09:20 +0000 (00:09 -0500)]
add_revoker fully working.  also cleanup of add_certifier.
add_revoker and add_certifier to many similar procedures, so I'm
trying to keep them in sync as I figure out the right way to handle
things.

15 years agoMerge commit 'jrollins/master'
Daniel Kahn Gillmor [Fri, 20 Feb 2009 03:42:43 +0000 (22:42 -0500)]
Merge commit 'jrollins/master'

15 years agocorrecting ssh_proxycommand output.
Daniel Kahn Gillmor [Fri, 20 Feb 2009 03:40:02 +0000 (22:40 -0500)]
correcting ssh_proxycommand output.

15 years agoremove import_subkey from monkeysphere usage and man page until we get
Jameson Graef Rollins [Fri, 20 Feb 2009 03:39:00 +0000 (22:39 -0500)]
remove import_subkey from monkeysphere usage and man page until we get
a chance to fully implement it.

15 years agoclean up the diagnostics functions, check for ID-Certifiers in m-a d
Daniel Kahn Gillmor [Fri, 20 Feb 2009 03:06:43 +0000 (22:06 -0500)]
clean up the diagnostics functions, check for ID-Certifiers in m-a d

15 years agocleaning up output of cruft report
Daniel Kahn Gillmor [Fri, 20 Feb 2009 02:19:19 +0000 (21:19 -0500)]
cleaning up output of cruft report

15 years agodiagnostics should now check for cruft from old versions of the monkeysphere.
Daniel Kahn Gillmor [Fri, 20 Feb 2009 02:04:47 +0000 (21:04 -0500)]
diagnostics should now check for cruft from old versions of the monkeysphere.

15 years agofix arg parsing in add_certifier to allow of - for stdin read.
Jameson Graef Rollins [Fri, 20 Feb 2009 00:01:38 +0000 (19:01 -0500)]
fix arg parsing in add_certifier to allow of - for stdin read.

15 years agoModify/cleanup add_certifier and add_revoker, so that their code base
Jameson Graef Rollins [Thu, 19 Feb 2009 23:14:13 +0000 (18:14 -0500)]
Modify/cleanup add_certifier and add_revoker, so that their code base
is more similar, and so that they can read keys from stdin instead of
just from a file.  Also fix the permissions on the tempdir in
publish_key.

15 years agosome updates to getting-started-*
Jameson Graef Rollins [Thu, 19 Feb 2009 20:46:48 +0000 (15:46 -0500)]
some updates to getting-started-*

15 years agothe import_subkey function was in fact not implement at all. MUST FIX!
Jameson Graef Rollins [Thu, 19 Feb 2009 20:46:23 +0000 (15:46 -0500)]
the import_subkey function was in fact not implement at all.  MUST FIX!

15 years agoadd a gpg_user function in monkeysphere to add some gpg quieting
Jameson Graef Rollins [Thu, 19 Feb 2009 20:31:17 +0000 (15:31 -0500)]
add a gpg_user function in monkeysphere to add some gpg quieting
option, and use it in all gpg invocations.
add a trap to subkey_to_ssh_agent.

15 years agoThe monkeysphere {import,gen}_subkey functions were not up-to-date.
Jameson Graef Rollins [Thu, 19 Feb 2009 20:19:02 +0000 (15:19 -0500)]
The monkeysphere {import,gen}_subkey functions were not up-to-date.
did a lot of work to bring them up-to-date, and better handle argument
checking.  also updated man page, changelog, and tests/basic.

15 years agomodify import_key to take the key file to import as an argument. can be '-' to impor...
Jameson Graef Rollins [Thu, 19 Feb 2009 17:29:47 +0000 (12:29 -0500)]
modify import_key to take the key file to import as an argument.  can be '-' to import from stdin.  modify man page and test accordingly.

15 years agomore fix permissions and ownership on authentication directories.
Jameson Graef Rollins [Thu, 19 Feb 2009 10:14:50 +0000 (05:14 -0500)]
more fix permissions and ownership on authentication directories.

15 years agofix permissions and ownership on authentication directories.
Jameson Graef Rollins [Thu, 19 Feb 2009 10:08:57 +0000 (05:08 -0500)]
fix permissions and ownership on authentication directories.

15 years agoavoid chown -R, explicitly indicate the files we expect to be changed.
Daniel Kahn Gillmor [Thu, 19 Feb 2009 10:03:05 +0000 (05:03 -0500)]
avoid chown -R, explicitly indicate the files we expect to be changed.

15 years agodo not show uid validity for gpg authentication core, since the core has no ultimate...
Daniel Kahn Gillmor [Thu, 19 Feb 2009 09:55:46 +0000 (04:55 -0500)]
do not show uid validity for gpg authentication core, since the core has no ultimate ownertrust

15 years agoMerge commit 'jrollins/master'
Daniel Kahn Gillmor [Thu, 19 Feb 2009 09:31:25 +0000 (04:31 -0500)]
Merge commit 'jrollins/master'

15 years agoadded msmktempfile; got rid of /dev/stdin assumption in ssh_proxycommand for portability
Daniel Kahn Gillmor [Thu, 19 Feb 2009 09:30:47 +0000 (04:30 -0500)]
added msmktempfile; got rid of /dev/stdin assumption in ssh_proxycommand for portability

15 years agodon't use /dev/stdin hack with ssh-keygen to get ssh fingerprint. just use a tmp...
Jameson Graef Rollins [Thu, 19 Feb 2009 09:30:40 +0000 (04:30 -0500)]
don't use /dev/stdin hack with ssh-keygen to get ssh fingerprint.  just use a tmp file.

15 years agoclean up more gpg warnings during 0.23 transition
Daniel Kahn Gillmor [Thu, 19 Feb 2009 09:11:27 +0000 (04:11 -0500)]
clean up more gpg warnings during 0.23 transition

15 years agoMerge commit 'dkg/master'
Jameson Graef Rollins [Thu, 19 Feb 2009 09:01:47 +0000 (04:01 -0500)]
Merge commit 'dkg/master'

15 years agoMerge commit 'jrollins/master'
Daniel Kahn Gillmor [Thu, 19 Feb 2009 09:00:48 +0000 (04:00 -0500)]
Merge commit 'jrollins/master'

15 years agoMerge commit 'dkg/master'
Jameson Graef Rollins [Thu, 19 Feb 2009 08:59:52 +0000 (03:59 -0500)]
Merge commit 'dkg/master'

15 years agomake sure fingerprint is loaded for update_gpg_pub_file
Jameson Graef Rollins [Thu, 19 Feb 2009 08:59:09 +0000 (03:59 -0500)]
make sure fingerprint is loaded for update_gpg_pub_file

15 years agostill more cleanup in transitions/0.23
Daniel Kahn Gillmor [Thu, 19 Feb 2009 08:53:41 +0000 (03:53 -0500)]
still more cleanup in transitions/0.23

15 years agofix CHECK_KEYSERVER variable in monkeysphere, so the default is correct for proxycomm...
Jameson Graef Rollins [Thu, 19 Feb 2009 08:49:23 +0000 (03:49 -0500)]
fix CHECK_KEYSERVER variable in monkeysphere, so the default is correct for proxycommand, and fix an errant bad line in proxycommand.

15 years agomore cleanup on 0.23 transition script
Daniel Kahn Gillmor [Thu, 19 Feb 2009 08:44:17 +0000 (03:44 -0500)]
more cleanup on 0.23 transition script

15 years agoremove a permission warning from the old gpg config during 0.23 transition.
Daniel Kahn Gillmor [Thu, 19 Feb 2009 08:34:31 +0000 (03:34 -0500)]
remove a permission warning from the old gpg config during 0.23 transition.

15 years agomore think-os in the 0.23 transition script.
Daniel Kahn Gillmor [Thu, 19 Feb 2009 08:32:18 +0000 (03:32 -0500)]
more think-os in the 0.23 transition script.

15 years agofix think-o in 0.23 transition.
Daniel Kahn Gillmor [Thu, 19 Feb 2009 08:13:50 +0000 (03:13 -0500)]
fix think-o in 0.23 transition.

15 years agoMerge commit 'jrollins/master'
Daniel Kahn Gillmor [Thu, 19 Feb 2009 08:01:53 +0000 (03:01 -0500)]
Merge commit 'jrollins/master'

15 years agofail if hostname can not be determined in import_key
Jameson Graef Rollins [Thu, 19 Feb 2009 07:50:38 +0000 (02:50 -0500)]
fail if hostname can not be determined in import_key

15 years agoreverse the order of two of the SEE ALSO references in monkeysphere(7). For some...
Daniel Kahn Gillmor [Thu, 19 Feb 2009 07:38:39 +0000 (02:38 -0500)]
reverse the order of two of the SEE ALSO references in monkeysphere(7).  For some reason, this avoids a bug in man that causes it to complain "<standard input>:57: warning [p 1, 8.3i]: cannot adjust line"

15 years agofix call to transition script in postinst script, and fix lintian error about transit...
Jameson Graef Rollins [Thu, 19 Feb 2009 07:33:53 +0000 (02:33 -0500)]
fix call to transition script in postinst script, and fix lintian error about transitions README

15 years agoMerge commit 'dkg/master'
Jameson Graef Rollins [Thu, 19 Feb 2009 07:24:40 +0000 (02:24 -0500)]
Merge commit 'dkg/master'

15 years agoinstall the transition scripts as executable by the superuser.
Daniel Kahn Gillmor [Thu, 19 Feb 2009 07:19:04 +0000 (02:19 -0500)]
install the transition scripts as executable by the superuser.

15 years agoadded notes about transition to debian/changelog
Daniel Kahn Gillmor [Thu, 19 Feb 2009 07:15:20 +0000 (02:15 -0500)]
added notes about transition to debian/changelog

15 years agoMerge commit 'dkg/master'
Jameson Graef Rollins [Thu, 19 Feb 2009 07:14:15 +0000 (02:14 -0500)]
Merge commit 'dkg/master'

15 years agoadopting new transition script strategy
Daniel Kahn Gillmor [Thu, 19 Feb 2009 07:13:11 +0000 (02:13 -0500)]
adopting new transition script strategy

15 years agoMerge commit 'dkg/master'
Jameson Graef Rollins [Thu, 19 Feb 2009 07:09:23 +0000 (02:09 -0500)]
Merge commit 'dkg/master'

15 years agosmall usage changes
Jameson Graef Rollins [Thu, 19 Feb 2009 07:06:06 +0000 (02:06 -0500)]
small usage changes

15 years agoadd PROMPT respect in get_gpg_expiration
Jameson Graef Rollins [Thu, 19 Feb 2009 07:05:05 +0000 (02:05 -0500)]
add PROMPT respect in get_gpg_expiration

15 years agoadd some log debug redirects
Jameson Graef Rollins [Thu, 19 Feb 2009 06:40:19 +0000 (01:40 -0500)]
add some log debug redirects

15 years agomaking clearer comments in the transition script, invoking from postinst for debian.
Daniel Kahn Gillmor [Thu, 19 Feb 2009 07:02:19 +0000 (02:02 -0500)]
making clearer comments in the transition script, invoking from postinst for debian.

15 years agoshipping transition script; requiring manual version synchronization between common...
Daniel Kahn Gillmor [Thu, 19 Feb 2009 06:49:30 +0000 (01:49 -0500)]
shipping transition script; requiring manual version synchronization between common and the changelog (until we come up with a more general templating build process)

15 years agoMerge commit 'dkg/master'
Jameson Graef Rollins [Thu, 19 Feb 2009 06:20:44 +0000 (01:20 -0500)]
Merge commit 'dkg/master'

15 years agotweak some of the prompting, to change defaults, and add PROMPT usage where missing
Jameson Graef Rollins [Thu, 19 Feb 2009 06:20:33 +0000 (01:20 -0500)]
tweak some of the prompting, to change defaults, and add PROMPT usage where missing

15 years agomade gpg_sphere use --quiet again, and now doing more explicit extraction of key...
Daniel Kahn Gillmor [Thu, 19 Feb 2009 06:17:11 +0000 (01:17 -0500)]
made gpg_sphere use --quiet again, and now doing more explicit extraction of key fingerprint during add-certifier from file.

15 years agoMerge commit 'dkg/master'
Jameson Graef Rollins [Thu, 19 Feb 2009 05:59:03 +0000 (00:59 -0500)]
Merge commit 'dkg/master'

15 years agoCleanup how variables are specified and loaded:
Jameson Graef Rollins [Thu, 19 Feb 2009 03:37:12 +0000 (22:37 -0500)]
Cleanup how variables are specified and loaded:
- define more common variables in share/common
- cleanup how defaults are specified
- fix how CHECK_KEYSERVER was determined in monkeysphere

Fix calls to update_known_hosts and update_authorized_keys in
monkeysphere so that some of the checks are done within the functions
themselves, as opposed in the monkeysphere wrapper, so that other
functions can call them easier.

Fix ssh-proxycommand that had some left over cruft from the
transition.

15 years agoclean up failure message
Daniel Kahn Gillmor [Thu, 19 Feb 2009 05:37:10 +0000 (00:37 -0500)]
clean up failure message