To get this branch, use:
bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk
- Committer: Teddy Hogeborn
- Date: 2024-11-24 00:44:25 UTC
- Revision ID: teddy@recompile.se-20241124004425-6k3y0ir1ksyjq3c4
mandos-keygen: Show warning about old OpenSSH versions
When generating a config file snippet on the Mandos client system
using mandos-keygen, and the default ssh-keyscan checker is used, and
if the OpenSSH version is 9.8 or later, the "checker" command
generated for the config file on the Mandos server will include the
"-q" option for ssh-keyscan. This option did not exist on ssh-keyscan
from OpenSSH older than version 9.8. Therefore, if the Mandos
*server* is running an older version of OpenSSH, where ssh-keyscan
does not support the "-q" option, this option must be removed from the
generated "checker" setting. Since we cannot know if this is the case
when running mandos-keygen on the Mandos client system, we print this
information as a comment above the generated "checker" setting.
* mandos-keygen: Show warning if the new "-q" options was used with
ssh-keyscan in the generated "checker" setting.
When generating a config file snippet on the Mandos client system
using mandos-keygen, and the default ssh-keyscan checker is used, and
if the OpenSSH version is 9.8 or later, the "checker" command
generated for the config file on the Mandos server will include the
"-q" option for ssh-keyscan. This option did not exist on ssh-keyscan
from OpenSSH older than version 9.8. Therefore, if the Mandos
*server* is running an older version of OpenSSH, where ssh-keyscan
does not support the "-q" option, this option must be removed from the
generated "checker" setting. Since we cannot know if this is the case
when running mandos-keygen on the Mandos client system, we print this
information as a comment above the generated "checker" setting.
* mandos-keygen: Show warning if the new "-q" options was used with
ssh-keyscan in the generated "checker" setting.
| Filename | Latest Rev | Last Changed | Committer | Comment | Size | ||
|---|---|---|---|---|---|---|---|
 .. |
|||||||
.bzr-builddeb
|
185 | 16 years ago | Teddy Hogeborn | * .bzr-builddeb/default.conf: New. * Makefile (in |
|
||
|
debian
|
185 | 16 years ago | Teddy Hogeborn | * .bzr-builddeb/default.conf: New. * Makefile (in |
|
||
|
dracut-module
|
1127 | 5 years ago | Teddy Hogeborn | Add dracut(8) support Add support for the dracut( |
|
||
|
network-hooks.d
|
505.3.10 | 13 years ago | Teddy Hogeborn | * network-hooks.d: New directory. * network-hooks. |
|
||
|
plugin-helpers
|
738.1.1 | 9 years ago | Teddy Hogeborn | Add a plugin helper directory, available to all pl |
|
||
|
plugins.d
|
13 | 16 years ago | Björn Påhlsson | Added following support: Pluginbased client handle |
|
||
.bzrignore |
1301 | 3 months ago | Teddy Hogeborn | Ignore some more files * .bzrignore: Ignore "cl", | 285 bytes |
|
|
|
bugs.xml |
821 | 8 years ago | Teddy Hogeborn | Add bug reporting information to manual pages * b | 539 bytes |
|
|
|
clients.conf |
1265 | 1 year ago | Teddy Hogeborn | Clarify documentation and a comment about GnuTLS v | 3.5 KB |
|
|
|
common.ent |
237.4.142 | 3 months ago | Teddy Hogeborn | Version 1.8.17-1 * Makefile (version): Change to | 94 bytes |
|
|
|
COPYING |
24.1.51 | 16 years ago | Björn Påhlsson | Added configuration files support for mandos-clien | 34.2 KB |
|
|
|
DBUS-API |
1218 | 4 years ago | teddy at recompile | Update copyright year * DBUS-API: Update copyrigh | 5.9 KB |
|
|
|
dbus-mandos.conf |
24.1.186 | 13 years ago | Björn Påhlsson | transitional stuff actually working documented cha | 820 bytes |
|
|
|
default-mandos |
185 | 16 years ago | Teddy Hogeborn | * .bzr-builddeb/default.conf: New. * Makefile (in | 174 bytes |
|
|
|
init.d-mandos |
927 | 6 years ago | Teddy Hogeborn | Remove unnecessary text left from old example init | 4.2 KB |
|
|
|
initramfs-tools-conf |
954 | 6 years ago | Teddy Hogeborn | Move UMASK setting to more proper place * Makefil | 695 bytes |
|
|
|
initramfs-tools-conf-hook |
1099 | 5 years ago | Teddy Hogeborn | Installation: Fix UMASK even if set by some other | 647 bytes |
|
|
initramfs-tools-hook |
1306 | 1 month ago | Teddy Hogeborn | Detect GPGME version correctly It seems that newe | 7.7 KB |
|
|
|
initramfs-tools-script |
1215 | 4 years ago | teddy at recompile | In initramfs-tools boots, only use setsid when ava | 4.6 KB |
|
|
|
initramfs-tools-script-stop |
956 | 6 years ago | Teddy Hogeborn | Set executable permissions on new files * initram | 1.8 KB |
|
|
|
initramfs-unpack |
1308 | 1 month ago | Teddy Hogeborn | initramfs-unpack: Support initramfs images compres | 2.8 KB |
|
|
|
INSTALL |
1186 | 5 years ago | Teddy Hogeborn | INSTALL: Add "-" argument to "su" invocations. | 5.8 KB |
|
|
|
intro.xml |
1259 | 2 years ago | Teddy Hogeborn | Update copyright year * debian/copyright: Update | 17.9 KB |
|
|
|
legalnotice.xml |
907 | 7 years ago | Teddy Hogeborn | Alter copyright notices slightly. Actual license | 1 KB |
|
|
|
Makefile |
1307 | 1 month ago | Teddy Hogeborn | Make binary directory configurable Reportedly, Ar | 22.7 KB |
|
|
|
mandos |
1311 | 1 month ago | Teddy Hogeborn | mandos: Make configured network socket non-inherit | 148 KB |
|
|
|
mandos-clients.conf.xml |
1265 | 1 year ago | Teddy Hogeborn | Clarify documentation and a comment about GnuTLS v | 19.7 KB |
|
|
|
mandos-ctl |
237.4.142 | 3 months ago | Teddy Hogeborn | Version 1.8.17-1 * Makefile (version): Change to | 109 KB |
|
|
|
mandos-ctl.xml |
1131 | 5 years ago | Teddy Hogeborn | Make tests and man page examples match Make the t | 17.8 KB |
|
|
|
mandos-keygen |
1315 | 29 days ago | Teddy Hogeborn | mandos-keygen: Show warning about old OpenSSH vers | 12.8 KB |
|
|
|
mandos-keygen.xml |
1120 | 5 years ago | Teddy Hogeborn | Document bug in mandos-keygen which strips white s | 16.8 KB |
|
|
|
mandos-monitor |
1314 | 1 month ago | Teddy Hogeborn | mandos-monitor: avoid deprecation warnings from ur | 29.5 KB |
|
|
|
mandos-monitor.xml |
969 | 5 years ago | Teddy Hogeborn | Update copyright year to 2019 * DBUS-API: Update | 6.3 KB |
|
|
|
mandos-options.xml |
1123 | 5 years ago | Teddy Hogeborn | Use hexadecimal unicode character references, not | 5.1 KB |
|
|
|
mandos-to-cryptroot-unlock |
1218 | 4 years ago | teddy at recompile | Update copyright year * DBUS-API: Update copyrigh | 2.5 KB |
|
|
|
mandos.conf |
777 | 9 years ago | Teddy Hogeborn | Bug fix for GnuTLS 3: be compatible with old 2048- | 1.6 KB |
|
|
|
mandos.conf.xml |
1277 | 3 months ago | Teddy Hogeborn | Improve documentation * mandos.conf.xml (DESCRIPT | 8.9 KB |
|
|
|
mandos.lsm |
237.4.142 | 3 months ago | Teddy Hogeborn | Version 1.8.17-1 * Makefile (version): Change to | 910 bytes |
|
|
|
mandos.service |
1203 | 4 years ago | teddy at recompile | Allow users to more easily alter mandos.service T | 1.2 KB |
|
|
|
mandos.xml |
1249 | 2 years ago | Teddy Hogeborn | Minor text adjustment in mandos(8) manual page * | 24.1 KB |
|
|
|
NEWS |
237.4.142 | 3 months ago | Teddy Hogeborn | Version 1.8.17-1 * Makefile (version): Change to | 22.6 KB |
|
|
|
overview.xml |
962 | 5 years ago | Teddy Hogeborn | Add support for using raw public keys in TLS (RFC | 923 bytes |
|
|
|
plugin-runner.c |
1259 | 2 years ago | Teddy Hogeborn | Update copyright year * debian/copyright: Update | 36.3 KB |
|
|
|
plugin-runner.conf |
342 | 15 years ago | Teddy Hogeborn | * initramfs-tools-hook: Bug fix: Add "--userid" an | 380 bytes |
|
|
|
plugin-runner.xml |
1277 | 3 months ago | Teddy Hogeborn | Improve documentation * mandos.conf.xml (DESCRIPT | 22.6 KB |
|
|
|
README |
844 | 8 years ago | Teddy Hogeborn | Use HTTPS in home page links Since we have a real | 410 bytes |
|
|
|
sysusers.d-mandos.conf |
1160 | 5 years ago | Teddy Hogeborn | Client: Use the systemd sysusers.d mechanism, if p | 167 bytes |
|
|
|
tmpfiles.d-mandos.conf |
838 | 8 years ago | Teddy Hogeborn | Server: New tmpfiles.d file for persistent state d | 38 bytes |
|
|
|
TODO |
1278 | 3 months ago | Teddy Hogeborn | Minor documentation improvements * TODO (mandos- | 5 KB |
|
|