/mandos/release

To get this branch, use:
bzr branch http://bzr.recompile.se/loggerhead/mandos/release

« back to all changes in this revision

Viewing changes to INSTALL

  • Committer: Teddy Hogeborn
  • Date: 2019-02-10 03:50:20 UTC
  • mto: (237.7.594 trunk)
  • mto: This revision was merged to the branch mainline in revision 370.
  • Revision ID: teddy@recompile.se-20190210035020-nttr1tybgwwixueu
http://bugs.debian.org/879538
http://bugs.debian.org/916673
Show debconf note about new TLS key IDs

If mandos-client did not see TLS keys and had to create them, or if
mandos sees GnuTLS version 3.6.6 or later, show an important notice on
package installation about the importance of adding the new key_id
options to clients.conf on the Mandos server.

* debian/control (Package: mandos, Package: mandos-client): Depend on
                                                            debconf.
* debian/mandos-client.lintian-overrides: Override warnings.
* debian/mandos-client.postinst (create_keys): Show notice if new TLS
                                               key files were created.
* debian/mandos-client.templates: New.
* debian/mandos.lintian-overrides: Override warnings.
* debian/mandos.postinst (configure): If GnuTLS 3.6.6 or later is
                                      detected, show an important
                                      notice (once) about the new
                                      key_id option required in
                                      clients.conf.
* debian/mandos.templates: New.

Show diffs side-by-side

added added

removed removed

Lines of Context:
INSTALL
38
38
    "man -l mandos.8".
39
39
    
40
40
*** Mandos Server
41
 
    + GnuTLS 3.3          http://www.gnutls.org/
 
41
    + GnuTLS 3.3          https://www.gnutls.org/
 
42
      (but not 3.6.0 or later, until 3.6.6, which works)
42
43
    + Avahi 0.6.16        http://www.avahi.org/
43
44
    + Python 2.7          https://www.python.org/
44
 
    + dbus-python 0.82.4  http://dbus.freedesktop.org/doc/dbus-python/
45
 
    + PyGObject 2.14.2    https://developer.gnome.org/pygobject/
46
 
    + pkg-config  http://www.freedesktop.org/wiki/Software/pkg-config/
 
45
    + dbus-python 0.82.4 https://dbus.freedesktop.org/doc/dbus-python/
 
46
    + PyGObject 3.7.1     https://wiki.gnome.org/Projects/PyGObject
 
47
    + pkg-config https://www.freedesktop.org/wiki/Software/pkg-config/
47
48
    + Urwid 1.0.1         http://urwid.org/
48
49
      (Only needed by the "mandos-monitor" tool.)
49
50
    
52
53
    + ssh-keyscan from OpenSSH http://www.openssh.com/
53
54
    
54
55
    Package names:
55
 
    avahi-daemon python python-avahi python-dbus python-gobject
56
 
    python-urwid pkg-config fping ssh-client
 
56
    avahi-daemon python python-dbus python-gi python-urwid pkg-config
 
57
    fping ssh-client
57
58
    
58
59
*** Mandos Client
 
60
    + GNU C Library 2.16 https://gnu.org/software/libc/
59
61
    + initramfs-tools 0.85i
60
62
                        https://tracker.debian.org/pkg/initramfs-tools
61
 
    + GnuTLS 3.3        http://www.gnutls.org/
 
63
    + GnuTLS 3.3        https://www.gnutls.org/
 
64
      (but not 3.6.0 or later, until 3.6.6 which works)
62
65
    + Avahi 0.6.16      http://www.avahi.org/
63
66
    + GnuPG 1.4.9       https://www.gnupg.org/
64
67
    + GPGME 1.1.6       https://www.gnupg.org/related_software/gpgme/
65
 
    + pkg-config  http://www.freedesktop.org/wiki/Software/pkg-config/
 
68
    + pkg-config https://www.freedesktop.org/wiki/Software/pkg-config/
66
69
    
67
70
    Strongly recommended:
68
71
    + OpenSSH           http://www.openssh.com/
69
72
    
70
73
    Package names:
71
 
    initramfs-tools libgnutls-dev libavahi-core-dev gnupg
 
74
    initramfs-tools libgnutls-dev gnutls-bin libavahi-core-dev gnupg
72
75
    libgpgme11-dev pkg-config ssh
73
76
 
74
77
* Installing the Mandos server
122
125
     
123
126
        # /usr/lib/mandos/plugins.d/mandos-client \
124
127
                --pubkey=/etc/keys/mandos/pubkey.txt \
125
 
                --seckey=/etc/keys/mandos/seckey.txt; echo
 
128
                --seckey=/etc/keys/mandos/seckey.txt \
 
129
                --tls-privkey=/etc/keys/mandos/tls-privkey.pem \
 
130
                --tls-pubkey=/etc/keys/mandos/tls-pubkey.pem; echo
126
131
     
127
132
     This command should retrieve the password from the server,
128
133
     decrypt it, and output it to standard output.