monkeysphere-validation-agent.git
14 years agoList certifiers only once (closes MS # 2573)
Daniel Kahn Gillmor [Mon, 20 Dec 2010 07:36:42 +0000 (02:36 -0500)]
List certifiers only once (closes MS # 2573)

14 years agoDo not report self-sigs as other certifiers (but report valid, non-matching identitie...
Daniel Kahn Gillmor [Mon, 20 Dec 2010 06:56:30 +0000 (01:56 -0500)]
Do not report self-sigs as other certifiers (but report valid, non-matching identities independently) (closes MS # 2569)

14 years agoavoid passing undefined data to decode_base64()
Daniel Kahn Gillmor [Mon, 20 Dec 2010 05:37:26 +0000 (00:37 -0500)]
avoid passing undefined data to decode_base64()

14 years agoallow the use of ports in hostnames
Daniel Kahn Gillmor [Sun, 19 Dec 2010 02:22:00 +0000 (21:22 -0500)]
allow the use of ports in hostnames

14 years agoupdate upstream Changelog
Daniel Kahn Gillmor [Sat, 18 Dec 2010 23:41:55 +0000 (18:41 -0500)]
update upstream Changelog

14 years agoimport hkpms settings from gpg.conf also
Daniel Kahn Gillmor [Sat, 18 Dec 2010 23:40:41 +0000 (18:40 -0500)]
import hkpms settings from gpg.conf also

14 years agodo not use indirect object creation (see p.158 of "Modern Perl")
Daniel Kahn Gillmor [Sat, 18 Dec 2010 23:26:14 +0000 (18:26 -0500)]
do not use indirect object creation (see p.158 of "Modern Perl")

14 years agofixed broken error message
Daniel Kahn Gillmor [Fri, 17 Dec 2010 18:04:44 +0000 (13:04 -0500)]
fixed broken error message

14 years agoprep upstream changelog for 0.7 release msva-perl/0.7
Jameson Rollins [Thu, 16 Dec 2010 20:56:19 +0000 (15:56 -0500)]
prep upstream changelog for 0.7 release

14 years agoadjust gpgkey_hkpms using the standard gpg verbosity/debug settings
Daniel Kahn Gillmor [Thu, 16 Dec 2010 20:51:29 +0000 (15:51 -0500)]
adjust gpgkey_hkpms using the standard gpg verbosity/debug settings

14 years agomake the logger a little bit more functional
Daniel Kahn Gillmor [Thu, 16 Dec 2010 20:36:12 +0000 (15:36 -0500)]
make the logger a little bit more functional

14 years agosupport hkpms queries from the agent
Daniel Kahn Gillmor [Thu, 16 Dec 2010 20:32:25 +0000 (15:32 -0500)]
support hkpms queries from the agent

14 years agoadopt new 1.37 changes to IO::Socket::SSL
Daniel Kahn Gillmor [Thu, 16 Dec 2010 16:09:48 +0000 (11:09 -0500)]
adopt new 1.37 changes to IO::Socket::SSL

14 years agosupply gpgkeys_hkpms (closes MS #2016)
Daniel Kahn Gillmor [Wed, 8 Dec 2010 02:37:24 +0000 (21:37 -0500)]
supply gpgkeys_hkpms (closes MS #2016)

14 years agoexpose version of MSVA.pm publicly
Daniel Kahn Gillmor [Mon, 6 Dec 2010 06:30:06 +0000 (01:30 -0500)]
expose version of MSVA.pm publicly

14 years agoenable requesting keyserverpolicy in Crypt::Monkeysphere::MSVA::Client
Daniel Kahn Gillmor [Mon, 6 Dec 2010 05:36:42 +0000 (00:36 -0500)]
enable requesting keyserverpolicy in Crypt::Monkeysphere::MSVA::Client

14 years agostarted new Changelog entry
Daniel Kahn Gillmor [Sun, 14 Nov 2010 23:51:41 +0000 (18:51 -0500)]
started new Changelog entry

14 years agonormalize word spacing in documentation for msva-query-agent
Daniel Kahn Gillmor [Sun, 14 Nov 2010 23:50:50 +0000 (18:50 -0500)]
normalize word spacing in documentation for msva-query-agent

14 years agodo not bother tracking generated manpages
Daniel Kahn Gillmor [Sun, 14 Nov 2010 23:49:50 +0000 (18:49 -0500)]
do not bother tracking generated manpages

14 years agofix typo in pod documentation for msva-query-agent msva-perl/0.6
Daniel Kahn Gillmor [Sun, 14 Nov 2010 08:26:54 +0000 (03:26 -0500)]
fix typo in pod documentation for msva-query-agent

14 years agoprepare for 0.6 release
Daniel Kahn Gillmor [Sun, 14 Nov 2010 08:17:22 +0000 (03:17 -0500)]
prepare for 0.6 release

14 years agoimplement tests (and looser constraints on) peer names for peers who are clients
Daniel Kahn Gillmor [Sun, 14 Nov 2010 08:07:44 +0000 (03:07 -0500)]
implement tests (and looser constraints on) peer names for peers who are clients

14 years agoadded peertype (addresses #2568) -- still need tests
Daniel Kahn Gillmor [Sat, 13 Nov 2010 21:46:38 +0000 (16:46 -0500)]
added peertype (addresses #2568) -- still need tests

14 years agoadded jrollins to copyright
Daniel Kahn Gillmor [Fri, 5 Nov 2010 18:58:58 +0000 (14:58 -0400)]
added jrollins to copyright

14 years agoMerge remote branch 'jrollins/master'
Daniel Kahn Gillmor [Thu, 4 Nov 2010 06:21:14 +0000 (02:21 -0400)]
Merge remote branch 'jrollins/master'

14 years agoupdate docs to match behavior change
Daniel Kahn Gillmor [Mon, 1 Nov 2010 00:19:24 +0000 (20:19 -0400)]
update docs to match behavior change

14 years agofix context/peer string checking/untainting
Jameson Rollins [Sat, 30 Oct 2010 20:42:28 +0000 (16:42 -0400)]
fix context/peer string checking/untainting

This makes the checking/untainting of the input context and peer
strings more similar to the checking of pkc type, and generally makes
the checking more straightforward.  Also fixes a bug in the failure
check (thanks intrigeri).

14 years agoaccept smtp context
Jameson Rollins [Sat, 30 Oct 2010 19:54:19 +0000 (15:54 -0400)]
accept smtp context

14 years agotweak log message, and remove errant space
Jameson Rollins [Sat, 30 Oct 2010 19:53:38 +0000 (15:53 -0400)]
tweak log message, and remove errant space

14 years agoprint msva return message to stdout in query-agent
Jameson Rollins [Sat, 30 Oct 2010 14:28:06 +0000 (10:28 -0400)]
print msva return message to stdout in query-agent

msva-query-agent is not using stdout.  I believe that stdout is the
appropriate place to return the query status message from the server.

14 years agoremove msva-review-cert.1 target, since that script was removed
Jameson Rollins [Sat, 30 Oct 2010 01:23:24 +0000 (21:23 -0400)]
remove msva-review-cert.1 target, since that script was removed

14 years agocommit to handling ike:// urls as well
Daniel Kahn Gillmor [Sat, 30 Oct 2010 01:13:06 +0000 (21:13 -0400)]
commit to handling ike:// urls as well

14 years agoupdate the process table, where supported, to indicate just what the upgrade monitori...
Daniel Kahn Gillmor [Sat, 30 Oct 2010 00:46:32 +0000 (20:46 -0400)]
update the process table, where supported, to indicate just what the upgrade monitoring process is doing

14 years agoupdate documentation for msva-query-agent to mention the various pkc formats
Daniel Kahn Gillmor [Fri, 29 Oct 2010 07:53:53 +0000 (03:53 -0400)]
update documentation for msva-query-agent to mention the various pkc formats

14 years agoadded support for rfc4716-style SSH pubkeys
Daniel Kahn Gillmor [Fri, 29 Oct 2010 07:49:08 +0000 (03:49 -0400)]
added support for rfc4716-style SSH pubkeys

14 years agoadd tests for opensshpubkey format
Daniel Kahn Gillmor [Fri, 29 Oct 2010 07:15:08 +0000 (03:15 -0400)]
add tests for opensshpubkey format

14 years agoadded opensshpubkey pkc support
Daniel Kahn Gillmor [Fri, 29 Oct 2010 06:56:31 +0000 (02:56 -0400)]
added opensshpubkey pkc support

14 years agorefactored, pulling der2key into separate subfunction, simplifying reviewcert()
Daniel Kahn Gillmor [Fri, 29 Oct 2010 06:23:49 +0000 (02:23 -0400)]
refactored, pulling der2key into separate subfunction, simplifying reviewcert()

14 years agoremoved msva-review-cert; it is already bit-rotted, we have no clear use-case for...
Daniel Kahn Gillmor [Fri, 29 Oct 2010 05:17:38 +0000 (01:17 -0400)]
removed msva-review-cert; it is already bit-rotted, we have no clear use-case for it, and no argument currently for wanting to maintain a new interface.  It might return eventually in some other form.

14 years agoallow people to enter upper-case pkc types
Daniel Kahn Gillmor [Fri, 29 Oct 2010 05:13:44 +0000 (01:13 -0400)]
allow people to enter upper-case pkc types

14 years agofix up the pem-handling code, and test it
Daniel Kahn Gillmor [Fri, 29 Oct 2010 04:54:01 +0000 (00:54 -0400)]
fix up the pem-handling code, and test it

14 years agoadd support for x509pem as a pkc type (addressing MS #2566)
Daniel Kahn Gillmor [Thu, 28 Oct 2010 22:44:01 +0000 (18:44 -0400)]
add support for x509pem as a pkc type (addressing MS #2566)

14 years agoensure that every response returns a server identifier
Daniel Kahn Gillmor [Thu, 28 Oct 2010 21:48:03 +0000 (17:48 -0400)]
ensure that every response returns a server identifier

14 years agoreset list of certifiers for each User ID (addresses MS #2567)
Daniel Kahn Gillmor [Thu, 28 Oct 2010 21:14:46 +0000 (17:14 -0400)]
reset list of certifiers for each User ID (addresses MS #2567)

14 years agoadded simple test suite (must currently be executed manually)
Daniel Kahn Gillmor [Wed, 27 Oct 2010 05:49:04 +0000 (01:49 -0400)]
added simple test suite (must currently be executed manually)

14 years agodo not explicitly wait on the pid in question; just reap the zombies on SIGCHLD
Daniel Kahn Gillmor [Wed, 27 Oct 2010 05:03:46 +0000 (01:03 -0400)]
do not explicitly wait on the pid in question; just reap the zombies on SIGCHLD

14 years agoensure that quickly-terminating master subprocesses do not escape our notice
Daniel Kahn Gillmor [Wed, 27 Oct 2010 04:18:03 +0000 (00:18 -0400)]
ensure that quickly-terminating master subprocesses do not escape our notice

14 years agoavoid re-setting the exit code after waiting for upgrade monitoring process to terminate
Daniel Kahn Gillmor [Wed, 27 Oct 2010 03:18:52 +0000 (23:18 -0400)]
avoid re-setting the exit code after waiting for upgrade monitoring process to terminate

14 years agodetect upgrades and prompt user when we notice them if the right underlying modules...
Daniel Kahn Gillmor [Wed, 27 Oct 2010 02:51:20 +0000 (22:51 -0400)]
detect upgrades and prompt user when we notice them if the right underlying modules are available

14 years agofix some broken syntax
Daniel Kahn Gillmor [Mon, 18 Oct 2010 13:41:25 +0000 (09:41 -0400)]
fix some broken syntax

14 years agoonly try to parse the certificate client side at verbose or noisier log_level
Daniel Kahn Gillmor [Mon, 18 Oct 2010 06:28:35 +0000 (02:28 -0400)]
only try to parse the certificate client side at verbose or noisier log_level

14 years agodo not force msva-query-client to depend on Crypt::X509
Daniel Kahn Gillmor [Mon, 18 Oct 2010 06:22:00 +0000 (02:22 -0400)]
do not force msva-query-client to depend on Crypt::X509

14 years agobegin modularization of Crypt::Monkeysphere::MSVA -- not exporting raw functions...
Daniel Kahn Gillmor [Mon, 18 Oct 2010 06:18:37 +0000 (02:18 -0400)]
begin modularization of Crypt::Monkeysphere::MSVA -- not exporting raw functions any more

14 years agouse modularized logging for msva-query-agent
Daniel Kahn Gillmor [Mon, 18 Oct 2010 06:15:15 +0000 (02:15 -0400)]
use modularized logging for msva-query-agent

14 years agomoved logging business into its own class
Daniel Kahn Gillmor [Mon, 18 Oct 2010 05:48:01 +0000 (01:48 -0400)]
moved logging business into its own class

14 years agohandle non-responsive agents more politely
Daniel Kahn Gillmor [Mon, 18 Oct 2010 05:12:11 +0000 (01:12 -0400)]
handle non-responsive agents more politely

14 years agoremove more environment variables from Client.pm, for a more flexible programmatic...
Daniel Kahn Gillmor [Mon, 18 Oct 2010 05:04:48 +0000 (01:04 -0400)]
remove more environment variables from Client.pm, for a more flexible programmatic interface

14 years agodo not die if we do not recognize the pkc type -- just hand over the data to the...
Daniel Kahn Gillmor [Mon, 18 Oct 2010 04:20:04 +0000 (00:20 -0400)]
do not die if we do not recognize the pkc type -- just hand over the data to the agent, which might know better than we do

14 years agohand pkc data over to Client.pm as a variable, instead of letting Client.pm read...
Daniel Kahn Gillmor [Mon, 18 Oct 2010 04:18:16 +0000 (00:18 -0400)]
hand pkc data over to Client.pm as a variable, instead of letting Client.pm read it from stdin directly

14 years agosimplify/shorten msva-query-agent documentation
Daniel Kahn Gillmor [Mon, 18 Oct 2010 00:39:16 +0000 (20:39 -0400)]
simplify/shorten msva-query-agent documentation

14 years agogeneralize/shorten Makefile
Daniel Kahn Gillmor [Mon, 18 Oct 2010 00:35:10 +0000 (20:35 -0400)]
generalize/shorten Makefile

14 years agoAdd client module to query agent
Jameson Rollins [Sat, 16 Oct 2010 05:48:04 +0000 (01:48 -0400)]
Add client module to query agent

A new command-line utility, msva-query-agent, is created that can
query an msva.  It takes the pkc data on stdin, and then the context,
peer, and pkc type as arguments.

An alternate command, msva-review-cert, is also included that actually
uses the msva library to review the cert directly, without needing to
query an agent over a network socket.

14 years agoremove old info from man page
Jameson Rollins [Sat, 16 Oct 2010 14:45:57 +0000 (10:45 -0400)]
remove old info from man page

14 years agodo not kill off child processes during HUP. let them finish.
Daniel Kahn Gillmor [Fri, 15 Oct 2010 06:15:44 +0000 (02:15 -0400)]
do not kill off child processes during HUP.  let them finish.

14 years agonow respects keyserverpolicy request member variable (closes MS #2542)
Daniel Kahn Gillmor [Fri, 15 Oct 2010 05:59:09 +0000 (01:59 -0400)]
now respects keyserverpolicy request member variable (closes MS #2542)

14 years agopreparing proposed 0.5 release msva-perl/0.5
Daniel Kahn Gillmor [Tue, 12 Oct 2010 07:50:32 +0000 (03:50 -0400)]
preparing proposed 0.5 release

14 years agoallow clean re-exec for smoother upgrades (closes MS #2532)
Daniel Kahn Gillmor [Tue, 12 Oct 2010 07:46:08 +0000 (03:46 -0400)]
allow clean re-exec for smoother upgrades (closes MS #2532)

14 years agocleanup debug info
Daniel Kahn Gillmor [Tue, 12 Oct 2010 07:45:29 +0000 (03:45 -0400)]
cleanup debug info

14 years agosimple env variable cleanup (treating empty environment variables as unset)
Daniel Kahn Gillmor [Tue, 12 Oct 2010 07:44:43 +0000 (03:44 -0400)]
simple env variable cleanup (treating empty environment variables as unset)

14 years agoMake the marginal UI conditional on the presence of the Gtk2 perl module (closes...
Daniel Kahn Gillmor [Tue, 12 Oct 2010 03:36:10 +0000 (23:36 -0400)]
Make the marginal UI conditional on the presence of the Gtk2 perl module (closes MS #2514)

14 years agoonly bother asking for a marginal UI if the UID of the corresponding key is not fully...
Daniel Kahn Gillmor [Tue, 12 Oct 2010 03:35:11 +0000 (23:35 -0400)]
only bother asking for a marginal UI if the UID of the corresponding key is not fully valid

14 years agoadded details about requesting processes, on systems where we can find such informati...
Daniel Kahn Gillmor [Tue, 12 Oct 2010 03:11:32 +0000 (23:11 -0400)]
added details about requesting processes, on systems where we can find such information. (closes MS #2005)

14 years agoread keyserver from gpg.conf if $MSVA_KEYSERVER is empty or unset
Daniel Kahn Gillmor [Mon, 11 Oct 2010 20:27:20 +0000 (16:27 -0400)]
read keyserver from gpg.conf if $MSVA_KEYSERVER is empty or unset

14 years agostill more cleanup on the marginal UI msva-perl/0.4
Daniel Kahn Gillmor [Thu, 7 Oct 2010 04:44:35 +0000 (00:44 -0400)]
still more cleanup on the marginal UI

14 years agoa bit more cleanup on the UI
Daniel Kahn Gillmor [Thu, 7 Oct 2010 04:30:25 +0000 (00:30 -0400)]
a bit more cleanup on the UI

14 years agomore tweaks to marginal UI behavior
Daniel Kahn Gillmor [Thu, 7 Oct 2010 04:06:11 +0000 (00:06 -0400)]
more tweaks to marginal UI behavior

14 years agochanged reveal details approach
Daniel Kahn Gillmor [Thu, 7 Oct 2010 03:53:07 +0000 (23:53 -0400)]
changed reveal details approach

14 years agomore cleanup on prompt info
Daniel Kahn Gillmor [Thu, 7 Oct 2010 02:59:15 +0000 (22:59 -0400)]
more cleanup on prompt info

14 years agosome improvements to the marginal ui prompt
Jameson Rollins [Mon, 4 Oct 2010 15:49:34 +0000 (11:49 -0400)]
some improvements to the marginal ui prompt

14 years agopreparing for version 0.4
Daniel Kahn Gillmor [Mon, 4 Oct 2010 05:10:43 +0000 (01:10 -0400)]
preparing for version 0.4

14 years agotrivially untaint environment for the main child process
Daniel Kahn Gillmor [Mon, 4 Oct 2010 05:08:41 +0000 (01:08 -0400)]
trivially untaint environment for the main child process

14 years agoupdate changelog with MS bug closures
Jameson Rollins [Mon, 4 Oct 2010 04:53:48 +0000 (00:53 -0400)]
update changelog with MS bug closures

14 years agowhitespace, licensing, attribution cleanup
Daniel Kahn Gillmor [Mon, 4 Oct 2010 04:37:44 +0000 (00:37 -0400)]
whitespace, licensing, attribution cleanup

14 years agomoved the prompting code to the MarginalUI sub-module
Daniel Kahn Gillmor [Mon, 4 Oct 2010 04:29:10 +0000 (00:29 -0400)]
moved the prompting code to the MarginalUI sub-module

14 years agoreorganize some code
Daniel Kahn Gillmor [Mon, 4 Oct 2010 03:43:40 +0000 (23:43 -0400)]
reorganize some code

14 years agodialog box actually goes away! (at the cost of re-initializing Gtk2 in every child...
Daniel Kahn Gillmor [Mon, 4 Oct 2010 03:36:31 +0000 (23:36 -0400)]
dialog box actually goes away! (at the cost of re-initializing Gtk2 in every child process, bleh)

14 years agoremoved dependency on Gtk2::Glade
Daniel Kahn Gillmor [Mon, 4 Oct 2010 02:51:26 +0000 (22:51 -0400)]
removed dependency on Gtk2::Glade

14 years agosuccessfully deal with at least one prompt per msva run :/
Daniel Kahn Gillmor [Mon, 4 Oct 2010 02:13:45 +0000 (22:13 -0400)]
successfully deal with at least one prompt per msva run :/

14 years agoMerge remote branch 'mjgoins/marginalUI-perl'
Daniel Kahn Gillmor [Sun, 3 Oct 2010 08:01:19 +0000 (04:01 -0400)]
Merge remote branch 'mjgoins/marginalUI-perl'

14 years agobuild a first-pass marginal prompt
Daniel Kahn Gillmor [Sun, 3 Oct 2010 07:53:01 +0000 (03:53 -0400)]
build a first-pass marginal prompt

14 years agoMerge branch 'master' into marginalUI-perl
Matthew James Goins [Sun, 3 Oct 2010 05:52:06 +0000 (01:52 -0400)]
Merge branch 'master' into marginalUI-perl

14 years agostill more keyserver and local checking re-organization
Daniel Kahn Gillmor [Sun, 3 Oct 2010 05:49:58 +0000 (01:49 -0400)]
still more keyserver and local checking re-organization

14 years agoallow explicit setting of MSVA_KEYSERVER_POLICY to "unlessvalid" (the default)
Daniel Kahn Gillmor [Sun, 3 Oct 2010 04:53:34 +0000 (00:53 -0400)]
allow explicit setting of MSVA_KEYSERVER_POLICY to "unlessvalid" (the default)

14 years agoSimplify keyserver-checking logic
Matthew James Goins [Sun, 3 Oct 2010 04:45:32 +0000 (00:45 -0400)]
Simplify keyserver-checking logic

14 years agoSimplify keyserver-checking logic
Matthew James Goins [Sun, 3 Oct 2010 04:42:25 +0000 (00:42 -0400)]
Simplify keyserver-checking logic

14 years agoMerge remote branch 'dkg/master' into marginalUI-perl
Matthew James Goins [Sun, 3 Oct 2010 04:17:00 +0000 (00:17 -0400)]
Merge remote branch 'dkg/master' into marginalUI-perl

Conflicts:
msva-perl

14 years agoFix whitespace
Matthew James Goins [Sun, 3 Oct 2010 04:13:31 +0000 (00:13 -0400)]
Fix whitespace

14 years agoContinue to move code to standard layout
Matthew James Goins [Sun, 3 Oct 2010 04:12:27 +0000 (00:12 -0400)]
Continue to move code to standard layout

14 years agoMove marginal ui code to a more standard layout
Matthew James Goins [Sun, 3 Oct 2010 04:09:12 +0000 (00:09 -0400)]
Move marginal ui code to a more standard layout

14 years agodo keyserver checking directly
Daniel Kahn Gillmor [Sun, 3 Oct 2010 03:55:27 +0000 (23:55 -0400)]
do keyserver checking directly