monkeysphere-validation-agent.git
13 years agofix typo in pod documentation for msva-query-agent msva-perl/0.6
Daniel Kahn Gillmor [Sun, 14 Nov 2010 08:26:54 +0000 (03:26 -0500)]
fix typo in pod documentation for msva-query-agent

13 years agoprepare for 0.6 release
Daniel Kahn Gillmor [Sun, 14 Nov 2010 08:17:22 +0000 (03:17 -0500)]
prepare for 0.6 release

13 years agoimplement tests (and looser constraints on) peer names for peers who are clients
Daniel Kahn Gillmor [Sun, 14 Nov 2010 08:07:44 +0000 (03:07 -0500)]
implement tests (and looser constraints on) peer names for peers who are clients

13 years agoadded peertype (addresses #2568) -- still need tests
Daniel Kahn Gillmor [Sat, 13 Nov 2010 21:46:38 +0000 (16:46 -0500)]
added peertype (addresses #2568) -- still need tests

13 years agoadded jrollins to copyright
Daniel Kahn Gillmor [Fri, 5 Nov 2010 18:58:58 +0000 (14:58 -0400)]
added jrollins to copyright

13 years agoMerge remote branch 'jrollins/master'
Daniel Kahn Gillmor [Thu, 4 Nov 2010 06:21:14 +0000 (02:21 -0400)]
Merge remote branch 'jrollins/master'

13 years agoupdate docs to match behavior change
Daniel Kahn Gillmor [Mon, 1 Nov 2010 00:19:24 +0000 (20:19 -0400)]
update docs to match behavior change

13 years agofix context/peer string checking/untainting
Jameson Rollins [Sat, 30 Oct 2010 20:42:28 +0000 (16:42 -0400)]
fix context/peer string checking/untainting

This makes the checking/untainting of the input context and peer
strings more similar to the checking of pkc type, and generally makes
the checking more straightforward.  Also fixes a bug in the failure
check (thanks intrigeri).

13 years agoaccept smtp context
Jameson Rollins [Sat, 30 Oct 2010 19:54:19 +0000 (15:54 -0400)]
accept smtp context

13 years agotweak log message, and remove errant space
Jameson Rollins [Sat, 30 Oct 2010 19:53:38 +0000 (15:53 -0400)]
tweak log message, and remove errant space

13 years agoprint msva return message to stdout in query-agent
Jameson Rollins [Sat, 30 Oct 2010 14:28:06 +0000 (10:28 -0400)]
print msva return message to stdout in query-agent

msva-query-agent is not using stdout.  I believe that stdout is the
appropriate place to return the query status message from the server.

13 years agoremove msva-review-cert.1 target, since that script was removed
Jameson Rollins [Sat, 30 Oct 2010 01:23:24 +0000 (21:23 -0400)]
remove msva-review-cert.1 target, since that script was removed

13 years agocommit to handling ike:// urls as well
Daniel Kahn Gillmor [Sat, 30 Oct 2010 01:13:06 +0000 (21:13 -0400)]
commit to handling ike:// urls as well

13 years agoupdate the process table, where supported, to indicate just what the upgrade monitori...
Daniel Kahn Gillmor [Sat, 30 Oct 2010 00:46:32 +0000 (20:46 -0400)]
update the process table, where supported, to indicate just what the upgrade monitoring process is doing

13 years agoupdate documentation for msva-query-agent to mention the various pkc formats
Daniel Kahn Gillmor [Fri, 29 Oct 2010 07:53:53 +0000 (03:53 -0400)]
update documentation for msva-query-agent to mention the various pkc formats

13 years agoadded support for rfc4716-style SSH pubkeys
Daniel Kahn Gillmor [Fri, 29 Oct 2010 07:49:08 +0000 (03:49 -0400)]
added support for rfc4716-style SSH pubkeys

13 years agoadd tests for opensshpubkey format
Daniel Kahn Gillmor [Fri, 29 Oct 2010 07:15:08 +0000 (03:15 -0400)]
add tests for opensshpubkey format

13 years agoadded opensshpubkey pkc support
Daniel Kahn Gillmor [Fri, 29 Oct 2010 06:56:31 +0000 (02:56 -0400)]
added opensshpubkey pkc support

13 years agorefactored, pulling der2key into separate subfunction, simplifying reviewcert()
Daniel Kahn Gillmor [Fri, 29 Oct 2010 06:23:49 +0000 (02:23 -0400)]
refactored, pulling der2key into separate subfunction, simplifying reviewcert()

13 years agoremoved msva-review-cert; it is already bit-rotted, we have no clear use-case for...
Daniel Kahn Gillmor [Fri, 29 Oct 2010 05:17:38 +0000 (01:17 -0400)]
removed msva-review-cert; it is already bit-rotted, we have no clear use-case for it, and no argument currently for wanting to maintain a new interface.  It might return eventually in some other form.

13 years agoallow people to enter upper-case pkc types
Daniel Kahn Gillmor [Fri, 29 Oct 2010 05:13:44 +0000 (01:13 -0400)]
allow people to enter upper-case pkc types

13 years agofix up the pem-handling code, and test it
Daniel Kahn Gillmor [Fri, 29 Oct 2010 04:54:01 +0000 (00:54 -0400)]
fix up the pem-handling code, and test it

13 years agoadd support for x509pem as a pkc type (addressing MS #2566)
Daniel Kahn Gillmor [Thu, 28 Oct 2010 22:44:01 +0000 (18:44 -0400)]
add support for x509pem as a pkc type (addressing MS #2566)

13 years agoensure that every response returns a server identifier
Daniel Kahn Gillmor [Thu, 28 Oct 2010 21:48:03 +0000 (17:48 -0400)]
ensure that every response returns a server identifier

13 years agoreset list of certifiers for each User ID (addresses MS #2567)
Daniel Kahn Gillmor [Thu, 28 Oct 2010 21:14:46 +0000 (17:14 -0400)]
reset list of certifiers for each User ID (addresses MS #2567)

13 years agoadded simple test suite (must currently be executed manually)
Daniel Kahn Gillmor [Wed, 27 Oct 2010 05:49:04 +0000 (01:49 -0400)]
added simple test suite (must currently be executed manually)

13 years agodo not explicitly wait on the pid in question; just reap the zombies on SIGCHLD
Daniel Kahn Gillmor [Wed, 27 Oct 2010 05:03:46 +0000 (01:03 -0400)]
do not explicitly wait on the pid in question; just reap the zombies on SIGCHLD

13 years agoensure that quickly-terminating master subprocesses do not escape our notice
Daniel Kahn Gillmor [Wed, 27 Oct 2010 04:18:03 +0000 (00:18 -0400)]
ensure that quickly-terminating master subprocesses do not escape our notice

13 years agoavoid re-setting the exit code after waiting for upgrade monitoring process to terminate
Daniel Kahn Gillmor [Wed, 27 Oct 2010 03:18:52 +0000 (23:18 -0400)]
avoid re-setting the exit code after waiting for upgrade monitoring process to terminate

13 years agodetect upgrades and prompt user when we notice them if the right underlying modules...
Daniel Kahn Gillmor [Wed, 27 Oct 2010 02:51:20 +0000 (22:51 -0400)]
detect upgrades and prompt user when we notice them if the right underlying modules are available

13 years agofix some broken syntax
Daniel Kahn Gillmor [Mon, 18 Oct 2010 13:41:25 +0000 (09:41 -0400)]
fix some broken syntax

13 years agoonly try to parse the certificate client side at verbose or noisier log_level
Daniel Kahn Gillmor [Mon, 18 Oct 2010 06:28:35 +0000 (02:28 -0400)]
only try to parse the certificate client side at verbose or noisier log_level

13 years agodo not force msva-query-client to depend on Crypt::X509
Daniel Kahn Gillmor [Mon, 18 Oct 2010 06:22:00 +0000 (02:22 -0400)]
do not force msva-query-client to depend on Crypt::X509

13 years agobegin modularization of Crypt::Monkeysphere::MSVA -- not exporting raw functions...
Daniel Kahn Gillmor [Mon, 18 Oct 2010 06:18:37 +0000 (02:18 -0400)]
begin modularization of Crypt::Monkeysphere::MSVA -- not exporting raw functions any more

13 years agouse modularized logging for msva-query-agent
Daniel Kahn Gillmor [Mon, 18 Oct 2010 06:15:15 +0000 (02:15 -0400)]
use modularized logging for msva-query-agent

13 years agomoved logging business into its own class
Daniel Kahn Gillmor [Mon, 18 Oct 2010 05:48:01 +0000 (01:48 -0400)]
moved logging business into its own class

13 years agohandle non-responsive agents more politely
Daniel Kahn Gillmor [Mon, 18 Oct 2010 05:12:11 +0000 (01:12 -0400)]
handle non-responsive agents more politely

13 years agoremove more environment variables from Client.pm, for a more flexible programmatic...
Daniel Kahn Gillmor [Mon, 18 Oct 2010 05:04:48 +0000 (01:04 -0400)]
remove more environment variables from Client.pm, for a more flexible programmatic interface

13 years agodo not die if we do not recognize the pkc type -- just hand over the data to the...
Daniel Kahn Gillmor [Mon, 18 Oct 2010 04:20:04 +0000 (00:20 -0400)]
do not die if we do not recognize the pkc type -- just hand over the data to the agent, which might know better than we do

13 years agohand pkc data over to Client.pm as a variable, instead of letting Client.pm read...
Daniel Kahn Gillmor [Mon, 18 Oct 2010 04:18:16 +0000 (00:18 -0400)]
hand pkc data over to Client.pm as a variable, instead of letting Client.pm read it from stdin directly

13 years agosimplify/shorten msva-query-agent documentation
Daniel Kahn Gillmor [Mon, 18 Oct 2010 00:39:16 +0000 (20:39 -0400)]
simplify/shorten msva-query-agent documentation

13 years agogeneralize/shorten Makefile
Daniel Kahn Gillmor [Mon, 18 Oct 2010 00:35:10 +0000 (20:35 -0400)]
generalize/shorten Makefile

13 years agoAdd client module to query agent
Jameson Rollins [Sat, 16 Oct 2010 05:48:04 +0000 (01:48 -0400)]
Add client module to query agent

A new command-line utility, msva-query-agent, is created that can
query an msva.  It takes the pkc data on stdin, and then the context,
peer, and pkc type as arguments.

An alternate command, msva-review-cert, is also included that actually
uses the msva library to review the cert directly, without needing to
query an agent over a network socket.

13 years agoremove old info from man page
Jameson Rollins [Sat, 16 Oct 2010 14:45:57 +0000 (10:45 -0400)]
remove old info from man page

13 years agodo not kill off child processes during HUP. let them finish.
Daniel Kahn Gillmor [Fri, 15 Oct 2010 06:15:44 +0000 (02:15 -0400)]
do not kill off child processes during HUP.  let them finish.

13 years agonow respects keyserverpolicy request member variable (closes MS #2542)
Daniel Kahn Gillmor [Fri, 15 Oct 2010 05:59:09 +0000 (01:59 -0400)]
now respects keyserverpolicy request member variable (closes MS #2542)

13 years agopreparing proposed 0.5 release msva-perl/0.5
Daniel Kahn Gillmor [Tue, 12 Oct 2010 07:50:32 +0000 (03:50 -0400)]
preparing proposed 0.5 release

13 years agoallow clean re-exec for smoother upgrades (closes MS #2532)
Daniel Kahn Gillmor [Tue, 12 Oct 2010 07:46:08 +0000 (03:46 -0400)]
allow clean re-exec for smoother upgrades (closes MS #2532)

13 years agocleanup debug info
Daniel Kahn Gillmor [Tue, 12 Oct 2010 07:45:29 +0000 (03:45 -0400)]
cleanup debug info

13 years agosimple env variable cleanup (treating empty environment variables as unset)
Daniel Kahn Gillmor [Tue, 12 Oct 2010 07:44:43 +0000 (03:44 -0400)]
simple env variable cleanup (treating empty environment variables as unset)

13 years agoMake the marginal UI conditional on the presence of the Gtk2 perl module (closes...
Daniel Kahn Gillmor [Tue, 12 Oct 2010 03:36:10 +0000 (23:36 -0400)]
Make the marginal UI conditional on the presence of the Gtk2 perl module (closes MS #2514)

13 years agoonly bother asking for a marginal UI if the UID of the corresponding key is not fully...
Daniel Kahn Gillmor [Tue, 12 Oct 2010 03:35:11 +0000 (23:35 -0400)]
only bother asking for a marginal UI if the UID of the corresponding key is not fully valid

13 years agoadded details about requesting processes, on systems where we can find such informati...
Daniel Kahn Gillmor [Tue, 12 Oct 2010 03:11:32 +0000 (23:11 -0400)]
added details about requesting processes, on systems where we can find such information. (closes MS #2005)

13 years agoread keyserver from gpg.conf if $MSVA_KEYSERVER is empty or unset
Daniel Kahn Gillmor [Mon, 11 Oct 2010 20:27:20 +0000 (16:27 -0400)]
read keyserver from gpg.conf if $MSVA_KEYSERVER is empty or unset

13 years agostill more cleanup on the marginal UI msva-perl/0.4
Daniel Kahn Gillmor [Thu, 7 Oct 2010 04:44:35 +0000 (00:44 -0400)]
still more cleanup on the marginal UI

13 years agoa bit more cleanup on the UI
Daniel Kahn Gillmor [Thu, 7 Oct 2010 04:30:25 +0000 (00:30 -0400)]
a bit more cleanup on the UI

13 years agomore tweaks to marginal UI behavior
Daniel Kahn Gillmor [Thu, 7 Oct 2010 04:06:11 +0000 (00:06 -0400)]
more tweaks to marginal UI behavior

13 years agochanged reveal details approach
Daniel Kahn Gillmor [Thu, 7 Oct 2010 03:53:07 +0000 (23:53 -0400)]
changed reveal details approach

13 years agomore cleanup on prompt info
Daniel Kahn Gillmor [Thu, 7 Oct 2010 02:59:15 +0000 (22:59 -0400)]
more cleanup on prompt info

13 years agosome improvements to the marginal ui prompt
Jameson Rollins [Mon, 4 Oct 2010 15:49:34 +0000 (11:49 -0400)]
some improvements to the marginal ui prompt

13 years agopreparing for version 0.4
Daniel Kahn Gillmor [Mon, 4 Oct 2010 05:10:43 +0000 (01:10 -0400)]
preparing for version 0.4

13 years agotrivially untaint environment for the main child process
Daniel Kahn Gillmor [Mon, 4 Oct 2010 05:08:41 +0000 (01:08 -0400)]
trivially untaint environment for the main child process

13 years agoupdate changelog with MS bug closures
Jameson Rollins [Mon, 4 Oct 2010 04:53:48 +0000 (00:53 -0400)]
update changelog with MS bug closures

13 years agowhitespace, licensing, attribution cleanup
Daniel Kahn Gillmor [Mon, 4 Oct 2010 04:37:44 +0000 (00:37 -0400)]
whitespace, licensing, attribution cleanup

13 years agomoved the prompting code to the MarginalUI sub-module
Daniel Kahn Gillmor [Mon, 4 Oct 2010 04:29:10 +0000 (00:29 -0400)]
moved the prompting code to the MarginalUI sub-module

13 years agoreorganize some code
Daniel Kahn Gillmor [Mon, 4 Oct 2010 03:43:40 +0000 (23:43 -0400)]
reorganize some code

13 years agodialog box actually goes away! (at the cost of re-initializing Gtk2 in every child...
Daniel Kahn Gillmor [Mon, 4 Oct 2010 03:36:31 +0000 (23:36 -0400)]
dialog box actually goes away! (at the cost of re-initializing Gtk2 in every child process, bleh)

13 years agoremoved dependency on Gtk2::Glade
Daniel Kahn Gillmor [Mon, 4 Oct 2010 02:51:26 +0000 (22:51 -0400)]
removed dependency on Gtk2::Glade

13 years agosuccessfully deal with at least one prompt per msva run :/
Daniel Kahn Gillmor [Mon, 4 Oct 2010 02:13:45 +0000 (22:13 -0400)]
successfully deal with at least one prompt per msva run :/

13 years agoMerge remote branch 'mjgoins/marginalUI-perl'
Daniel Kahn Gillmor [Sun, 3 Oct 2010 08:01:19 +0000 (04:01 -0400)]
Merge remote branch 'mjgoins/marginalUI-perl'

13 years agobuild a first-pass marginal prompt
Daniel Kahn Gillmor [Sun, 3 Oct 2010 07:53:01 +0000 (03:53 -0400)]
build a first-pass marginal prompt

13 years agoMerge branch 'master' into marginalUI-perl
Matthew James Goins [Sun, 3 Oct 2010 05:52:06 +0000 (01:52 -0400)]
Merge branch 'master' into marginalUI-perl

13 years agostill more keyserver and local checking re-organization
Daniel Kahn Gillmor [Sun, 3 Oct 2010 05:49:58 +0000 (01:49 -0400)]
still more keyserver and local checking re-organization

13 years agoallow explicit setting of MSVA_KEYSERVER_POLICY to "unlessvalid" (the default)
Daniel Kahn Gillmor [Sun, 3 Oct 2010 04:53:34 +0000 (00:53 -0400)]
allow explicit setting of MSVA_KEYSERVER_POLICY to "unlessvalid" (the default)

13 years agoSimplify keyserver-checking logic
Matthew James Goins [Sun, 3 Oct 2010 04:45:32 +0000 (00:45 -0400)]
Simplify keyserver-checking logic

13 years agoSimplify keyserver-checking logic
Matthew James Goins [Sun, 3 Oct 2010 04:42:25 +0000 (00:42 -0400)]
Simplify keyserver-checking logic

13 years agoMerge remote branch 'dkg/master' into marginalUI-perl
Matthew James Goins [Sun, 3 Oct 2010 04:17:00 +0000 (00:17 -0400)]
Merge remote branch 'dkg/master' into marginalUI-perl

Conflicts:
msva-perl

13 years agoFix whitespace
Matthew James Goins [Sun, 3 Oct 2010 04:13:31 +0000 (00:13 -0400)]
Fix whitespace

13 years agoContinue to move code to standard layout
Matthew James Goins [Sun, 3 Oct 2010 04:12:27 +0000 (00:12 -0400)]
Continue to move code to standard layout

13 years agoMove marginal ui code to a more standard layout
Matthew James Goins [Sun, 3 Oct 2010 04:09:12 +0000 (00:09 -0400)]
Move marginal ui code to a more standard layout

13 years agodo keyserver checking directly
Daniel Kahn Gillmor [Sun, 3 Oct 2010 03:55:27 +0000 (23:55 -0400)]
do keyserver checking directly

13 years agoMerge remote branch 'enw/marginalUI-perl' into marginalUI-perl
Matthew James Goins [Sun, 3 Oct 2010 03:42:13 +0000 (23:42 -0400)]
Merge remote branch 'enw/marginalUI-perl' into marginalUI-perl

13 years agoPrep to merge with enw (this commit should be squashed, not published)
Matthew James Goins [Sun, 3 Oct 2010 03:41:34 +0000 (23:41 -0400)]
Prep to merge with enw (this commit should be squashed, not published)

13 years agoremove dependency on monkeysphere -- we now just rely on gnupg (which requires a...
Daniel Kahn Gillmor [Sat, 2 Oct 2010 21:51:27 +0000 (17:51 -0400)]
remove dependency on monkeysphere -- we now just rely on gnupg (which requires a few more perl modules)

13 years agotighten up regexps for context and peer
Daniel Kahn Gillmor [Sat, 2 Oct 2010 21:38:27 +0000 (17:38 -0400)]
tighten up regexps for context and peer

13 years agoadd marginalUI spike in perl
Elliot Winard [Sat, 2 Oct 2010 21:18:05 +0000 (17:18 -0400)]
add marginalUI spike in perl

13 years agountaint $uid.
Jameson Rollins [Sun, 2 May 2010 00:53:20 +0000 (20:53 -0400)]
untaint $uid.

Found out that $uid is in fact tainted while trying to use it in a
system() call in another context.  We have untainted it here.

I think this actually means that perl's taint checking is broken,
because it fails to check for taint in the open() call to a
subprocesses.

13 years agopreparing for 0.3 release msva-perl/0.3
Daniel Kahn Gillmor [Wed, 16 Jun 2010 06:30:02 +0000 (02:30 -0400)]
preparing for 0.3 release

13 years agorestore default SIGCHLD handling to subprocesses so they can make their own mistakes
Daniel Kahn Gillmor [Fri, 11 Jun 2010 05:12:01 +0000 (01:12 -0400)]
restore default SIGCHLD handling to subprocesses so they can make their own mistakes

13 years agoclose monkeysphere call, provide scaffolding for marginal UI
Daniel Kahn Gillmor [Thu, 29 Apr 2010 14:22:24 +0000 (10:22 -0400)]
close monkeysphere call, provide scaffolding for marginal UI

14 years agoupdating Changelog for 0.3~pre
Daniel Kahn Gillmor [Tue, 23 Mar 2010 20:50:22 +0000 (16:50 -0400)]
updating Changelog for 0.3~pre

14 years agoalign git tags with the tags made by git-buildpackage (maybe we can remove these...
Daniel Kahn Gillmor [Tue, 23 Mar 2010 20:47:27 +0000 (16:47 -0400)]
align git tags with the tags made by git-buildpackage (maybe we can remove these and let git-buildpackage take care of them eventually)

14 years agoremoving git buildpackage options from master; please specify in debian/gbp.conf...
Daniel Kahn Gillmor [Tue, 23 Mar 2010 20:28:52 +0000 (16:28 -0400)]
removing git buildpackage options from master; please specify in debian/gbp.conf on the debian branch

14 years agoMerge remote branch 'jrollins/master'
Daniel Kahn Gillmor [Fri, 19 Mar 2010 00:02:49 +0000 (20:02 -0400)]
Merge remote branch 'jrollins/master'

14 years agopreparing for msva-perl 0.2 release msva-perl/0.2
Daniel Kahn Gillmor [Mon, 15 Mar 2010 18:27:40 +0000 (14:27 -0400)]
preparing for msva-perl 0.2 release

14 years agoget rid of noisy spew when MSVA_PORT is set (resolving MS #2003)
Daniel Kahn Gillmor [Sat, 13 Mar 2010 18:00:47 +0000 (13:00 -0500)]
get rid of noisy spew when MSVA_PORT is set (resolving MS #2003)

14 years agoupdated upstream Changelog
Daniel Kahn Gillmor [Fri, 12 Mar 2010 05:32:17 +0000 (00:32 -0500)]
updated upstream Changelog

14 years agominimize logging spew by default, emit POSIX sh commands to set environment variables...
Daniel Kahn Gillmor [Fri, 12 Mar 2010 05:32:06 +0000 (00:32 -0500)]
minimize logging spew by default, emit POSIX sh commands to set environment variables if no subcommand is present

14 years agoclean cruft out of MSVA.pm
Daniel Kahn Gillmor [Fri, 12 Mar 2010 05:10:23 +0000 (00:10 -0500)]
clean cruft out of MSVA.pm

14 years agodefault to a random available port (you can still explicitly request with MSVA_PORT)
Daniel Kahn Gillmor [Fri, 12 Mar 2010 05:09:01 +0000 (00:09 -0500)]
default to a random available port (you can still explicitly request with MSVA_PORT)