Jameson Rollins [Fri, 24 Dec 2010 22:33:17 +0000 (17:33 -0500)]
simplify reviewcert by breaking out pkc key extraction code into it's own function
As a consequence of this change, a large chunk of reviewcert was able
to be popped out of a conditional, so this change looks bigger than it
is functionally.
Jameson Rollins [Fri, 24 Dec 2010 22:05:10 +0000 (17:05 -0500)]
tweak test-msva to accept full path to msva script
Jameson Rollins [Wed, 22 Dec 2010 21:09:56 +0000 (16:09 -0500)]
add --help usage to msva-query-agent
Daniel Kahn Gillmor [Mon, 20 Dec 2010 21:11:39 +0000 (16:11 -0500)]
avoid some spurious error messages when no agent is found
Daniel Kahn Gillmor [Mon, 20 Dec 2010 17:34:03 +0000 (12:34 -0500)]
automatically update the internal versioning of MSVA.pm from the
Changelog.
This is a little crufty (it might trip up people the first time they
bump versions directly from within a git repo, and cause a spurious
commit or two), but it has a few advantages:
0) it is a simple, small change to make right now, and
1) it means we can leave all the files in place, so the test harness
can work in-place.
2) our "upstream tarball" can continue to be cleanly built.
Probably the better long-term way to fix this is an "install" target
in the Makefile that does this substitution as it transfers the file
into place. That target would need to know where to place perl
modules, among other things. (see MS # 2684)
Daniel Kahn Gillmor [Mon, 20 Dec 2010 17:10:20 +0000 (12:10 -0500)]
bump internal version number.
Daniel Kahn Gillmor [Mon, 20 Dec 2010 09:13:30 +0000 (04:13 -0500)]
accept trailing slashes on http-proxy
Daniel Kahn Gillmor [Mon, 20 Dec 2010 09:07:27 +0000 (04:07 -0500)]
gpgkeys_hkpms: added support for --keyserver-options http-proxy=XXX and https_proxy environment variables
Daniel Kahn Gillmor [Mon, 20 Dec 2010 07:38:17 +0000 (02:38 -0500)]
touch up upstream Changelog for proposed release
Daniel Kahn Gillmor [Mon, 20 Dec 2010 07:36:42 +0000 (02:36 -0500)]
List certifiers only once (closes MS # 2573)
Daniel Kahn Gillmor [Mon, 20 Dec 2010 06:56:30 +0000 (01:56 -0500)]
Do not report self-sigs as other certifiers (but report valid, non-matching identities independently) (closes MS # 2569)
Daniel Kahn Gillmor [Mon, 20 Dec 2010 05:37:26 +0000 (00:37 -0500)]
avoid passing undefined data to decode_base64()
Daniel Kahn Gillmor [Sun, 19 Dec 2010 02:22:00 +0000 (21:22 -0500)]
allow the use of ports in hostnames
Daniel Kahn Gillmor [Sat, 18 Dec 2010 23:41:55 +0000 (18:41 -0500)]
update upstream Changelog
Daniel Kahn Gillmor [Sat, 18 Dec 2010 23:40:41 +0000 (18:40 -0500)]
import hkpms settings from gpg.conf also
Daniel Kahn Gillmor [Sat, 18 Dec 2010 23:26:14 +0000 (18:26 -0500)]
do not use indirect object creation (see p.158 of "Modern Perl")
Daniel Kahn Gillmor [Fri, 17 Dec 2010 18:04:44 +0000 (13:04 -0500)]
fixed broken error message
Jameson Rollins [Thu, 16 Dec 2010 20:56:19 +0000 (15:56 -0500)]
prep upstream changelog for 0.7 release
Daniel Kahn Gillmor [Thu, 16 Dec 2010 20:51:29 +0000 (15:51 -0500)]
adjust gpgkey_hkpms using the standard gpg verbosity/debug settings
Daniel Kahn Gillmor [Thu, 16 Dec 2010 20:36:12 +0000 (15:36 -0500)]
make the logger a little bit more functional
Daniel Kahn Gillmor [Thu, 16 Dec 2010 20:32:25 +0000 (15:32 -0500)]
support hkpms queries from the agent
Daniel Kahn Gillmor [Thu, 16 Dec 2010 16:09:48 +0000 (11:09 -0500)]
adopt new 1.37 changes to IO::Socket::SSL
Daniel Kahn Gillmor [Wed, 8 Dec 2010 02:37:24 +0000 (21:37 -0500)]
supply gpgkeys_hkpms (closes MS #2016)
Daniel Kahn Gillmor [Mon, 6 Dec 2010 06:30:06 +0000 (01:30 -0500)]
expose version of MSVA.pm publicly
Daniel Kahn Gillmor [Mon, 6 Dec 2010 05:36:42 +0000 (00:36 -0500)]
enable requesting keyserverpolicy in Crypt::Monkeysphere::MSVA::Client
Daniel Kahn Gillmor [Sun, 14 Nov 2010 23:51:41 +0000 (18:51 -0500)]
started new Changelog entry
Daniel Kahn Gillmor [Sun, 14 Nov 2010 23:50:50 +0000 (18:50 -0500)]
normalize word spacing in documentation for msva-query-agent
Daniel Kahn Gillmor [Sun, 14 Nov 2010 23:49:50 +0000 (18:49 -0500)]
do not bother tracking generated manpages
Daniel Kahn Gillmor [Sun, 14 Nov 2010 08:26:54 +0000 (03:26 -0500)]
fix typo in pod documentation for msva-query-agent
Daniel Kahn Gillmor [Sun, 14 Nov 2010 08:17:22 +0000 (03:17 -0500)]
prepare for 0.6 release
Daniel Kahn Gillmor [Sun, 14 Nov 2010 08:07:44 +0000 (03:07 -0500)]
implement tests (and looser constraints on) peer names for peers who are clients
Daniel Kahn Gillmor [Sat, 13 Nov 2010 21:46:38 +0000 (16:46 -0500)]
added peertype (addresses #2568) -- still need tests
Daniel Kahn Gillmor [Fri, 5 Nov 2010 18:58:58 +0000 (14:58 -0400)]
added jrollins to copyright
Daniel Kahn Gillmor [Thu, 4 Nov 2010 06:21:14 +0000 (02:21 -0400)]
Merge remote branch 'jrollins/master'
Daniel Kahn Gillmor [Mon, 1 Nov 2010 00:19:24 +0000 (20:19 -0400)]
update docs to match behavior change
Jameson Rollins [Sat, 30 Oct 2010 20:42:28 +0000 (16:42 -0400)]
fix context/peer string checking/untainting
This makes the checking/untainting of the input context and peer
strings more similar to the checking of pkc type, and generally makes
the checking more straightforward. Also fixes a bug in the failure
check (thanks intrigeri).
Jameson Rollins [Sat, 30 Oct 2010 19:54:19 +0000 (15:54 -0400)]
accept smtp context
Jameson Rollins [Sat, 30 Oct 2010 19:53:38 +0000 (15:53 -0400)]
tweak log message, and remove errant space
Jameson Rollins [Sat, 30 Oct 2010 14:28:06 +0000 (10:28 -0400)]
print msva return message to stdout in query-agent
msva-query-agent is not using stdout. I believe that stdout is the
appropriate place to return the query status message from the server.
Jameson Rollins [Sat, 30 Oct 2010 01:23:24 +0000 (21:23 -0400)]
remove msva-review-cert.1 target, since that script was removed
Daniel Kahn Gillmor [Sat, 30 Oct 2010 01:13:06 +0000 (21:13 -0400)]
commit to handling ike:// urls as well
Daniel Kahn Gillmor [Sat, 30 Oct 2010 00:46:32 +0000 (20:46 -0400)]
update the process table, where supported, to indicate just what the upgrade monitoring process is doing
Daniel Kahn Gillmor [Fri, 29 Oct 2010 07:53:53 +0000 (03:53 -0400)]
update documentation for msva-query-agent to mention the various pkc formats
Daniel Kahn Gillmor [Fri, 29 Oct 2010 07:49:08 +0000 (03:49 -0400)]
added support for rfc4716-style SSH pubkeys
Daniel Kahn Gillmor [Fri, 29 Oct 2010 07:15:08 +0000 (03:15 -0400)]
add tests for opensshpubkey format
Daniel Kahn Gillmor [Fri, 29 Oct 2010 06:56:31 +0000 (02:56 -0400)]
added opensshpubkey pkc support
Daniel Kahn Gillmor [Fri, 29 Oct 2010 06:23:49 +0000 (02:23 -0400)]
refactored, pulling der2key into separate subfunction, simplifying reviewcert()
Daniel Kahn Gillmor [Fri, 29 Oct 2010 05:17:38 +0000 (01:17 -0400)]
removed msva-review-cert; it is already bit-rotted, we have no clear use-case for it, and no argument currently for wanting to maintain a new interface. It might return eventually in some other form.
Daniel Kahn Gillmor [Fri, 29 Oct 2010 05:13:44 +0000 (01:13 -0400)]
allow people to enter upper-case pkc types
Daniel Kahn Gillmor [Fri, 29 Oct 2010 04:54:01 +0000 (00:54 -0400)]
fix up the pem-handling code, and test it
Daniel Kahn Gillmor [Thu, 28 Oct 2010 22:44:01 +0000 (18:44 -0400)]
add support for x509pem as a pkc type (addressing MS #2566)
Daniel Kahn Gillmor [Thu, 28 Oct 2010 21:48:03 +0000 (17:48 -0400)]
ensure that every response returns a server identifier
Daniel Kahn Gillmor [Thu, 28 Oct 2010 21:14:46 +0000 (17:14 -0400)]
reset list of certifiers for each User ID (addresses MS #2567)
Daniel Kahn Gillmor [Wed, 27 Oct 2010 05:49:04 +0000 (01:49 -0400)]
added simple test suite (must currently be executed manually)
Daniel Kahn Gillmor [Wed, 27 Oct 2010 05:03:46 +0000 (01:03 -0400)]
do not explicitly wait on the pid in question; just reap the zombies on SIGCHLD
Daniel Kahn Gillmor [Wed, 27 Oct 2010 04:18:03 +0000 (00:18 -0400)]
ensure that quickly-terminating master subprocesses do not escape our notice
Daniel Kahn Gillmor [Wed, 27 Oct 2010 03:18:52 +0000 (23:18 -0400)]
avoid re-setting the exit code after waiting for upgrade monitoring process to terminate
Daniel Kahn Gillmor [Wed, 27 Oct 2010 02:51:20 +0000 (22:51 -0400)]
detect upgrades and prompt user when we notice them if the right underlying modules are available
Daniel Kahn Gillmor [Mon, 18 Oct 2010 13:41:25 +0000 (09:41 -0400)]
fix some broken syntax
Daniel Kahn Gillmor [Mon, 18 Oct 2010 06:28:35 +0000 (02:28 -0400)]
only try to parse the certificate client side at verbose or noisier log_level
Daniel Kahn Gillmor [Mon, 18 Oct 2010 06:22:00 +0000 (02:22 -0400)]
do not force msva-query-client to depend on Crypt::X509
Daniel Kahn Gillmor [Mon, 18 Oct 2010 06:18:37 +0000 (02:18 -0400)]
begin modularization of Crypt::Monkeysphere::MSVA -- not exporting raw functions any more
Daniel Kahn Gillmor [Mon, 18 Oct 2010 06:15:15 +0000 (02:15 -0400)]
use modularized logging for msva-query-agent
Daniel Kahn Gillmor [Mon, 18 Oct 2010 05:48:01 +0000 (01:48 -0400)]
moved logging business into its own class
Daniel Kahn Gillmor [Mon, 18 Oct 2010 05:12:11 +0000 (01:12 -0400)]
handle non-responsive agents more politely
Daniel Kahn Gillmor [Mon, 18 Oct 2010 05:04:48 +0000 (01:04 -0400)]
remove more environment variables from Client.pm, for a more flexible programmatic interface
Daniel Kahn Gillmor [Mon, 18 Oct 2010 04:20:04 +0000 (00:20 -0400)]
do not die if we do not recognize the pkc type -- just hand over the data to the agent, which might know better than we do
Daniel Kahn Gillmor [Mon, 18 Oct 2010 04:18:16 +0000 (00:18 -0400)]
hand pkc data over to Client.pm as a variable, instead of letting Client.pm read it from stdin directly
Daniel Kahn Gillmor [Mon, 18 Oct 2010 00:39:16 +0000 (20:39 -0400)]
simplify/shorten msva-query-agent documentation
Daniel Kahn Gillmor [Mon, 18 Oct 2010 00:35:10 +0000 (20:35 -0400)]
generalize/shorten Makefile
Jameson Rollins [Sat, 16 Oct 2010 05:48:04 +0000 (01:48 -0400)]
Add client module to query agent
A new command-line utility, msva-query-agent, is created that can
query an msva. It takes the pkc data on stdin, and then the context,
peer, and pkc type as arguments.
An alternate command, msva-review-cert, is also included that actually
uses the msva library to review the cert directly, without needing to
query an agent over a network socket.
Jameson Rollins [Sat, 16 Oct 2010 14:45:57 +0000 (10:45 -0400)]
remove old info from man page
Daniel Kahn Gillmor [Fri, 15 Oct 2010 06:15:44 +0000 (02:15 -0400)]
do not kill off child processes during HUP. let them finish.
Daniel Kahn Gillmor [Fri, 15 Oct 2010 05:59:09 +0000 (01:59 -0400)]
now respects keyserverpolicy request member variable (closes MS #2542)
Daniel Kahn Gillmor [Tue, 12 Oct 2010 07:50:32 +0000 (03:50 -0400)]
preparing proposed 0.5 release
Daniel Kahn Gillmor [Tue, 12 Oct 2010 07:46:08 +0000 (03:46 -0400)]
allow clean re-exec for smoother upgrades (closes MS #2532)
Daniel Kahn Gillmor [Tue, 12 Oct 2010 07:45:29 +0000 (03:45 -0400)]
cleanup debug info
Daniel Kahn Gillmor [Tue, 12 Oct 2010 07:44:43 +0000 (03:44 -0400)]
simple env variable cleanup (treating empty environment variables as unset)
Daniel Kahn Gillmor [Tue, 12 Oct 2010 03:36:10 +0000 (23:36 -0400)]
Make the marginal UI conditional on the presence of the Gtk2 perl module (closes MS #2514)
Daniel Kahn Gillmor [Tue, 12 Oct 2010 03:35:11 +0000 (23:35 -0400)]
only bother asking for a marginal UI if the UID of the corresponding key is not fully valid
Daniel Kahn Gillmor [Tue, 12 Oct 2010 03:11:32 +0000 (23:11 -0400)]
added details about requesting processes, on systems where we can find such information. (closes MS #2005)
Daniel Kahn Gillmor [Mon, 11 Oct 2010 20:27:20 +0000 (16:27 -0400)]
read keyserver from gpg.conf if $MSVA_KEYSERVER is empty or unset
Daniel Kahn Gillmor [Thu, 7 Oct 2010 04:44:35 +0000 (00:44 -0400)]
still more cleanup on the marginal UI
Daniel Kahn Gillmor [Thu, 7 Oct 2010 04:30:25 +0000 (00:30 -0400)]
a bit more cleanup on the UI
Daniel Kahn Gillmor [Thu, 7 Oct 2010 04:06:11 +0000 (00:06 -0400)]
more tweaks to marginal UI behavior
Daniel Kahn Gillmor [Thu, 7 Oct 2010 03:53:07 +0000 (23:53 -0400)]
changed reveal details approach
Daniel Kahn Gillmor [Thu, 7 Oct 2010 02:59:15 +0000 (22:59 -0400)]
more cleanup on prompt info
Jameson Rollins [Mon, 4 Oct 2010 15:49:34 +0000 (11:49 -0400)]
some improvements to the marginal ui prompt
Daniel Kahn Gillmor [Mon, 4 Oct 2010 05:10:43 +0000 (01:10 -0400)]
preparing for version 0.4
Daniel Kahn Gillmor [Mon, 4 Oct 2010 05:08:41 +0000 (01:08 -0400)]
trivially untaint environment for the main child process
Jameson Rollins [Mon, 4 Oct 2010 04:53:48 +0000 (00:53 -0400)]
update changelog with MS bug closures
Daniel Kahn Gillmor [Mon, 4 Oct 2010 04:37:44 +0000 (00:37 -0400)]
whitespace, licensing, attribution cleanup
Daniel Kahn Gillmor [Mon, 4 Oct 2010 04:29:10 +0000 (00:29 -0400)]
moved the prompting code to the MarginalUI sub-module
Daniel Kahn Gillmor [Mon, 4 Oct 2010 03:43:40 +0000 (23:43 -0400)]
reorganize some code
Daniel Kahn Gillmor [Mon, 4 Oct 2010 03:36:31 +0000 (23:36 -0400)]
dialog box actually goes away! (at the cost of re-initializing Gtk2 in every child process, bleh)
Daniel Kahn Gillmor [Mon, 4 Oct 2010 02:51:26 +0000 (22:51 -0400)]
removed dependency on Gtk2::Glade
Daniel Kahn Gillmor [Mon, 4 Oct 2010 02:13:45 +0000 (22:13 -0400)]
successfully deal with at least one prompt per msva run :/
Daniel Kahn Gillmor [Sun, 3 Oct 2010 08:01:19 +0000 (04:01 -0400)]
Merge remote branch 'mjgoins/marginalUI-perl'
Daniel Kahn Gillmor [Sun, 3 Oct 2010 07:53:01 +0000 (03:53 -0400)]
build a first-pass marginal prompt
Matthew James Goins [Sun, 3 Oct 2010 05:52:06 +0000 (01:52 -0400)]
Merge branch 'master' into marginalUI-perl