/mandos/release

To get this branch, use:
bzr branch http://bzr.recompile.se/loggerhead/mandos/release

« back to all changes in this revision

Viewing changes to mandos-keygen.xml

  • Committer: Teddy Hogeborn
  • Date: 2018-08-15 09:26:02 UTC
  • mto: (237.7.594 trunk)
  • mto: This revision was merged to the branch mainline in revision 368.
  • Revision ID: teddy@recompile.se-20180815092602-xoyb5s6gf8376i7u
http://bugs.debian.org/894495
mandos-client: Set system clock if necessary

* plugins.d/mandos-client.c (init_gpgme/import_key): If the system
  clock is not set, or set to january 1970, set the system clock to
  the more plausible value that is the mtime of the key file.  This is
  required by GnuPG to be able to import the keys.  (We can't pass the
  --ignore-time-conflict or the --ignore-valid-from options though
  GPGME.)

Show diffs side-by-side

added added

removed removed

Lines of Context:
mandos-keygen.xml
2
2
<!DOCTYPE refentry PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3
3
        "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4
4
<!ENTITY COMMANDNAME "mandos-keygen">
5
 
<!ENTITY TIMESTAMP "2008-10-03">
 
5
<!ENTITY TIMESTAMP "2018-02-08">
6
6
<!ENTITY % common SYSTEM "common.ent">
7
7
%common;
8
8
]>
19
19
        <firstname>Björn</firstname>
20
20
        <surname>Påhlsson</surname>
21
21
        <address>
22
 
          <email>belorn@fukt.bsnet.se</email>
 
22
          <email>belorn@recompile.se</email>
23
23
        </address>
24
24
      </author>
25
25
      <author>
26
26
        <firstname>Teddy</firstname>
27
27
        <surname>Hogeborn</surname>
28
28
        <address>
29
 
          <email>teddy@fukt.bsnet.se</email>
 
29
          <email>teddy@recompile.se</email>
30
30
        </address>
31
31
      </author>
32
32
    </authorgroup>
33
33
    <copyright>
34
34
      <year>2008</year>
 
35
      <year>2009</year>
 
36
      <year>2010</year>
 
37
      <year>2011</year>
 
38
      <year>2012</year>
 
39
      <year>2013</year>
 
40
      <year>2014</year>
 
41
      <year>2015</year>
 
42
      <year>2016</year>
 
43
      <year>2017</year>
 
44
      <year>2018</year>
35
45
      <holder>Teddy Hogeborn</holder>
36
46
      <holder>Björn Påhlsson</holder>
37
47
    </copyright>
116
126
        <replaceable>TIME</replaceable></option></arg>
117
127
      </group>
118
128
      <sbr/>
119
 
      <arg><option>--force</option></arg>
 
129
      <group>
 
130
        <arg choice="plain"><option>--force</option></arg>
 
131
        <arg choice="plain"><option>-f</option></arg>
 
132
      </group>
120
133
    </cmdsynopsis>
121
134
    <cmdsynopsis>
122
135
      <command>&COMMANDNAME;</command>
142
155
        <arg choice="plain"><option>-n
143
156
        <replaceable>NAME</replaceable></option></arg>
144
157
      </group>
 
158
      <group>
 
159
        <arg choice="plain"><option>--no-ssh</option></arg>
 
160
        <arg choice="plain"><option>-S</option></arg>
 
161
      </group>
145
162
    </cmdsynopsis>
146
163
    <cmdsynopsis>
147
164
      <command>&COMMANDNAME;</command>
212
229
        <listitem>
213
230
          <para>
214
231
            Target directory for key files.  Default is
215
 
            <filename>/etc/mandos</filename>.
 
232
            <filename class="directory">/etc/mandos</filename>.
216
233
          </para>
217
234
        </listitem>
218
235
      </varlistentry>
224
241
        <replaceable>TYPE</replaceable></option></term>
225
242
        <listitem>
226
243
          <para>
227
 
            Key type.  Default is <quote>DSA</quote>.
 
244
            Key type.  Default is <quote>RSA</quote>.
228
245
          </para>
229
246
        </listitem>
230
247
      </varlistentry>
236
253
        <replaceable>BITS</replaceable></option></term>
237
254
        <listitem>
238
255
          <para>
239
 
            Key length in bits.  Default is 2048.
 
256
            Key length in bits.  Default is 4096.
240
257
          </para>
241
258
        </listitem>
242
259
      </varlistentry>
248
265
        <replaceable>KEYTYPE</replaceable></option></term>
249
266
        <listitem>
250
267
          <para>
251
 
            Subkey type.  Default is <quote>ELG-E</quote> (Elgamal
 
268
            Subkey type.  Default is <quote>RSA</quote> (Elgamal
252
269
            encryption-only).
253
270
          </para>
254
271
        </listitem>
261
278
        <replaceable>BITS</replaceable></option></term>
262
279
        <listitem>
263
280
          <para>
264
 
            Subkey length in bits.  Default is 2048.
 
281
            Subkey length in bits.  Default is 4096.
265
282
          </para>
266
283
        </listitem>
267
284
      </varlistentry>
285
302
        <replaceable>TEXT</replaceable></option></term>
286
303
        <listitem>
287
304
          <para>
288
 
            Comment field for key.  The default value is
289
 
            <quote><literal>Mandos client key</literal></quote>.
 
305
            Comment field for key.  Default is empty.
290
306
          </para>
291
307
        </listitem>
292
308
      </varlistentry>
344
360
          </para>
345
361
        </listitem>
346
362
      </varlistentry>
 
363
      <varlistentry>
 
364
        <term><option>--no-ssh</option></term>
 
365
        <term><option>-S</option></term>
 
366
        <listitem>
 
367
          <para>
 
368
            When <option>--password</option> or
 
369
            <option>--passfile</option> is given, this option will
 
370
            prevent <command>&COMMANDNAME;</command> from calling
 
371
            <command>ssh-keyscan</command> to get an SSH fingerprint
 
372
            for this host and, if successful, output suitable config
 
373
            options to use this fingerprint as a
 
374
            <option>checker</option> option in the output.  This is
 
375
            otherwise the default behavior.
 
376
          </para>
 
377
        </listitem>
 
378
      </varlistentry>
347
379
    </variablelist>
348
380
  </refsect1>
349
381
  
409
441
        </listitem>
410
442
      </varlistentry>
411
443
      <varlistentry>
412
 
        <term><filename>/tmp</filename></term>
 
444
        <term><filename class="directory">/tmp</filename></term>
413
445
        <listitem>
414
446
          <para>
415
447
            Temporary files will be written here if
420
452
    </variablelist>
421
453
  </refsect1>
422
454
  
423
 
<!--   <refsect1 id="bugs"> -->
424
 
<!--     <title>BUGS</title> -->
425
 
<!--     <para> -->
426
 
<!--     </para> -->
427
 
<!--   </refsect1> -->
 
455
  <refsect1 id="bugs">
 
456
    <title>BUGS</title>
 
457
    <xi:include href="bugs.xml"/>
 
458
  </refsect1>
428
459
  
429
460
  <refsect1 id="example">
430
461
    <title>EXAMPLE</title>
450
481
    </informalexample>
451
482
    <informalexample>
452
483
      <para>
453
 
        Prompt for a password, encrypt it with the key in
454
 
        <filename>/etc/mandos</filename> and output a section suitable
455
 
        for <filename>clients.conf</filename>.
 
484
        Prompt for a password, encrypt it with the key in <filename
 
485
        class="directory">/etc/mandos</filename> and output a section
 
486
        suitable for <filename>clients.conf</filename>.
456
487
      </para>
457
488
      <para>
458
489
        <userinput>&COMMANDNAME; --password</userinput>
491
522
  <refsect1 id="see_also">
492
523
    <title>SEE ALSO</title>
493
524
    <para>
 
525
      <citerefentry><refentrytitle>intro</refentrytitle>
 
526
      <manvolnum>8mandos</manvolnum></citerefentry>,
494
527
      <citerefentry><refentrytitle>gpg</refentrytitle>
495
528
      <manvolnum>1</manvolnum></citerefentry>,
496
529
      <citerefentry><refentrytitle>mandos-clients.conf</refentrytitle>
498
531
      <citerefentry><refentrytitle>mandos</refentrytitle>
499
532
      <manvolnum>8</manvolnum></citerefentry>,
500
533
      <citerefentry><refentrytitle>mandos-client</refentrytitle>
501
 
      <manvolnum>8mandos</manvolnum></citerefentry>
 
534
      <manvolnum>8mandos</manvolnum></citerefentry>,
 
535
      <citerefentry><refentrytitle>ssh-keyscan</refentrytitle>
 
536
      <manvolnum>1</manvolnum></citerefentry>
502
537
    </para>
503
538
  </refsect1>
504
539