/mandos/release

To get this branch, use:
bzr branch http://bzr.recompile.se/loggerhead/mandos/release

« back to all changes in this revision

Viewing changes to TODO

  • Committer: Teddy Hogeborn
  • Date: 2008-08-27 01:18:25 UTC
  • Revision ID: teddy@fukt.bsnet.se-20080827011825-ka3ni6xvy2ehi1y8
* .bzrignore: New.

* clients.conf ([foo]): Remove Radix-64 checksum.

* mandos (AvahiService.rename, server_state_changed,
          entry_group_state_changed): Make Avahi log messages more
                                      clear that they are about
                                      Zeroconf.
  (fingerprint): Use plain "0" instead of "ctypes.c_uint(0)".

Show diffs side-by-side

added added

removed removed

Lines of Context:
TODO
85
85
   [[http://www.steve.org.uk/Reference/Unix/faq_4.html#SEC48][Unix Programming FAQ 3.1 How can I make my program not echo input?]]
86
86
 
87
87
* mandos (server)
88
 
** run gnutls_openpgp_crt_verify_self() and verify clients certificates
89
 
** [#A] Config file man page: man5/mandos-clients.conf (clients.conf)
90
 
*** For option "secret", document which program can help generate it.
91
88
** [#A] /etc/init.d/mandos-server               :teddy:
92
89
** [#B] Log level                               :bugs:
93
90
** /etc/mandos/clients.d/*.conf
109
106
** Disable client
110
107
** Enable client
111
108
 
 
109
* Man pages tags
 
110
  Go through all man pages to conform to the style of tags chosen in 
 
111
  [[http://svn.debian.org/wsvn/debian-xml-sgml/packages/docbook-xsl/trunk/debian/examples/foo.1.example_manpage.xml?op=file&rev=0&sc=0][foo.1.example_manpage.xml]].
 
112
 
112
113
* Installer
113
114
** Client-side
114
115
*** Update initrd.img after installation
115
116
    This seems to use some kind of "trigger" system
 
117
    [[file:/usr/share/doc/dpkg/triggers.txt.gz]]
 
118
    dpkg-trigger(1), deb-triggers(5)
116
119
*** Keydir move: /etc/mandos -> /etc/keys/mandos
117
120
    Must create in preinst if not pre-depending on cryptsetup
118
121
*** mandos-keygen
119
 
**** [#A] Output cut-and-paste ready snippet for clients.conf.
 
122
**** "--passfile" option
 
123
     Using the "secfile" option instead of "secret"
 
124
**** [#A] "--test" option
 
125
     For testing decryption before rebooting.
120
126
** Server-side
121
127
*** [#A] Create mandos user and group for server
122
128
*** [#A] Create /var/run/mandos directory with perm and ownership