/mandos/release

To get this branch, use:
bzr branch http://bzr.recompile.se/loggerhead/mandos/release

« back to all changes in this revision

Viewing changes to mandos-keygen

  • Committer: Teddy Hogeborn
  • Date: 2008-08-27 01:18:25 UTC
  • Revision ID: teddy@fukt.bsnet.se-20080827011825-ka3ni6xvy2ehi1y8
* .bzrignore: New.

* clients.conf ([foo]): Remove Radix-64 checksum.

* mandos (AvahiService.rename, server_state_changed,
          entry_group_state_changed): Make Avahi log messages more
                                      clear that they are about
                                      Zeroconf.
  (fingerprint): Use plain "0" instead of "ctypes.c_uint(0)".

Show diffs side-by-side

added added

removed removed

Lines of Context:
mandos-keygen
24
24
 
25
25
KEYDIR="/etc/mandos"
26
26
KEYTYPE=DSA
27
 
KEYLENGTH=1024
 
27
KEYLENGTH=2048
28
28
SUBKEYTYPE=ELG-E
29
29
SUBKEYLENGTH=2048
30
30
KEYNAME="`hostname --fqdn`"
56
56
  -d DIR, --dir DIR     Target directory for key files
57
57
  -t TYPE, --type TYPE  Key type.  Default is DSA.
58
58
  -l BITS, --length BITS
59
 
                        Key length in bits.  Default is 1024.
 
59
                        Key length in bits.  Default is 2048.
60
60
  -s TYPE, --subtype TYPE
61
61
                        Subkey type.  Default is ELG-E.
62
62
  -L BITS, --sublength BITS
293
293
    
294
294
    cat <<-EOF
295
295
        [$KEYNAME]
 
296
        host = $KEYNAME
296
297
        fingerprint = $FINGERPRINT
297
298
        secret =
298
299
EOF
299
300
    sed -n -e '
300
301
        /^-----BEGIN PGP MESSAGE-----$/,/^-----END PGP MESSAGE-----$/{
301
302
            /^$/,${
 
303
                # Remove 24-bit Radix-64 checksum
 
304
                s/=....$//
302
305
                # Indent four spaces
303
306
                /^[^-]/s/^/    /p
304
307
            }