/mandos/release

To get this branch, use:
bzr branch http://bzr.recompile.se/loggerhead/mandos/release

« back to all changes in this revision

Viewing changes to TODO

  • Committer: Teddy Hogeborn
  • Date: 2016-10-08 04:11:22 UTC
  • mto: (237.7.594 trunk)
  • mto: This revision was merged to the branch mainline in revision 354.
  • Revision ID: teddy@recompile.se-20161008041122-xdqj4sw9h9i461fu
Fix bug when generating keys in a chroot environment.

* mandos-keygen (keygen): Use "%no-protection" statement in GnuPG
                          batch parameter file to make GnuPG 2.1 not
                          try to ask for a passphrase interactively.

Show diffs side-by-side

added added

removed removed

Lines of Context:
TODO
119
119
 
120
120
* [[http://www.undeadly.org/cgi?action=article&sid=20110530221728][OpenBSD]]
121
121
 
122
 
* TODO Use raw public keys (RFC 7250) for TLS communications              :2:
123
 
** Support for this is planned for GnuTLS version 3.6
124
 
   https://gitlab.com/gnutls/gnutls/issues/26
125
 
** Rationale
126
 
*** The client key is used both for communication and encryption
127
 
    Using raw keys in GnuTLS instead uses separate keys for
128
 
    communication and password decryption.
129
 
*** GnuTLS 3.5.9 has deprecated the OpenPGP functions
130
 
    The functions are still available, but deprecated:
131
 
    https://gitlab.com/gnutls/gnutls/issues/102
132
 
 
133
122
 
134
123
#+STARTUP: showall