/mandos/release : revision 237.7.317

To get this branch, use:

bzr branch
http://bzr.recompile.se/loggerhead/mandos/release

« back to all changes in this revision

Viewing changes to plugins.d/mandos-client.xml

Committer: Teddy Hogeborn
Date: 2015-07-12 01:41:14 UTC
mto: (237.7.594 trunk)
mto: This revision was merged to the branch mainline in revision 325.
Revision ID: teddy@recompile.se-20150712014114-qbala4mutkixxct3

Handle local Zeroconf service name collisions on startup, too.

* mandos (AvahiService.server_state_changed): Catch name collision
error when adding
server.

Show diffs side-by-side

added added

removed removed

plugins.d/mandos-client.xml

<!DOCTYPE refentry PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"

"http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [

<!ENTITY COMMANDNAME "mandos-client">

<!ENTITY TIMESTAMP "2014-03-05">

<!ENTITY TIMESTAMP "2015-07-08">

<!ENTITY % common SYSTEM "../common.ent">

%common;

<holder>Teddy Hogeborn</holder>

<holder>Björn Påhlsson</holder>

</copyright>

</arg>

100

<sbr/>

100

101

<arg>

102

<option>--dh-params <replaceable>FILE</replaceable></option>

103

</arg>

104

<sbr/>

105

<arg>

101

106

<option>--delay <replaceable>SECONDS</replaceable></option>

102

107

</arg>

103

108

<sbr/>

311

316

312

317

<para>

313

318

Sets the number of bits to use for the prime number in the

314

TLS Diffie-Hellman key exchange. Default is 1024.

319

TLS Diffie-Hellman key exchange. The default value is

320

selected automatically based on the OpenPGP key. Note

321

that if the <option>--dh-params</option> option is used,

322

the values from that file will be used instead.

323

</para>

324

</listitem>

325

</varlistentry>

326

327

328

<term><option>--dh-params=<replaceable

329

>FILE</replaceable></option></term>

330

331

<para>

332

Specifies a PEM-encoded PKCS#3 file to read the parameters

333

needed by the TLS Diffie-Hellman key exchange from. If

334

this option is not given, or if the file for some reason

335

could not be used, the parameters will be generated on

336

startup, which will take some time and processing power.

337

Those using servers running under time, power or processor

338

constraints may want to generate such a file in advance

339

and use this option.

315

340

</para>

316

341

</listitem>

317

342

</varlistentry>

444

469

445

470

446

471

<title>ENVIRONMENT</title>

472

473

474

<term><envar>MANDOSPLUGINHELPERDIR</envar></term>

475

476

<para>

477

This environment variable will be assumed to contain the

478

directory containing any helper executables. The use and

479

nature of these helper executables, if any, is

480

purposefully not documented.

481

</para>

482

</listitem>

483

</varlistentry>

484

</variablelist>

447

485

<para>

448

This program does not use any environment variables, not even

449

the ones provided by <citerefentry><refentrytitle

486

This program does not use any other environment variables, not

487

even the ones provided by <citerefentry><refentrytitle

450

488

>cryptsetup</refentrytitle><manvolnum>8</manvolnum>

451

489

</citerefentry>.

452

490

</para>

748

786

<para>

749

787

It will also help if the checker program on the server is

750

788

configured to request something from the client which can not be

751

spoofed by someone else on the network, unlike unencrypted

752

<acronym>ICMP</acronym> echo (<quote>ping</quote>) replies.

789

spoofed by someone else on the network, like SSH server key

790

fingerprints, and unlike unencrypted <acronym>ICMP</acronym>

791

echo (<quote>ping</quote>) replies.

753

792

</para>

754

793

<para>

755

794

<emphasis>Note</emphasis>: This makes it completely insecure to

Older »