Daniel Kahn Gillmor [Mon, 18 Jan 2010 22:11:00 +0000 (17:11 -0500)]
renaming host_keys.pub.gpg to host_keys.pub.pgp
Daniel Kahn Gillmor [Mon, 18 Jan 2010 22:07:11 +0000 (17:07 -0500)]
got rid of monkeysphere-host fprs file
Jameson Rollins [Mon, 18 Jan 2010 18:12:00 +0000 (13:12 -0500)]
remove reference to HOST_KEY_FPR_FILE
except in update_gpg_pub_file, which dkg is going to modify to just
hold the host keys and not any other keys (like revoker keys). this
file alone can then be used to get host key info for non-priviledged
users.
Jameson Rollins [Mon, 18 Jan 2010 17:05:37 +0000 (12:05 -0500)]
Merge remote branch 'dkg/master'
Daniel Kahn Gillmor [Mon, 18 Jan 2010 16:54:33 +0000 (11:54 -0500)]
simplified test to cope with possibility of re-ordered keytrans listfprs output
Jameson Rollins [Mon, 18 Jan 2010 16:50:08 +0000 (11:50 -0500)]
suppress superfulous error output
Jameson Rollins [Mon, 18 Jan 2010 16:43:06 +0000 (11:43 -0500)]
add check that service name isn't already in use in import_key
Jameson Rollins [Mon, 18 Jan 2010 16:42:30 +0000 (11:42 -0500)]
fix show_key function to handle user ID input (needed for import_key)
Jameson Rollins [Mon, 18 Jan 2010 15:53:27 +0000 (10:53 -0500)]
fix keytrans test to handle possible permuted output of keytrans listfprs from expected order
Daniel Kahn Gillmor [Mon, 18 Jan 2010 06:46:53 +0000 (01:46 -0500)]
wordsmithing debian/control
Daniel Kahn Gillmor [Mon, 18 Jan 2010 06:42:52 +0000 (01:42 -0500)]
more tweaks to man pages
Daniel Kahn Gillmor [Mon, 18 Jan 2010 06:38:36 +0000 (01:38 -0500)]
Merge remote branch 'jrollins/master'
Daniel Kahn Gillmor [Mon, 18 Jan 2010 06:33:11 +0000 (01:33 -0500)]
fix stupid think-o that caused keytrans adduserid to misbehave if another key came in the input stream after the desired key was already found
Daniel Kahn Gillmor [Mon, 18 Jan 2010 06:32:08 +0000 (01:32 -0500)]
add check for multiple secret keys and new listfprs subcommand to tests/keytrans
Daniel Kahn Gillmor [Mon, 18 Jan 2010 06:06:50 +0000 (01:06 -0500)]
added non-public "keytrans listfprs" subcommand
Jameson Rollins [Mon, 18 Jan 2010 04:01:35 +0000 (23:01 -0500)]
Merge remote branch 'dkg/master'
Jameson Rollins [Mon, 18 Jan 2010 04:01:29 +0000 (23:01 -0500)]
separate upstream and debian packaging changelogs
Daniel Kahn Gillmor [Mon, 18 Jan 2010 03:23:25 +0000 (22:23 -0500)]
removed unnecessary tmpfile and repetitive keyid extraction from tests/basic
Jameson Rollins [Sat, 16 Jan 2010 18:55:46 +0000 (13:55 -0500)]
update package description
Jameson Rollins [Sat, 16 Jan 2010 18:49:29 +0000 (13:49 -0500)]
some improvements to man pages
Jameson Rollins [Sat, 16 Jan 2010 18:34:51 +0000 (13:34 -0500)]
small tweaks to failure messages
Jameson Rollins [Sat, 16 Jan 2010 18:23:22 +0000 (13:23 -0500)]
tweaks to the monkeysphere-host man page
Jameson Rollins [Sat, 16 Jan 2010 16:57:06 +0000 (11:57 -0500)]
update changelog
Jameson Rollins [Sat, 16 Jan 2010 16:49:18 +0000 (11:49 -0500)]
fix revocation test
was revoking the wrong key for the ssh test. test fully passing now!
Jameson Rollins [Sat, 16 Jan 2010 01:17:15 +0000 (20:17 -0500)]
Try to fix monkeysphere-host and tests/basic for revoke-key test
Unfortunately there's still a problem that I can't quite figure out.
gpg is for some reason failing to import that revocation certificate.
Could it be because gpg can't accept ascii armored certificates as
input? I'm at a loss.
Jameson Rollins [Sat, 16 Jan 2010 00:42:42 +0000 (19:42 -0500)]
Merge remote branch 'dkg/master'
Conflicts:
tests/basic
Jameson Rollins [Sat, 16 Jan 2010 00:37:45 +0000 (19:37 -0500)]
tweaks to tests/basic for new monkeysphere-host ui
Jameson Rollins [Sat, 16 Jan 2010 00:19:15 +0000 (19:19 -0500)]
Major rework of monkeysphere-host to handle multiple host keys.
This rework removes any assumption that monkeysphere-host is just
managing a single host key, or that the keys are used specifically for
ssh. The UI is exactly backwards compatible except that hostnames
('example.com') must be replaced by full service names
('ssh://example.com'). This incarnation passes the old tests with
those changes only.
There are a couple of things that still need to be done:
- need to see if a transition script is needed (some local file names
have changed)
- need to fill in check_service_name function to verify that a
specified service name fits the expected format.
- update diagnostics appropriately
Jameson Rollins [Fri, 15 Jan 2010 23:34:01 +0000 (18:34 -0500)]
add trap to remove temp dir in list_primary_fingerprints function
Daniel Kahn Gillmor [Fri, 15 Jan 2010 19:12:41 +0000 (14:12 -0500)]
adding website page about expanding the monkeysphere
Daniel Kahn Gillmor [Fri, 15 Jan 2010 05:58:22 +0000 (00:58 -0500)]
updating getting-started docs to use the 0.28 monkeysphere-host syntax (specifying full service user ID including scheme)
Daniel Kahn Gillmor [Fri, 15 Jan 2010 05:47:19 +0000 (00:47 -0500)]
overhaul monkeysphere-host(8) to match new multi-key capable interface
Daniel Kahn Gillmor [Fri, 15 Jan 2010 04:13:35 +0000 (23:13 -0500)]
added missing openssl.cnf for test suite.
Daniel Kahn Gillmor [Fri, 15 Jan 2010 04:11:53 +0000 (23:11 -0500)]
update monkeysphere-authentication(8) to acknowledge use of monkeysphere beyond OpenSSH
Daniel Kahn Gillmor [Fri, 15 Jan 2010 04:10:58 +0000 (23:10 -0500)]
update monkeysphere(1) to acknowledge use beyond OpenSSH
Daniel Kahn Gillmor [Fri, 15 Jan 2010 03:27:21 +0000 (22:27 -0500)]
added simple basic test for second key for monkeysphere-host, pulled this time from OpenSSL
Daniel Kahn Gillmor [Fri, 15 Jan 2010 03:23:05 +0000 (22:23 -0500)]
changed test suite variable from HOSTKEY to SSHHOSTKEY; updated path to exported host keys (from ssh_host_rsa_key.pub.gpg to host_keys.gpg.pub)
Daniel Kahn Gillmor [Fri, 15 Jan 2010 02:33:55 +0000 (21:33 -0500)]
updating test suite to new preferred "monkeysphere-host {add,revoke}-servicename" subcommand
Daniel Kahn Gillmor [Fri, 15 Jan 2010 02:20:35 +0000 (21:20 -0500)]
updated test suite to use scheme://hostname instead of raw hostname, in preparation for multi-key monkeysphere-host
Daniel Kahn Gillmor [Fri, 15 Jan 2010 02:18:56 +0000 (21:18 -0500)]
added test of "monkeysphere keys-for-userid"
Daniel Kahn Gillmor [Fri, 15 Jan 2010 02:18:27 +0000 (21:18 -0500)]
updated Makefile copyright info to use © symbol since (c) is apparently legally meaningless
Daniel Kahn Gillmor [Tue, 12 Jan 2010 18:05:30 +0000 (13:05 -0500)]
recorded recent george.riseup.net upgrade
Daniel Kahn Gillmor [Tue, 12 Jan 2010 05:41:13 +0000 (00:41 -0500)]
touching up the switch to keys-for-userid
Jameson Rollins [Tue, 12 Jan 2010 04:17:38 +0000 (23:17 -0500)]
rename keys-from-userid command to more accurate keys-for-userid
leave the old command for now, but warn as deprecated.
Daniel Kahn Gillmor [Tue, 12 Jan 2010 01:57:17 +0000 (20:57 -0500)]
added releasenote for 0.27
Daniel Kahn Gillmor [Tue, 12 Jan 2010 01:54:52 +0000 (20:54 -0500)]
preparing to release 0.27-1
Daniel Kahn Gillmor [Mon, 11 Jan 2010 16:24:16 +0000 (11:24 -0500)]
normalize output for monkeysphere when no subcommand is issued or when an unknown subcommand is issued
Jameson Rollins [Mon, 11 Jan 2010 16:10:30 +0000 (11:10 -0500)]
fix invocation without subcommands to call usage function and exit 1 explicitlly
Jameson Rollins [Mon, 11 Jan 2010 15:47:09 +0000 (10:47 -0500)]
add standard --version option for version output
Jameson Rollins [Mon, 11 Jan 2010 05:01:22 +0000 (00:01 -0500)]
add note to changelog about closure of issue #1536
Jameson Rollins [Mon, 11 Jan 2010 04:27:58 +0000 (23:27 -0500)]
update my user ID
Jameson Rollins [Mon, 11 Jan 2010 00:49:12 +0000 (19:49 -0500)]
Merge remote branch 'mjgoins/master'
Matthew James Goins [Mon, 11 Jan 2010 00:03:50 +0000 (19:03 -0500)]
Merge branch 'master' of git://labs.riseup.net/~micah/monkeysphere
Jameson Rollins [Sun, 10 Jan 2010 23:48:59 +0000 (18:48 -0500)]
Fix patch for gen_key to test gpg version.
This patch checks the version of gpg (for v1 and v2) and sets the key
type command for the gen_subkey gpg edit-key script appropriately.
Daniel Kahn Gillmor [Sun, 10 Jan 2010 22:19:48 +0000 (17:19 -0500)]
added notes about what version needs what keyType
Jameson Rollins [Sun, 10 Jan 2010 22:09:10 +0000 (17:09 -0500)]
Add new keys-from-userid subcommand to monkeysphere UI.
This new subcommand calls a new function, keys_from_userid, that
outputs to stdout all acceptable keys for a given user ID literal.
Jameson Rollins [Sun, 10 Jan 2010 22:06:39 +0000 (17:06 -0500)]
Clean up REQUIRED_KEY_CAPABILITY option passing to process_user_id.
Get rid of 'MODE' stuff, since it was not very clear and wasn't really
being used.
Daniel Kahn Gillmor [Sat, 9 Jan 2010 20:05:28 +0000 (15:05 -0500)]
fix pem2openpgp(1) synopsis.
Micah Anderson [Fri, 1 Jan 2010 00:38:06 +0000 (19:38 -0500)]
Its more useful and standard to actually output the 'help' output when
an improper number of arguments is passed, rather output a line
telling the user how to get the help output.
Daniel Kahn Gillmor [Sat, 26 Dec 2009 17:09:15 +0000 (12:09 -0500)]
indicate that no changes were needed for the policy bump (and version the unreleased changelog entry as a prerelease).
Jameson Graef Rollins [Thu, 24 Dec 2009 17:29:51 +0000 (12:29 -0500)]
add cpio to Build-Depends
Jameson Graef Rollins [Sun, 20 Dec 2009 16:52:09 +0000 (11:52 -0500)]
fix ms Issue #1536 for gpg edit/addkey UI change
gnupg apparently changed their edit-key/addkey function ordering such
that the monkeysphere gen-subkey subcommand was creating DSA
authentication subkeys instead of RSA subkeys. DSA subkeys are not
supported by the ms key translation utilities, so this is a big
problem. This patch fixes the problem, but it means that we have
require gnupg >=1.4.10 from now on, or at least until gnupg changes
their UI again for no good reason.
Jameson Graef Rollins [Sun, 20 Dec 2009 01:57:01 +0000 (20:57 -0500)]
update standards version to 3.8.3
Daniel Kahn Gillmor [Sat, 12 Dec 2009 20:12:49 +0000 (15:12 -0500)]
hush up m-a setup because the dd was making noise
Daniel Kahn Gillmor [Fri, 4 Dec 2009 00:44:21 +0000 (19:44 -0500)]
removed superfluous Copyright
Daniel Kahn Gillmor [Thu, 3 Dec 2009 22:52:54 +0000 (17:52 -0500)]
added revision information to the debian/copyright Format-Specification, since DEP5 is not yet stable
Daniel Kahn Gillmor [Sat, 28 Nov 2009 23:22:32 +0000 (18:22 -0500)]
updated debian/copyright to match the latest version of DEP5
Daniel Kahn Gillmor [Fri, 30 Oct 2009 15:36:56 +0000 (11:36 -0400)]
added link to mina (apache sshd)
Daniel Kahn Gillmor [Mon, 26 Oct 2009 19:52:17 +0000 (15:52 -0400)]
more updates on george.
Daniel Kahn Gillmor [Thu, 24 Sep 2009 17:53:17 +0000 (13:53 -0400)]
avoid noisy warning message when ssh-askpass not available
Daniel Kahn Gillmor [Tue, 15 Sep 2009 03:07:38 +0000 (23:07 -0400)]
notes about george upgrades
Jameson Graef Rollins [Tue, 11 Aug 2009 20:16:48 +0000 (22:16 +0200)]
note upgrade and extend key on george
Jameson Graef Rollins [Tue, 11 Aug 2009 18:50:37 +0000 (20:50 +0200)]
update macports Portfile
Daniel Kahn Gillmor [Fri, 7 Aug 2009 20:36:08 +0000 (16:36 -0400)]
updated note about ubuntu versions
Daniel Kahn Gillmor [Fri, 7 Aug 2009 20:19:53 +0000 (16:19 -0400)]
updated freebsd port for 0.26
Daniel Kahn Gillmor [Sun, 2 Aug 2009 17:40:55 +0000 (13:40 -0400)]
added more notes about what it takes to prepare a release.
Daniel Kahn Gillmor [Sat, 1 Aug 2009 21:34:30 +0000 (17:34 -0400)]
updating my notes on release preparation.
Daniel Kahn Gillmor [Sat, 1 Aug 2009 21:27:59 +0000 (17:27 -0400)]
prepared release notes for 0.26
Jameson Graef Rollins [Sat, 1 Aug 2009 21:23:34 +0000 (17:23 -0400)]
update changelog for 0.26
Daniel Kahn Gillmor [Sat, 1 Aug 2009 21:07:29 +0000 (17:07 -0400)]
cleaning up log function in checkperms for future expandability.
Daniel Kahn Gillmor [Sat, 1 Aug 2009 20:36:19 +0000 (16:36 -0400)]
swap order of bitwise and to avoid confusion in perl < 5.10
Daniel Kahn Gillmor [Sat, 1 Aug 2009 18:07:27 +0000 (14:07 -0400)]
removing duplicate check that snuck in somehow
Daniel Kahn Gillmor [Sat, 1 Aug 2009 17:40:11 +0000 (13:40 -0400)]
attempting to resolve MS #675
Daniel Kahn Gillmor [Sat, 1 Aug 2009 17:32:08 +0000 (13:32 -0400)]
switch to using new checkperms script.
Daniel Kahn Gillmor [Sat, 1 Aug 2009 17:04:26 +0000 (13:04 -0400)]
whitespace fixing and using environment variables exported from monkeysphere for checkperms.
Jameson Graef Rollins [Sat, 1 Aug 2009 17:02:52 +0000 (13:02 -0400)]
export LOG_PREFIX in monkeysphere
Daniel Kahn Gillmor [Sat, 1 Aug 2009 16:50:14 +0000 (12:50 -0400)]
added new perl script to check permissions.
Jameson Graef Rollins [Fri, 31 Jul 2009 14:27:52 +0000 (10:27 -0400)]
small typo fix in lca2010 abstract
Daniel Kahn Gillmor [Fri, 31 Jul 2009 04:46:25 +0000 (00:46 -0400)]
moved project history and names from bio to abstract
Daniel Kahn Gillmor [Fri, 31 Jul 2009 04:39:33 +0000 (00:39 -0400)]
added bio and experience to LCA2010 application
Daniel Kahn Gillmor [Fri, 31 Jul 2009 03:09:46 +0000 (23:09 -0400)]
initial draft of LCA2010 entry; hoping for feedback on a tight deadline
Daniel Kahn Gillmor [Mon, 27 Jul 2009 02:18:38 +0000 (22:18 -0400)]
ensuring that STRICT_MODES gets passed through to the monkeysphere subshell properly, and that we set it to a literal "false" in the tests. This should resolve the FTBFS associated with MS #659
Daniel Kahn Gillmor [Mon, 27 Jul 2009 01:33:26 +0000 (21:33 -0400)]
added MONKEYSPHERE_STRICT_MODES environment option to disable permissions checking.
Daniel Kahn Gillmor [Mon, 27 Jul 2009 00:30:19 +0000 (20:30 -0400)]
make expectedout file during keytrans test in test directory, not in the cwd
Daniel Kahn Gillmor [Mon, 27 Jul 2009 00:27:13 +0000 (20:27 -0400)]
do not make symlinks in the cwd during the test
Daniel Kahn Gillmor [Sun, 26 Jul 2009 23:20:39 +0000 (19:20 -0400)]
skip tests that will not behave properly when run under a loose working directory.
Daniel Kahn Gillmor [Sun, 26 Jul 2009 22:59:09 +0000 (18:59 -0400)]
make sure test sets proper permissions on the admin GNUPGHOME
Daniel Kahn Gillmor [Fri, 24 Jul 2009 21:16:42 +0000 (17:16 -0400)]
started preparing tests to work under loosely-permissioned temporary directories.
Jameson Graef Rollins [Fri, 24 Jul 2009 20:12:37 +0000 (16:12 -0400)]
small bug fix, and readbility improvements
Jameson Graef Rollins [Fri, 24 Jul 2009 20:11:39 +0000 (16:11 -0400)]
Revert "proposed fix for #1147 by checking for known_hosts file"
This reverts commit
189781e00c89227612942ff7dc30eaa756cb78ae.
This is reverted because we're going with dkg's better solution.