monkeysphere.git
14 years agofixing an error message in monkeysphere-host
Daniel Kahn Gillmor [Sun, 14 Mar 2010 14:21:31 +0000 (10:21 -0400)]
fixing an error message in monkeysphere-host

14 years agocleaning up monkeysphere-host show-key output
Daniel Kahn Gillmor [Sun, 14 Mar 2010 14:07:46 +0000 (10:07 -0400)]
cleaning up monkeysphere-host show-key output

14 years agowarn if keyserver query fails (Closes: MS #1750)
Daniel Kahn Gillmor [Sun, 14 Mar 2010 13:50:57 +0000 (09:50 -0400)]
warn if keyserver query fails (Closes: MS #1750)

14 years agoenable use of hkps (closes: MS #1749)
Daniel Kahn Gillmor [Sun, 14 Mar 2010 07:06:32 +0000 (03:06 -0400)]
enable use of hkps (closes: MS #1749)

14 years agokeys-for-userid now respects MONKEYSPHERE_CHECK_KEYSERVER (Closes: MS #1997); finesse...
Daniel Kahn Gillmor [Sun, 14 Mar 2010 05:36:57 +0000 (00:36 -0500)]
keys-for-userid now respects MONKEYSPHERE_CHECK_KEYSERVER (Closes: MS #1997); finesse description of CHECK_KEYSERVER in monkeysphere.conf (see: MS #2014)

14 years agoclarifying defaults for CHECK_KEYSERVER in monkeysphere.conf
Daniel Kahn Gillmor [Sun, 14 Mar 2010 04:49:53 +0000 (23:49 -0500)]
clarifying defaults for CHECK_KEYSERVER in monkeysphere.conf

14 years agofurther consolidating Xsession script
Daniel Kahn Gillmor [Fri, 12 Mar 2010 22:06:39 +0000 (17:06 -0500)]
further consolidating Xsession script

14 years agofixing comment in Xsession script
Daniel Kahn Gillmor [Fri, 12 Mar 2010 22:02:16 +0000 (17:02 -0500)]
fixing comment in Xsession script

14 years agoadd note about dbus communication for msva
Daniel Kahn Gillmor [Fri, 12 Mar 2010 22:01:28 +0000 (17:01 -0500)]
add note about dbus communication for msva

14 years agomade Xsession script POSIX-compliant, simplified it
Daniel Kahn Gillmor [Fri, 12 Mar 2010 21:53:37 +0000 (16:53 -0500)]
made Xsession script POSIX-compliant, simplified it

14 years agorenaming Xsession config file to match existing pattern (underscore only separates...
Daniel Kahn Gillmor [Fri, 12 Mar 2010 21:47:58 +0000 (16:47 -0500)]
renaming Xsession config file to match existing pattern (underscore only separates package from description)

14 years agoinstalling /etc/X11/Xsession.d/70monkeysphere_use_validation_agent
Daniel Kahn Gillmor [Fri, 12 Mar 2010 07:34:06 +0000 (02:34 -0500)]
installing /etc/X11/Xsession.d/70monkeysphere_use_validation_agent

14 years agodocumenting USE_VALIDATION_AGENT in configuration
Daniel Kahn Gillmor [Fri, 12 Mar 2010 07:30:03 +0000 (02:30 -0500)]
documenting USE_VALIDATION_AGENT in configuration

14 years agoinitialize msva in Xsession based on monkeysphere.conf instead of /etc/X11/Xsession.d
Daniel Kahn Gillmor [Fri, 12 Mar 2010 07:25:07 +0000 (02:25 -0500)]
initialize msva in Xsession based on monkeysphere.conf instead of /etc/X11/Xsession.d

14 years agoadded new X session validation agent initialization script
Daniel Kahn Gillmor [Fri, 12 Mar 2010 06:59:06 +0000 (01:59 -0500)]
added new X session validation agent initialization script

14 years agoretroactively added notes to changelog for zimmermann
Daniel Kahn Gillmor [Wed, 10 Mar 2010 05:29:43 +0000 (00:29 -0500)]
retroactively added notes to changelog for zimmermann

14 years agoupdate zimmermann changelog about minor MS config change to the keyserver
Micah Anderson [Wed, 10 Mar 2010 05:17:35 +0000 (00:17 -0500)]
update zimmermann changelog about minor MS config change to the keyserver

14 years agoupdate george changelog with my changes
Micah Anderson [Tue, 9 Mar 2010 16:30:20 +0000 (11:30 -0500)]
update george changelog with my changes

14 years agowebsite: link the MSVA protocol back to the overview of the agent
Daniel Kahn Gillmor [Tue, 9 Mar 2010 06:22:15 +0000 (01:22 -0500)]
website: link the MSVA protocol back to the overview of the agent

14 years agoadded website stubs about validation agent
Daniel Kahn Gillmor [Tue, 9 Mar 2010 06:04:56 +0000 (01:04 -0500)]
added website stubs about validation agent

14 years agofixed monkeysphere.7 synopsis to be less ssh-specific
Daniel Kahn Gillmor [Tue, 9 Mar 2010 05:47:48 +0000 (00:47 -0500)]
fixed monkeysphere.7 synopsis to be less ssh-specific

14 years agoMerge remote branch 'mjgoins/master'
Jameson Rollins [Tue, 9 Mar 2010 04:38:12 +0000 (23:38 -0500)]
Merge remote branch 'mjgoins/master'

14 years agofix my email address
Jameson Rollins [Tue, 9 Mar 2010 04:36:45 +0000 (23:36 -0500)]
fix my email address

14 years agoUpdated george changelog
Matthew James Goins [Tue, 9 Mar 2010 03:07:02 +0000 (22:07 -0500)]
Updated george changelog

14 years agoChanged every inline beginning with [[ to an inline beginning with [[!
Matthew James Goins [Mon, 8 Mar 2010 04:59:26 +0000 (23:59 -0500)]
Changed every inline beginning with [[ to an inline beginning with [[!

14 years agofix hyphen-used-as-minus-sign man page lint
Jameson Rollins [Mon, 1 Mar 2010 20:20:07 +0000 (15:20 -0500)]
fix hyphen-used-as-minus-sign man page lint

14 years agomore notes on george upgrades: switch to lenny-backports
Daniel Kahn Gillmor [Tue, 23 Feb 2010 20:34:35 +0000 (15:34 -0500)]
more notes on george upgrades: switch to lenny-backports

14 years agoallow service names to start with a number (synchronizing with the check in get_port_...
Daniel Kahn Gillmor [Thu, 18 Feb 2010 23:25:29 +0000 (18:25 -0500)]
allow service names to start with a number (synchronizing with the check in get_port_for_service from common).  i know of no services named like that, but why be fussy?

14 years agoadded explicit bash dependency on version >= 3.2 for modern conditional regex matching
Daniel Kahn Gillmor [Thu, 18 Feb 2010 23:00:51 +0000 (18:00 -0500)]
added explicit bash dependency on version >= 3.2 for modern conditional regex matching

14 years agotouching up changelogs as we work toward a 0.29 release.
Daniel Kahn Gillmor [Thu, 18 Feb 2010 17:41:43 +0000 (12:41 -0500)]
touching up changelogs as we work toward a 0.29 release.

14 years agoenforce --no-armor when exporting to openpgp2ssh in case weird gpg.conf options ...
Daniel Kahn Gillmor [Thu, 18 Feb 2010 17:11:47 +0000 (12:11 -0500)]
enforce --no-armor when exporting to openpgp2ssh in case weird gpg.conf options (see bug 1625)

14 years agoinitial seminar details -- abstract and feeble outline
Daniel Kahn Gillmor [Mon, 8 Feb 2010 19:55:29 +0000 (14:55 -0500)]
initial seminar details -- abstract and feeble outline

14 years agoMerge remote branch 'micah/master'
Daniel Kahn Gillmor [Sun, 7 Feb 2010 18:18:44 +0000 (13:18 -0500)]
Merge remote branch 'micah/master'

14 years agoremove old git documentation
Micah Anderson [Sun, 7 Feb 2010 18:14:31 +0000 (13:14 -0500)]
remove old git documentation

14 years agofix monkeysphere-authentication man page reference to AuthorizedKeysFile for sshd_config
Jameson Rollins [Thu, 4 Feb 2010 17:06:00 +0000 (12:06 -0500)]
fix monkeysphere-authentication man page reference to AuthorizedKeysFile for sshd_config

14 years agofix changelog about Standards-Version update
Jameson Rollins [Thu, 4 Feb 2010 17:00:01 +0000 (12:00 -0500)]
fix changelog about Standards-Version update

14 years agoadd some useful shortcuts for some common commands
Jameson Rollins [Tue, 2 Feb 2010 21:27:31 +0000 (16:27 -0500)]
add some useful shortcuts for some common commands

14 years agobumping debian packaging to Standards-Version 3.8.4 (no changes needed)
Daniel Kahn Gillmor [Mon, 1 Feb 2010 06:44:17 +0000 (01:44 -0500)]
bumping debian packaging to Standards-Version 3.8.4 (no changes needed)

14 years agoadded release note for 0.28 monkeysphere_0.28 monkeysphere_0.28-1
Daniel Kahn Gillmor [Tue, 19 Jan 2010 18:59:18 +0000 (13:59 -0500)]
added release note for 0.28

14 years agoupdating changelogs in preparation for 0.28 release
Daniel Kahn Gillmor [Tue, 19 Jan 2010 18:57:27 +0000 (13:57 -0500)]
updating changelogs in preparation for 0.28 release

14 years agoactually ship new upstream changelog
Daniel Kahn Gillmor [Tue, 19 Jan 2010 16:46:42 +0000 (11:46 -0500)]
actually ship new upstream changelog

14 years agosmall man page typo tweak
Jameson Rollins [Tue, 19 Jan 2010 15:10:17 +0000 (10:10 -0500)]
small man page typo tweak

14 years agoMerge remote branch 'jrollins/master'
Daniel Kahn Gillmor [Tue, 19 Jan 2010 08:12:59 +0000 (03:12 -0500)]
Merge remote branch 'jrollins/master'

14 years agore-work monkeysphere-host diagnostics with an eye toward multiple host keys
Daniel Kahn Gillmor [Tue, 19 Jan 2010 08:11:55 +0000 (03:11 -0500)]
re-work monkeysphere-host diagnostics with an eye toward multiple host keys

14 years agodump gpg --import error spew to /dev/null during hackish uses of gpg
Daniel Kahn Gillmor [Tue, 19 Jan 2010 08:03:26 +0000 (03:03 -0500)]
dump gpg --import error spew to /dev/null during hackish uses of gpg

14 years agoignoring time conflict when extracting info in a hacky way from gpg. warnings still...
Daniel Kahn Gillmor [Tue, 19 Jan 2010 07:36:20 +0000 (02:36 -0500)]
ignoring time conflict when extracting info in a hacky way from gpg.  warnings still come out to stderr

14 years agoupdating utils to deal with the newly split-out changelogs
Daniel Kahn Gillmor [Tue, 19 Jan 2010 07:01:35 +0000 (02:01 -0500)]
updating utils to deal with the newly split-out changelogs

14 years agoswitch Makefile to use upstream changelog for versioning info
Daniel Kahn Gillmor [Tue, 19 Jan 2010 06:55:46 +0000 (01:55 -0500)]
switch Makefile to use upstream changelog for versioning info

14 years agoupdating copyright year in debian postinst packaging
Daniel Kahn Gillmor [Tue, 19 Jan 2010 06:55:15 +0000 (01:55 -0500)]
updating copyright year in debian postinst packaging

14 years agoaccepting "--version" as well as "version" subcommand for monkeysphere-host and monke...
Daniel Kahn Gillmor [Tue, 19 Jan 2010 06:42:34 +0000 (01:42 -0500)]
accepting "--version" as well as "version" subcommand for monkeysphere-host and monkeysphere-authentication

14 years agoadded a few more FIXMEs to check_service_name()
Daniel Kahn Gillmor [Tue, 19 Jan 2010 06:37:14 +0000 (01:37 -0500)]
added a few more FIXMEs to check_service_name()

14 years agoadd get_cert_info() to common
Daniel Kahn Gillmor [Tue, 19 Jan 2010 06:36:32 +0000 (01:36 -0500)]
add get_cert_info() to common

14 years agoremoving superfluous eval
Daniel Kahn Gillmor [Tue, 19 Jan 2010 04:43:43 +0000 (23:43 -0500)]
removing superfluous eval

14 years agotweak loading of fingerprints in multi_key wrapper function, so unnecessary error...
Jameson Rollins [Tue, 19 Jan 2010 04:38:14 +0000 (23:38 -0500)]
tweak loading of fingerprints in multi_key wrapper function, so unnecessary error messages aren't output

14 years agono need for recursive removal of a single file
Daniel Kahn Gillmor [Tue, 19 Jan 2010 04:15:43 +0000 (23:15 -0500)]
no need for recursive removal of a single file

14 years agoflesh out check for reasonable-looking service names
Daniel Kahn Gillmor [Tue, 19 Jan 2010 04:10:42 +0000 (23:10 -0500)]
flesh out check for reasonable-looking service names

14 years agoadd 0.28 transition script to generate new host_keys.pub.pgp file, and remove all...
Jameson Rollins [Tue, 19 Jan 2010 03:59:26 +0000 (22:59 -0500)]
add 0.28 transition script to generate new host_keys.pub.pgp file, and remove all ssh_host_rsa_key.pub.gpg file

14 years agocanonicalize prompting to prompt if MONKEYSPHERE_PROMPT != 'false'
Jameson Rollins [Mon, 18 Jan 2010 23:38:27 +0000 (18:38 -0500)]
canonicalize prompting to prompt if MONKEYSPHERE_PROMPT != 'false'

14 years agoadd prompt if a service name is already being used then importing a key or adding...
Jameson Rollins [Mon, 18 Jan 2010 23:22:22 +0000 (18:22 -0500)]
add prompt if a service name is already being used then importing a key or adding a name.

This can be overridden with the MONKEYSPHERE_PROMPT var.

14 years agomonkeysphere-host: reverting from host_fingerprints() to list_primary_fingerprints()
Daniel Kahn Gillmor [Mon, 18 Jan 2010 22:46:12 +0000 (17:46 -0500)]
monkeysphere-host: reverting from host_fingerprints() to list_primary_fingerprints()

14 years agomade public use of m-h show-keys instead of show-key, fixed stupid field-numbering...
Daniel Kahn Gillmor [Mon, 18 Jan 2010 22:28:43 +0000 (17:28 -0500)]
made public use of m-h show-keys instead of show-key, fixed stupid field-numbering bug in fingerprint extraction

14 years agorenaming m-h update_gpg_pub_file to update_pgp_pub_file
Daniel Kahn Gillmor [Mon, 18 Jan 2010 22:14:04 +0000 (17:14 -0500)]
renaming m-h update_gpg_pub_file to update_pgp_pub_file

14 years agorenaming host_keys.pub.gpg to host_keys.pub.pgp
Daniel Kahn Gillmor [Mon, 18 Jan 2010 22:11:00 +0000 (17:11 -0500)]
renaming host_keys.pub.gpg to host_keys.pub.pgp

14 years agogot rid of monkeysphere-host fprs file
Daniel Kahn Gillmor [Mon, 18 Jan 2010 22:07:11 +0000 (17:07 -0500)]
got rid of monkeysphere-host fprs file

14 years agoremove reference to HOST_KEY_FPR_FILE
Jameson Rollins [Mon, 18 Jan 2010 18:12:00 +0000 (13:12 -0500)]
remove reference to HOST_KEY_FPR_FILE

except in update_gpg_pub_file, which dkg is going to modify to just
hold the host keys and not any other keys (like revoker keys).  this
file alone can then be used to get host key info for non-priviledged
users.

14 years agoMerge remote branch 'dkg/master'
Jameson Rollins [Mon, 18 Jan 2010 17:05:37 +0000 (12:05 -0500)]
Merge remote branch 'dkg/master'

14 years agosimplified test to cope with possibility of re-ordered keytrans listfprs output
Daniel Kahn Gillmor [Mon, 18 Jan 2010 16:54:33 +0000 (11:54 -0500)]
simplified test to cope with possibility of re-ordered keytrans listfprs output

14 years agosuppress superfulous error output
Jameson Rollins [Mon, 18 Jan 2010 16:50:08 +0000 (11:50 -0500)]
suppress superfulous error output

14 years agoadd check that service name isn't already in use in import_key
Jameson Rollins [Mon, 18 Jan 2010 16:43:06 +0000 (11:43 -0500)]
add check that service name isn't already in use in import_key

14 years agofix show_key function to handle user ID input (needed for import_key)
Jameson Rollins [Mon, 18 Jan 2010 16:42:30 +0000 (11:42 -0500)]
fix show_key function to handle user ID input (needed for import_key)

14 years agofix keytrans test to handle possible permuted output of keytrans listfprs from expect...
Jameson Rollins [Mon, 18 Jan 2010 15:53:27 +0000 (10:53 -0500)]
fix keytrans test to handle possible permuted output of keytrans listfprs from expected order

14 years agowordsmithing debian/control
Daniel Kahn Gillmor [Mon, 18 Jan 2010 06:46:53 +0000 (01:46 -0500)]
wordsmithing debian/control

14 years agomore tweaks to man pages
Daniel Kahn Gillmor [Mon, 18 Jan 2010 06:42:52 +0000 (01:42 -0500)]
more tweaks to man pages

14 years agoMerge remote branch 'jrollins/master'
Daniel Kahn Gillmor [Mon, 18 Jan 2010 06:38:36 +0000 (01:38 -0500)]
Merge remote branch 'jrollins/master'

14 years agofix stupid think-o that caused keytrans adduserid to misbehave if another key came...
Daniel Kahn Gillmor [Mon, 18 Jan 2010 06:33:11 +0000 (01:33 -0500)]
fix stupid think-o that caused keytrans adduserid to misbehave if another key came in the input stream after the desired key was already found

14 years agoadd check for multiple secret keys and new listfprs subcommand to tests/keytrans
Daniel Kahn Gillmor [Mon, 18 Jan 2010 06:32:08 +0000 (01:32 -0500)]
add check for multiple secret keys and new listfprs subcommand to tests/keytrans

14 years agoadded non-public "keytrans listfprs" subcommand
Daniel Kahn Gillmor [Mon, 18 Jan 2010 06:06:50 +0000 (01:06 -0500)]
added non-public "keytrans listfprs" subcommand

14 years agoMerge remote branch 'dkg/master'
Jameson Rollins [Mon, 18 Jan 2010 04:01:35 +0000 (23:01 -0500)]
Merge remote branch 'dkg/master'

14 years agoseparate upstream and debian packaging changelogs
Jameson Rollins [Mon, 18 Jan 2010 04:01:29 +0000 (23:01 -0500)]
separate upstream and debian packaging changelogs

14 years agoremoved unnecessary tmpfile and repetitive keyid extraction from tests/basic
Daniel Kahn Gillmor [Mon, 18 Jan 2010 03:23:25 +0000 (22:23 -0500)]
removed unnecessary tmpfile and repetitive keyid extraction from tests/basic

14 years agoupdate package description
Jameson Rollins [Sat, 16 Jan 2010 18:55:46 +0000 (13:55 -0500)]
update package description

14 years agosome improvements to man pages
Jameson Rollins [Sat, 16 Jan 2010 18:49:29 +0000 (13:49 -0500)]
some improvements to man pages

14 years agosmall tweaks to failure messages
Jameson Rollins [Sat, 16 Jan 2010 18:34:51 +0000 (13:34 -0500)]
small tweaks to failure messages

14 years agotweaks to the monkeysphere-host man page
Jameson Rollins [Sat, 16 Jan 2010 18:23:22 +0000 (13:23 -0500)]
tweaks to the monkeysphere-host man page

14 years agoupdate changelog
Jameson Rollins [Sat, 16 Jan 2010 16:57:06 +0000 (11:57 -0500)]
update changelog

14 years agofix revocation test
Jameson Rollins [Sat, 16 Jan 2010 16:49:18 +0000 (11:49 -0500)]
fix revocation test

was revoking the wrong key for the ssh test.  test fully passing now!

14 years agoTry to fix monkeysphere-host and tests/basic for revoke-key test
Jameson Rollins [Sat, 16 Jan 2010 01:17:15 +0000 (20:17 -0500)]
Try to fix monkeysphere-host and tests/basic for revoke-key test

Unfortunately there's still a problem that I can't quite figure out.
gpg is for some reason failing to import that revocation certificate.
Could it be because gpg can't accept ascii armored certificates as
input?  I'm at a loss.

14 years agoMerge remote branch 'dkg/master'
Jameson Rollins [Sat, 16 Jan 2010 00:42:42 +0000 (19:42 -0500)]
Merge remote branch 'dkg/master'

Conflicts:
tests/basic

14 years agotweaks to tests/basic for new monkeysphere-host ui
Jameson Rollins [Sat, 16 Jan 2010 00:37:45 +0000 (19:37 -0500)]
tweaks to tests/basic for new monkeysphere-host ui

14 years agoMajor rework of monkeysphere-host to handle multiple host keys.
Jameson Rollins [Sat, 16 Jan 2010 00:19:15 +0000 (19:19 -0500)]
Major rework of monkeysphere-host to handle multiple host keys.

This rework removes any assumption that monkeysphere-host is just
managing a single host key, or that the keys are used specifically for
ssh.  The UI is exactly backwards compatible except that hostnames
('example.com') must be replaced by full service names
('ssh://example.com').  This incarnation passes the old tests with
those changes only.

There are a couple of things that still need to be done:

- need to see if a transition script is needed (some local file names
  have changed)

- need to fill in check_service_name function to verify that a
  specified service name fits the expected format.

- update diagnostics appropriately

14 years agoadd trap to remove temp dir in list_primary_fingerprints function
Jameson Rollins [Fri, 15 Jan 2010 23:34:01 +0000 (18:34 -0500)]
add trap to remove temp dir in list_primary_fingerprints function

14 years agoadding website page about expanding the monkeysphere
Daniel Kahn Gillmor [Fri, 15 Jan 2010 19:12:41 +0000 (14:12 -0500)]
adding website page about expanding the monkeysphere

14 years agoupdating getting-started docs to use the 0.28 monkeysphere-host syntax (specifying...
Daniel Kahn Gillmor [Fri, 15 Jan 2010 05:58:22 +0000 (00:58 -0500)]
updating getting-started docs to use the 0.28 monkeysphere-host syntax (specifying full service user ID including scheme)

14 years agooverhaul monkeysphere-host(8) to match new multi-key capable interface
Daniel Kahn Gillmor [Fri, 15 Jan 2010 05:47:19 +0000 (00:47 -0500)]
overhaul monkeysphere-host(8) to match new multi-key capable interface

14 years agoadded missing openssl.cnf for test suite.
Daniel Kahn Gillmor [Fri, 15 Jan 2010 04:13:35 +0000 (23:13 -0500)]
added missing openssl.cnf for test suite.

14 years agoupdate monkeysphere-authentication(8) to acknowledge use of monkeysphere beyond OpenSSH
Daniel Kahn Gillmor [Fri, 15 Jan 2010 04:11:53 +0000 (23:11 -0500)]
update monkeysphere-authentication(8) to acknowledge use of monkeysphere beyond OpenSSH

14 years agoupdate monkeysphere(1) to acknowledge use beyond OpenSSH
Daniel Kahn Gillmor [Fri, 15 Jan 2010 04:10:58 +0000 (23:10 -0500)]
update monkeysphere(1) to acknowledge use beyond OpenSSH

14 years agoadded simple basic test for second key for monkeysphere-host, pulled this time from...
Daniel Kahn Gillmor [Fri, 15 Jan 2010 03:27:21 +0000 (22:27 -0500)]
added simple basic test for second key for monkeysphere-host, pulled this time from OpenSSL

14 years agochanged test suite variable from HOSTKEY to SSHHOSTKEY; updated path to exported...
Daniel Kahn Gillmor [Fri, 15 Jan 2010 03:23:05 +0000 (22:23 -0500)]
changed test suite variable from HOSTKEY to SSHHOSTKEY; updated path to exported host keys (from ssh_host_rsa_key.pub.gpg to host_keys.gpg.pub)

14 years agoupdating test suite to new preferred "monkeysphere-host {add,revoke}-servicename...
Daniel Kahn Gillmor [Fri, 15 Jan 2010 02:33:55 +0000 (21:33 -0500)]
updating test suite to new preferred "monkeysphere-host {add,revoke}-servicename" subcommand