Daniel Kahn Gillmor [Thu, 19 Feb 2009 09:55:46 +0000 (04:55 -0500)]
do not show uid validity for gpg authentication core, since the core has no ultimate ownertrust
Daniel Kahn Gillmor [Thu, 19 Feb 2009 09:31:25 +0000 (04:31 -0500)]
Merge commit 'jrollins/master'
Daniel Kahn Gillmor [Thu, 19 Feb 2009 09:30:47 +0000 (04:30 -0500)]
added msmktempfile; got rid of /dev/stdin assumption in ssh_proxycommand for portability
Jameson Graef Rollins [Thu, 19 Feb 2009 09:30:40 +0000 (04:30 -0500)]
don't use /dev/stdin hack with ssh-keygen to get ssh fingerprint. just use a tmp file.
Daniel Kahn Gillmor [Thu, 19 Feb 2009 09:11:27 +0000 (04:11 -0500)]
clean up more gpg warnings during 0.23 transition
Jameson Graef Rollins [Thu, 19 Feb 2009 09:01:47 +0000 (04:01 -0500)]
Merge commit 'dkg/master'
Daniel Kahn Gillmor [Thu, 19 Feb 2009 09:00:48 +0000 (04:00 -0500)]
Merge commit 'jrollins/master'
Jameson Graef Rollins [Thu, 19 Feb 2009 08:59:52 +0000 (03:59 -0500)]
Merge commit 'dkg/master'
Jameson Graef Rollins [Thu, 19 Feb 2009 08:59:09 +0000 (03:59 -0500)]
make sure fingerprint is loaded for update_gpg_pub_file
Daniel Kahn Gillmor [Thu, 19 Feb 2009 08:53:41 +0000 (03:53 -0500)]
still more cleanup in transitions/0.23
Jameson Graef Rollins [Thu, 19 Feb 2009 08:49:23 +0000 (03:49 -0500)]
fix CHECK_KEYSERVER variable in monkeysphere, so the default is correct for proxycommand, and fix an errant bad line in proxycommand.
Daniel Kahn Gillmor [Thu, 19 Feb 2009 08:44:17 +0000 (03:44 -0500)]
more cleanup on 0.23 transition script
Daniel Kahn Gillmor [Thu, 19 Feb 2009 08:34:31 +0000 (03:34 -0500)]
remove a permission warning from the old gpg config during 0.23 transition.
Daniel Kahn Gillmor [Thu, 19 Feb 2009 08:32:18 +0000 (03:32 -0500)]
more think-os in the 0.23 transition script.
Daniel Kahn Gillmor [Thu, 19 Feb 2009 08:13:50 +0000 (03:13 -0500)]
fix think-o in 0.23 transition.
Daniel Kahn Gillmor [Thu, 19 Feb 2009 08:01:53 +0000 (03:01 -0500)]
Merge commit 'jrollins/master'
Jameson Graef Rollins [Thu, 19 Feb 2009 07:50:38 +0000 (02:50 -0500)]
fail if hostname can not be determined in import_key
Daniel Kahn Gillmor [Thu, 19 Feb 2009 07:38:39 +0000 (02:38 -0500)]
reverse the order of two of the SEE ALSO references in monkeysphere(7). For some reason, this avoids a bug in man that causes it to complain "<standard input>:57: warning [p 1, 8.3i]: cannot adjust line"
Jameson Graef Rollins [Thu, 19 Feb 2009 07:33:53 +0000 (02:33 -0500)]
fix call to transition script in postinst script, and fix lintian error about transitions README
Jameson Graef Rollins [Thu, 19 Feb 2009 07:24:40 +0000 (02:24 -0500)]
Merge commit 'dkg/master'
Daniel Kahn Gillmor [Thu, 19 Feb 2009 07:19:04 +0000 (02:19 -0500)]
install the transition scripts as executable by the superuser.
Daniel Kahn Gillmor [Thu, 19 Feb 2009 07:15:20 +0000 (02:15 -0500)]
added notes about transition to debian/changelog
Jameson Graef Rollins [Thu, 19 Feb 2009 07:14:15 +0000 (02:14 -0500)]
Merge commit 'dkg/master'
Daniel Kahn Gillmor [Thu, 19 Feb 2009 07:13:11 +0000 (02:13 -0500)]
adopting new transition script strategy
Jameson Graef Rollins [Thu, 19 Feb 2009 07:09:23 +0000 (02:09 -0500)]
Merge commit 'dkg/master'
Jameson Graef Rollins [Thu, 19 Feb 2009 07:06:06 +0000 (02:06 -0500)]
small usage changes
Jameson Graef Rollins [Thu, 19 Feb 2009 07:05:05 +0000 (02:05 -0500)]
add PROMPT respect in get_gpg_expiration
Jameson Graef Rollins [Thu, 19 Feb 2009 06:40:19 +0000 (01:40 -0500)]
add some log debug redirects
Daniel Kahn Gillmor [Thu, 19 Feb 2009 07:02:19 +0000 (02:02 -0500)]
making clearer comments in the transition script, invoking from postinst for debian.
Daniel Kahn Gillmor [Thu, 19 Feb 2009 06:49:30 +0000 (01:49 -0500)]
shipping transition script; requiring manual version synchronization between common and the changelog (until we come up with a more general templating build process)
Jameson Graef Rollins [Thu, 19 Feb 2009 06:20:44 +0000 (01:20 -0500)]
Merge commit 'dkg/master'
Jameson Graef Rollins [Thu, 19 Feb 2009 06:20:33 +0000 (01:20 -0500)]
tweak some of the prompting, to change defaults, and add PROMPT usage where missing
Daniel Kahn Gillmor [Thu, 19 Feb 2009 06:17:11 +0000 (01:17 -0500)]
made gpg_sphere use --quiet again, and now doing more explicit extraction of key fingerprint during add-certifier from file.
Jameson Graef Rollins [Thu, 19 Feb 2009 05:59:03 +0000 (00:59 -0500)]
Merge commit 'dkg/master'
Jameson Graef Rollins [Thu, 19 Feb 2009 03:37:12 +0000 (22:37 -0500)]
Cleanup how variables are specified and loaded:
- define more common variables in share/common
- cleanup how defaults are specified
- fix how CHECK_KEYSERVER was determined in monkeysphere
Fix calls to update_known_hosts and update_authorized_keys in
monkeysphere so that some of the checks are done within the functions
themselves, as opposed in the monkeysphere wrapper, so that other
functions can call them easier.
Fix ssh-proxycommand that had some left over cruft from the
transition.
Daniel Kahn Gillmor [Thu, 19 Feb 2009 05:37:10 +0000 (00:37 -0500)]
clean up failure message
Daniel Kahn Gillmor [Thu, 19 Feb 2009 05:35:50 +0000 (00:35 -0500)]
catch pipe failures more cleanly during key import
Daniel Kahn Gillmor [Thu, 19 Feb 2009 05:20:59 +0000 (00:20 -0500)]
removing --quiet from this invocation seems to avoid an add-id-certifier failure.
Daniel Kahn Gillmor [Thu, 19 Feb 2009 05:14:20 +0000 (00:14 -0500)]
moved directory for monkeysphere-generated authorized_keys files back to its old location at /var/lib/monkeysphere/authorized_keys
Daniel Kahn Gillmor [Thu, 19 Feb 2009 05:04:13 +0000 (00:04 -0500)]
(untested) overhaul of monkeysphere 0.22 to 0.23 release.
Daniel Kahn Gillmor [Thu, 19 Feb 2009 04:17:02 +0000 (23:17 -0500)]
normalizing MONKEYSPHERE_PROMPT description in monkeysphere.1
Daniel Kahn Gillmor [Thu, 19 Feb 2009 04:15:57 +0000 (23:15 -0500)]
added MONKEYSPHERE_PROMPT to man pages.
Daniel Kahn Gillmor [Thu, 19 Feb 2009 02:32:21 +0000 (21:32 -0500)]
Merge commit 'jrollins/master'
Daniel Kahn Gillmor [Thu, 19 Feb 2009 02:30:01 +0000 (21:30 -0500)]
added debian/NEWS file so that early adopters are appraised of the changes.
Jameson Graef Rollins [Thu, 19 Feb 2009 01:56:14 +0000 (20:56 -0500)]
new msmktempdir function, to simplify making temporary directories. remove MHTMPDIR, since it's not needed.
Jameson Graef Rollins [Thu, 19 Feb 2009 01:38:23 +0000 (20:38 -0500)]
add no-tty, quiet, and no-greeting to gpg wrapper invocations to supress as much gpg output as possible. then cleanup gpg invocations.
Jameson Graef Rollins [Wed, 18 Feb 2009 05:29:25 +0000 (00:29 -0500)]
fix some log output
Daniel Kahn Gillmor [Wed, 18 Feb 2009 04:33:55 +0000 (23:33 -0500)]
Merge commit 'jrollins/master'
Daniel Kahn Gillmor [Wed, 18 Feb 2009 04:29:43 +0000 (23:29 -0500)]
make m-a list-certifiers more intelligible when multiple uids have ltsigs.
Jameson Graef Rollins [Wed, 18 Feb 2009 04:13:31 +0000 (23:13 -0500)]
fix ma so that the setup command is folded into the other commands, so
it's never needed to be run manually, and can therefore be supressed
in the usage/documentation. Also, add setup to the postinst script so
that it's setup on installation.
Also add pipefail to ma, and try to supress unnecessary gpg output,
and redirect other to log debug.
Jameson Graef Rollins [Wed, 18 Feb 2009 03:35:29 +0000 (22:35 -0500)]
bring tests/basic uptodate with the new PROMPT env variable.
Daniel Kahn Gillmor [Wed, 18 Feb 2009 01:37:47 +0000 (20:37 -0500)]
describe the motivation for our current su_monkeysphere_user implementation.
Daniel Kahn Gillmor [Wed, 18 Feb 2009 01:01:36 +0000 (20:01 -0500)]
fix typo
Jameson Graef Rollins [Wed, 18 Feb 2009 00:43:20 +0000 (19:43 -0500)]
remove setting of ultimate owner trust on imported host key, since we probably don't want the host keyring to be accepting any certifications for anything.
Jameson Graef Rollins [Wed, 18 Feb 2009 00:16:58 +0000 (19:16 -0500)]
add README to tests/ directory
Jameson Graef Rollins [Wed, 18 Feb 2009 00:09:44 +0000 (19:09 -0500)]
add ability to bypass prompting with a MONKEYSPHERE_PROMPT variable,
for functions that prompt for confirmation. Also fix publish_key
function (NOT TESTED).
Jameson Graef Rollins [Wed, 18 Feb 2009 00:07:24 +0000 (19:07 -0500)]
add test to su_monkeysphere_user to check that the user is
monkeysphere user or root, and fail otherwise. this is so that there
is no password prompt for unpriviledged users (see bug #519).
Jameson Graef Rollins [Tue, 17 Feb 2009 20:19:40 +0000 (15:19 -0500)]
add some checks about setup to authentication
Jameson Graef Rollins [Tue, 17 Feb 2009 07:23:17 +0000 (02:23 -0500)]
rename create_gpg_pub_file to be update_gpg_pub_file, and add it to
every function that alters the host keyring, so that all changes will
show up in exported pub key file, and in show-key.
Jameson Graef Rollins [Tue, 17 Feb 2009 07:03:22 +0000 (02:03 -0500)]
Merge commit 'dkg/master'
Jameson Graef Rollins [Tue, 17 Feb 2009 07:02:58 +0000 (02:02 -0500)]
tweak the show-key output, and fix some comments.
Jameson Graef Rollins [Tue, 17 Feb 2009 07:02:23 +0000 (02:02 -0500)]
set ultimate ownertrust on hostkey after import
Daniel Kahn Gillmor [Tue, 17 Feb 2009 05:56:34 +0000 (00:56 -0500)]
update m-a list-identity-certifiers: output is not yet human-readable, but it should be more accurate.
Jameson Graef Rollins [Tue, 17 Feb 2009 05:36:07 +0000 (00:36 -0500)]
fix a couple of left over references to expert
Jameson Graef Rollins [Tue, 17 Feb 2009 05:26:09 +0000 (00:26 -0500)]
check host for gpg pub key file instead of fingerprint, and modify show_key to be able to show full key info to all users.
Jameson Graef Rollins [Tue, 17 Feb 2009 04:57:55 +0000 (23:57 -0500)]
make host show_key use just the pgp pub key file to get the ssh fingerprint, as it should have been doing before
Jameson Graef Rollins [Tue, 17 Feb 2009 04:45:28 +0000 (23:45 -0500)]
add some minimal checks to import_key that the default hostname is legitimate.
Jameson Graef Rollins [Tue, 17 Feb 2009 02:39:17 +0000 (21:39 -0500)]
fix reference to HOST_FINGERPRINT in show-key, and fix some references
to "expert" in test.
Jameson Graef Rollins [Tue, 17 Feb 2009 02:28:32 +0000 (21:28 -0500)]
REMOVE GEN_KEY. The gen_key function is entirely removed. Decided
this was OK now that import_key works, and we can't really see a
reason to keep it around. We can resurect it down the line if need
be. Also, removed "expert" subcommand, after promting import_key,
since it may be need semi-regularly. The other "expert" commands are
now just not listed in the usage.
Jameson Graef Rollins [Tue, 17 Feb 2009 01:15:58 +0000 (20:15 -0500)]
Stop all creation of a ssh_host_rsa_key.pub. Use openpgp2ssh to get
the fingerprint from the host pgp public key. Prevents us from having
to maintain the ssh pub key file, and generally makes things simpler.
Also allows us to go back to having import_key take the key on stdin
(which dkg will like).
Jameson Graef Rollins [Mon, 16 Feb 2009 06:10:02 +0000 (01:10 -0500)]
start script to do a 0.22 -> 0.23 transition. still needs work (UNTESTED).
Jameson Graef Rollins [Mon, 16 Feb 2009 06:08:28 +0000 (01:08 -0500)]
make sure MHTMPDIR is defined and created
Jameson Graef Rollins [Mon, 16 Feb 2009 06:07:04 +0000 (01:07 -0500)]
fix a bad reference to MATMPDIR
Jameson Graef Rollins [Mon, 16 Feb 2009 04:27:12 +0000 (23:27 -0500)]
unbreakout some functions that were broken out earlier for handling creating ssh key files, since they are actually done in different ways under different circumstances.
Jameson Graef Rollins [Mon, 16 Feb 2009 04:25:51 +0000 (23:25 -0500)]
Change import_key to take the path to the file to import as an argument. dkg won't like this, but I think it's necessary so that we can generate the ssh pub key file, which is needed for subsequenty works.
Jameson Graef Rollins [Mon, 16 Feb 2009 03:51:17 +0000 (22:51 -0500)]
fix the publish_key function for new gpg_sphere.
Jameson Graef Rollins [Mon, 16 Feb 2009 03:50:35 +0000 (22:50 -0500)]
have the import_key also create the ssh pub file, since it is needed to show full host key info.
Jameson Graef Rollins [Sun, 15 Feb 2009 23:16:33 +0000 (18:16 -0500)]
website: fix a small incorrect command line for apt-key import
Jameson Graef Rollins [Fri, 13 Feb 2009 00:13:19 +0000 (19:13 -0500)]
fix something that was resolved improperly in the previous merge.
Jameson Graef Rollins [Fri, 13 Feb 2009 00:11:50 +0000 (19:11 -0500)]
Merge commit 'dkg/master'
Conflicts:
src/share/ma/setup
Jameson Graef Rollins [Fri, 13 Feb 2009 00:10:12 +0000 (19:10 -0500)]
fix some calls to gpg_sphere that where not putting all arguments into a single argument, as required by the strange su requirements.
Daniel Kahn Gillmor [Fri, 13 Feb 2009 00:08:21 +0000 (19:08 -0500)]
trust level != trust model
Jameson Graef Rollins [Thu, 12 Feb 2009 23:59:01 +0000 (18:59 -0500)]
fix the su_monkeysphere_user function so that it does 'bash -c' instead of 'eval', if the user already is the monkeysphere user, so that a proper subshell is invoked.
Daniel Kahn Gillmor [Thu, 12 Feb 2009 23:53:17 +0000 (18:53 -0500)]
su_monkeysphere_user now invokes a subshell even when already called by the monkeysphere user.
Jameson Graef Rollins [Thu, 12 Feb 2009 23:39:38 +0000 (18:39 -0500)]
tweak some of the log output inconsequentially
Daniel Kahn Gillmor [Thu, 12 Feb 2009 23:34:08 +0000 (18:34 -0500)]
tests/common: enable a single subshell in the test environment before cleanup on failure; makes it easier to have $PATH, etc set up
Daniel Kahn Gillmor [Thu, 12 Feb 2009 23:32:32 +0000 (18:32 -0500)]
no longer require the primary-keyring for the sphere gpg.conf now that we use a single keyring
Daniel Kahn Gillmor [Thu, 12 Feb 2009 23:30:38 +0000 (18:30 -0500)]
fix typo
Jameson Graef Rollins [Thu, 12 Feb 2009 23:24:34 +0000 (18:24 -0500)]
add list-certifiers to the basic test
Jameson Graef Rollins [Thu, 12 Feb 2009 23:23:05 +0000 (18:23 -0500)]
fix some things in ma certifier functions:
- fix left over bad invocations of gpg_sphere --list-keys
- add some more debug log output
Jameson Graef Rollins [Thu, 12 Feb 2009 23:19:35 +0000 (18:19 -0500)]
Fix the ma/setup function:
- fix reference to MONKEYSPHERE_USER for GNUPGHOME_SPHERE
- break out core_fingerprint function
- export core key to sphere keyring (necessary)
- fix some logging (add more debug) and formatting
Jameson Graef Rollins [Thu, 12 Feb 2009 21:17:00 +0000 (16:17 -0500)]
fix reference to MONKEYSPHER_USER in ma/setup
Daniel Kahn Gillmor [Thu, 12 Feb 2009 20:19:16 +0000 (15:19 -0500)]
tests/basic: respect $TMPDIR variable for temporary directories set up during testing.
Jameson Graef Rollins [Thu, 12 Feb 2009 18:36:39 +0000 (13:36 -0500)]
some clean up to tests/basic
Jameson Graef Rollins [Thu, 12 Feb 2009 18:33:17 +0000 (13:33 -0500)]
add some debug logging to some common functions
Jameson Graef Rollins [Thu, 12 Feb 2009 18:30:57 +0000 (13:30 -0500)]
add ability to supress confirmation prompt in ma/add_certifier
fix some logging output
Jameson Graef Rollins [Thu, 12 Feb 2009 18:29:30 +0000 (13:29 -0500)]
clean up how trust level was check in ma/setup, with some debug output
Jameson Graef Rollins [Thu, 12 Feb 2009 18:25:35 +0000 (13:25 -0500)]
break out a bunch of common functions in monkeysphere-host:
- create_*_*_file to create the key files
- load_*fingerprint to load the host fingerprint into an exported
variable (HOST_FINGERPRINT)
- check_host_*key to check for the presence of a host key
modified {import,gen}_key to use these new functions.
Jameson Graef Rollins [Mon, 9 Feb 2009 06:52:00 +0000 (01:52 -0500)]
add much of an add_revoker function. still needs to be fleshed out
and tested, though, so it's not "active" yet.
Jameson Graef Rollins [Mon, 9 Feb 2009 06:51:02 +0000 (01:51 -0500)]
small formatting tweaks to add_certifier function