To get this branch, use:
bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk
« back to all changes in this revision
Viewing changes to plugins.d/password-request.xml
- browse files at revision 136
- compare with another revision
- download diff
- download tarball
- view history from revision 136
- Committer: Teddy Hogeborn
- Date: 2008-09-01 16:53:17 UTC
- Revision ID: teddy@fukt.bsnet.se-20080901165317-77dccp81zyqimt2j
* plugin-runner.c (add_environment): Override existing environment
variables when asked to do so.
All callers changed.
(main): Removed old argp.args_doc string. Parse argument file
before normal command line arguments. Use ARGP_IN_ORDER
flag in both calls to argp_parse. Do not strdup() strings
to be sent to add_environment().
* plugin-runner.xml (OPTIONS): Document "--global-env" and "--envs-for".
(FILES): Note that the config file is parsed before the command line
options.
variables when asked to do so.
All callers changed.
(main): Removed old argp.args_doc string. Parse argument file
before normal command line arguments. Use ARGP_IN_ORDER
flag in both calls to argp_parse. Do not strdup() strings
to be sent to add_environment().
* plugin-runner.xml (OPTIONS): Document "--global-env" and "--envs-for".
(FILES): Note that the config file is parsed before the command line
options.
- files added:
- plugins.d/usplash
- files removed:
- .bzr-builddeb
- debian
- debian/po
- debian/source
- files renamed:
- plugins.d/mandos-client.c => plugins.d/password-request.c
- plugins.d/mandos-client.xml => plugins.d/password-request.xml
- files modified:
- .bzrignore
added
removed
plugins.d/password-request.xml
1
1
<?xml version="1.0" encoding="UTF-8"?>
2
2
<!DOCTYPE refentry PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3
3
"http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4
<!ENTITY COMMANDNAME "mandos-client">
5
<!ENTITY TIMESTAMP "2010-09-26">
6
<!ENTITY % common SYSTEM "../common.ent">
7
%common;
4
<!ENTITY VERSION "1.0">
5
<!ENTITY COMMANDNAME "password-request">
6
<!ENTITY TIMESTAMP "2008-08-31">
8
7
]>
9
8
10
9
<refentry xmlns:xi="http://www.w3.org/2001/XInclude">
11
10
<refentryinfo>
12
11
<title>Mandos Manual</title>
13
<!-- NWalsh’s docbook scripts use this to generate the footer: -->
12
<!-- Nwalsh’s docbook scripts use this to generate the footer: -->
14
13
<productname>Mandos</productname>
15
<productnumber>&version;</productnumber>
14
<productnumber>&VERSION;</productnumber>
16
15
<date>&TIMESTAMP;</date>
17
16
<authorgroup>
18
17
<author>
32
31
</authorgroup>
33
32
<copyright>
34
33
<year>2008</year>
35
<year>2009</year>
36
34
<holder>Teddy Hogeborn</holder>
37
35
<holder>Björn Påhlsson</holder>
38
36
</copyright>
39
37
<xi:include href="../legalnotice.xml"/>
40
38
</refentryinfo>
41
39
42
40
<refmeta>
43
41
<refentrytitle>&COMMANDNAME;</refentrytitle>
44
42
<manvolnum>8mandos</manvolnum>
47
45
<refnamediv>
48
46
<refname><command>&COMMANDNAME;</command></refname>
49
47
<refpurpose>
50
Client for <application>Mandos</application>
48
Client for mandos
51
49
</refpurpose>
52
50
</refnamediv>
53
51
54
52
<refsynopsisdiv>
55
53
<cmdsynopsis>
56
54
<command>&COMMANDNAME;</command>
57
55
<group>
58
56
<arg choice="plain"><option>--connect
59
<replaceable>ADDRESS</replaceable><literal>:</literal
57
<replaceable>IPADDR</replaceable><literal>:</literal
60
58
><replaceable>PORT</replaceable></option></arg>
61
59
<arg choice="plain"><option>-c
62
<replaceable>ADDRESS</replaceable><literal>:</literal
60
<replaceable>IPADDR</replaceable><literal>:</literal
63
61
><replaceable>PORT</replaceable></option></arg>
64
62
</group>
65
63
<sbr/>
66
64
<group>
65
<arg choice="plain"><option>--keydir
66
<replaceable>DIRECTORY</replaceable></option></arg>
67
<arg choice="plain"><option>-d
68
<replaceable>DIRECTORY</replaceable></option></arg>
69
</group>
70
<sbr/>
71
<group>
67
72
<arg choice="plain"><option>--interface
68
73
<replaceable>NAME</replaceable></option></arg>
69
74
<arg choice="plain"><option>-i
93
98
</arg>
94
99
<sbr/>
95
100
<arg>
96
<option>--delay <replaceable>SECONDS</replaceable></option>
97
</arg>
98
<sbr/>
99
<arg>
100
<option>--retry <replaceable>SECONDS</replaceable></option>
101
</arg>
102
<sbr/>
103
<arg>
104
101
<option>--debug</option>
105
102
</arg>
106
103
</cmdsynopsis>
123
120
</group>
124
121
</cmdsynopsis>
125
122
</refsynopsisdiv>
126
123
127
124
<refsect1 id="description">
128
125
<title>DESCRIPTION</title>
129
126
<para>
130
<command>&COMMANDNAME;</command> is a client program that
131
communicates with <citerefentry><refentrytitle
132
>mandos</refentrytitle><manvolnum>8</manvolnum></citerefentry>
133
to get a password. In slightly more detail, this client program
134
brings up a network interface, uses the interface’s IPv6
135
link-local address to get network connectivity, uses Zeroconf to
136
find servers on the local network, and communicates with servers
137
using TLS with an OpenPGP key to ensure authenticity and
138
confidentiality. This client program keeps running, trying all
139
servers on the network, until it receives a satisfactory reply
140
or a TERM signal is received. If no servers are found, or after
141
all servers have been tried, it waits indefinitely for new
142
servers to appear.
143
</para>
144
<para>
145
This program is not meant to be run directly; it is really meant
146
to run as a plugin of the <application>Mandos</application>
147
<citerefentry><refentrytitle>plugin-runner</refentrytitle>
148
<manvolnum>8mandos</manvolnum></citerefentry>, which runs in the
149
initial <acronym>RAM</acronym> disk environment because it is
150
specified as a <quote>keyscript</quote> in the <citerefentry>
151
<refentrytitle>crypttab</refentrytitle><manvolnum>5</manvolnum>
152
</citerefentry> file.
153
</para>
154
</refsect1>
155
156
<refsect1 id="purpose">
157
<title>PURPOSE</title>
158
<para>
159
The purpose of this is to enable <emphasis>remote and unattended
160
rebooting</emphasis> of client host computer with an
161
<emphasis>encrypted root file system</emphasis>. See <xref
162
linkend="overview"/> for details.
127
<command>&COMMANDNAME;</command> is a mandos plugin that works
128
like a client program that through avahi detects mandos servers,
129
sets up a gnutls connect and request a encrypted password. Any
130
passwords given is automaticly decrypted and passed to
131
cryptsetup.
163
132
</para>
164
133
</refsect1>
165
134
166
135
<refsect1 id="options">
167
136
<title>OPTIONS</title>
168
137
<para>
169
This program is commonly not invoked from the command line; it
170
is normally started by the <application>Mandos</application>
171
plugin runner, see <citerefentry><refentrytitle
172
>plugin-runner</refentrytitle><manvolnum>8mandos</manvolnum>
173
</citerefentry>. Any command line options this program accepts
174
are therefore normally provided by the plugin runner, and not
175
directly.
138
Commonly not invoked as command lines but from configuration
139
file of plugin runner.
176
140
</para>
177
141
178
142
<variablelist>
179
143
<varlistentry>
180
144
<term><option>--connect=<replaceable
181
>ADDRESS</replaceable><literal>:</literal><replaceable
145
>IPADDR</replaceable><literal>:</literal><replaceable
182
146
>PORT</replaceable></option></term>
183
147
<term><option>-c
184
<replaceable>ADDRESS</replaceable><literal>:</literal
148
<replaceable>IPADDR</replaceable><literal>:</literal
185
149
><replaceable>PORT</replaceable></option></term>
186
150
<listitem>
187
151
<para>
188
Do not use Zeroconf to locate servers. Connect directly
189
to only one specified <application>Mandos</application>
190
server. Note that an IPv6 address has colon characters in
191
it, so the <emphasis>last</emphasis> colon character is
192
assumed to separate the address from the port number.
152
Connect directly to a specified mandos server
193
153
</para>
154
</listitem>
155
</varlistentry>
156
157
<varlistentry>
158
<term><option>--keydir=<replaceable
159
>DIRECTORY</replaceable></option></term>
160
<term><option>-d
161
<replaceable>DIRECTORY</replaceable></option></term>
162
<listitem>
194
163
<para>
195
This option is normally only useful for testing and
196
debugging.
164
Directory where the openpgp keyring is
197
165
</para>
198
166
</listitem>
199
167
</varlistentry>
200
168
201
169
<varlistentry>
202
<term><option>--interface=<replaceable
203
>NAME</replaceable></option></term>
170
<term><option>--interface=
171
<replaceable>NAME</replaceable></option></term>
204
172
<term><option>-i
205
173
<replaceable>NAME</replaceable></option></term>
206
174
<listitem>
207
175
<para>
208
Network interface that will be brought up and scanned for
209
Mandos servers to connect to. The default is the empty
210
string, which will automatically choose an appropriate
211
interface.
212
</para>
213
<para>
214
If the <option>--connect</option> option is used, this
215
specifies the interface to use to connect to the address
216
given.
217
</para>
218
<para>
219
Note that since this program will normally run in the
220
initial RAM disk environment, the interface must be an
221
interface which exists at that stage. Thus, the interface
222
can not be a pseudo-interface such as <quote>br0</quote>
223
or <quote>tun0</quote>; such interfaces will not exist
224
until much later in the boot process, and can not be used
225
by this program.
226
</para>
227
<para>
228
<replaceable>NAME</replaceable> can be the string
229
<quote><literal>none</literal></quote>; this will not use
230
any specific interface, and will not bring up an interface
231
on startup. This is not recommended, and only meant for
232
advanced users.
176
Interface that Avahi will connect through
233
177
</para>
234
178
</listitem>
235
179
</varlistentry>
236
180
237
181
<varlistentry>
238
182
<term><option>--pubkey=<replaceable
239
183
>FILE</replaceable></option></term>
241
185
<replaceable>FILE</replaceable></option></term>
242
186
<listitem>
243
187
<para>
244
OpenPGP public key file name. The default name is
245
<quote><filename>/conf/conf.d/mandos/pubkey.txt</filename
246
></quote>.
188
Public openpgp key for gnutls authentication
247
189
</para>
248
190
</listitem>
249
191
</varlistentry>
250
192
251
193
<varlistentry>
252
194
<term><option>--seckey=<replaceable
253
195
>FILE</replaceable></option></term>
255
197
<replaceable>FILE</replaceable></option></term>
256
198
<listitem>
257
199
<para>
258
OpenPGP secret key file name. The default name is
259
<quote><filename>/conf/conf.d/mandos/seckey.txt</filename
260
></quote>.
200
Secret OpenPGP key for GnuTLS authentication
261
201
</para>
262
202
</listitem>
263
203
</varlistentry>
266
206
<term><option>--priority=<replaceable
267
207
>STRING</replaceable></option></term>
268
208
<listitem>
269
<xi:include href="../mandos-options.xml"
270
xpointer="priority"/>
209
<para>
210
GnuTLS priority
211
</para>
271
212
</listitem>
272
213
</varlistentry>
273
214
274
215
<varlistentry>
275
216
<term><option>--dh-bits=<replaceable
276
217
>BITS</replaceable></option></term>
277
218
<listitem>
278
219
<para>
279
Sets the number of bits to use for the prime number in the
280
TLS Diffie-Hellman key exchange. Default is 1024.
281
</para>
282
</listitem>
283
</varlistentry>
284
285
<varlistentry>
286
<term><option>--delay=<replaceable
287
>SECONDS</replaceable></option></term>
288
<listitem>
289
<para>
290
After bringing the network interface up, the program waits
291
for the interface to arrive in a <quote>running</quote>
292
state before proceeding. During this time, the kernel log
293
level will be lowered to reduce clutter on the system
294
console, alleviating any other plugins which might be
295
using the system console. This option sets the upper
296
limit of seconds to wait. The default is 2.5 seconds.
297
</para>
298
</listitem>
299
</varlistentry>
300
301
<varlistentry>
302
<term><option>--retry=<replaceable
303
>SECONDS</replaceable></option></term>
304
<listitem>
305
<para>
306
All Mandos servers servers are tried repeatedly until a
307
password is received. This value specifies, in seconds,
308
how long between each successive try <emphasis>for the
309
same server</emphasis>. The default is 10 seconds.
220
DH bits to use in gnutls communication
310
221
</para>
311
222
</listitem>
312
223
</varlistentry>
315
226
<term><option>--debug</option></term>
316
227
<listitem>
317
228
<para>
318
Enable debug mode. This will enable a lot of output to
319
standard error about what the program is doing. The
320
program will still perform all other functions normally.
321
</para>
322
<para>
323
It will also enable debug mode in the Avahi and GnuTLS
324
libraries, making them print large amounts of debugging
325
output.
229
Debug mode
326
230
</para>
327
231
</listitem>
328
232
</varlistentry>
332
236
<term><option>-?</option></term>
333
237
<listitem>
334
238
<para>
335
Gives a help message about options and their meanings.
239
Gives a help message
336
240
</para>
337
241
</listitem>
338
242
</varlistentry>
341
245
<term><option>--usage</option></term>
342
246
<listitem>
343
247
<para>
344
Gives a short usage message.
248
Gives a short usage message
345
249
</para>
346
250
</listitem>
347
251
</varlistentry>
348
252
349
253
<varlistentry>
350
254
<term><option>--version</option></term>
351
255
<term><option>-V</option></term>
352
256
<listitem>
353
257
<para>
354
Prints the program version.
258
Prints the program version
355
259
</para>
356
260
</listitem>
357
261
</varlistentry>
358
262
</variablelist>
359
263
</refsect1>
360
361
<refsect1 id="overview">
362
<title>OVERVIEW</title>
363
<xi:include href="../overview.xml"/>
364
<para>
365
This program is the client part. It is a plugin started by
366
<citerefentry><refentrytitle>plugin-runner</refentrytitle>
367
<manvolnum>8mandos</manvolnum></citerefentry> which will run in
368
an initial <acronym>RAM</acronym> disk environment.
369
</para>
370
<para>
371
This program could, theoretically, be used as a keyscript in
372
<filename>/etc/crypttab</filename>, but it would then be
373
impossible to enter a password for the encrypted root disk at
374
the console, since this program does not read from the console
375
at all. This is why a separate plugin runner (<citerefentry>
376
<refentrytitle>plugin-runner</refentrytitle>
377
<manvolnum>8mandos</manvolnum></citerefentry>) is used to run
378
both this program and others in in parallel,
379
<emphasis>one</emphasis> of which will prompt for passwords on
380
the system console.
381
</para>
382
</refsect1>
383
264
384
265
<refsect1 id="exit_status">
385
266
<title>EXIT STATUS</title>
386
267
<para>
387
This program will exit with a successful (zero) exit status if a
388
server could be found and the password received from it could be
389
successfully decrypted and output on standard output. The
390
program will exit with a non-zero exit status only if a critical
391
error occurs. Otherwise, it will forever connect to new
392
<application>Mandos</application> servers as they appear, trying
393
to get a decryptable password and print it.
394
268
</para>
395
269
</refsect1>
396
270
397
271
<refsect1 id="environment">
398
272
<title>ENVIRONMENT</title>
399
273
<para>
400
This program does not use any environment variables, not even
401
the ones provided by <citerefentry><refentrytitle
402
>cryptsetup</refentrytitle><manvolnum>8</manvolnum>
403
</citerefentry>.
404
274
</para>
405
275
</refsect1>
406
407
<refsect1 id="files">
276
277
<refsect1 id="file">
408
278
<title>FILES</title>
409
<variablelist>
410
<varlistentry>
411
<term><filename>/conf/conf.d/mandos/pubkey.txt</filename
412
></term>
413
<term><filename>/conf/conf.d/mandos/seckey.txt</filename
414
></term>
415
<listitem>
416
<para>
417
OpenPGP public and private key files, in <quote>ASCII
418
Armor</quote> format. These are the default file names,
419
they can be changed with the <option>--pubkey</option> and
420
<option>--seckey</option> options.
421
</para>
422
</listitem>
423
</varlistentry>
424
</variablelist>
425
</refsect1>
426
427
<!-- <refsect1 id="bugs"> -->
428
<!-- <title>BUGS</title> -->
429
<!-- <para> -->
430
<!-- </para> -->
431
<!-- </refsect1> -->
432
279
<para>
280
</para>
281
</refsect1>
282
283
<refsect1 id="bugs">
284
<title>BUGS</title>
285
<para>
286
</para>
287
</refsect1>
288
433
289
<refsect1 id="example">
434
290
<title>EXAMPLE</title>
435
291
<para>
436
Note that normally, command line options will not be given
437
directly, but via options for the Mandos <citerefentry
438
><refentrytitle>plugin-runner</refentrytitle>
439
<manvolnum>8mandos</manvolnum></citerefentry>.
440
292
</para>
441
<informalexample>
442
<para>
443
Normal invocation needs no options, if the network interface
444
is <quote>eth0</quote>:
445
</para>
446
<para>
447
<userinput>&COMMANDNAME;</userinput>
448
</para>
449
</informalexample>
450
<informalexample>
451
<para>
452
Search for Mandos servers (and connect to them) using another
453
interface:
454
</para>
455
<para>
456
<!-- do not wrap this line -->
457
<userinput>&COMMANDNAME; --interface eth1</userinput>
458
</para>
459
</informalexample>
460
<informalexample>
461
<para>
462
Run in debug mode, and use a custom key:
463
</para>
464
<para>
465
466
<!-- do not wrap this line -->
467
<userinput>&COMMANDNAME; --debug --pubkey keydir/pubkey.txt --seckey keydir/seckey.txt</userinput>
468
469
</para>
470
</informalexample>
471
<informalexample>
472
<para>
473
Run in debug mode, with a custom key, and do not use Zeroconf
474
to locate a server; connect directly to the IPv6 link-local
475
address <quote><systemitem class="ipaddress"
476
>fe80::aede:48ff:fe71:f6f2</systemitem></quote>, port 4711,
477
using interface eth2:
478
</para>
479
<para>
480
481
<!-- do not wrap this line -->
482
<userinput>&COMMANDNAME; --debug --pubkey keydir/pubkey.txt --seckey keydir/seckey.txt --connect fe80::aede:48ff:fe71:f6f2:4711 --interface eth2</userinput>
483
484
</para>
485
</informalexample>
486
293
</refsect1>
487
294
488
295
<refsect1 id="security">
489
296
<title>SECURITY</title>
490
297
<para>
491
This program is set-uid to root, but will switch back to the
492
original (and presumably non-privileged) user and group after
493
bringing up the network interface.
494
</para>
495
<para>
496
To use this program for its intended purpose (see <xref
497
linkend="purpose"/>), the password for the root file system will
498
have to be given out to be stored in a server computer, after
499
having been encrypted using an OpenPGP key. This encrypted data
500
which will be stored in a server can only be decrypted by the
501
OpenPGP key, and the data will only be given out to those
502
clients who can prove they actually have that key. This key,
503
however, is stored unencrypted on the client side in its initial
504
<acronym>RAM</acronym> disk image file system. This is normally
505
readable by all, but this is normally fixed during installation
506
of this program; file permissions are set so that no-one is able
507
to read that file.
508
</para>
509
<para>
510
The only remaining weak point is that someone with physical
511
access to the client hard drive might turn off the client
512
computer, read the OpenPGP keys directly from the hard drive,
513
and communicate with the server. To safeguard against this, the
514
server is supposed to notice the client disappearing and stop
515
giving out the encrypted data. Therefore, it is important to
516
set the timeout and checker interval values tightly on the
517
server. See <citerefentry><refentrytitle
518
>mandos</refentrytitle><manvolnum>8</manvolnum></citerefentry>.
519
</para>
520
<para>
521
It will also help if the checker program on the server is
522
configured to request something from the client which can not be
523
spoofed by someone else on the network, unlike unencrypted
524
<acronym>ICMP</acronym> echo (<quote>ping</quote>) replies.
525
</para>
526
<para>
527
<emphasis>Note</emphasis>: This makes it completely insecure to
528
have <application >Mandos</application> clients which dual-boot
529
to another operating system which is <emphasis>not</emphasis>
530
trusted to keep the initial <acronym>RAM</acronym> disk image
531
confidential.
532
298
</para>
533
299
</refsect1>
534
300
535
301
<refsect1 id="see_also">
536
302
<title>SEE ALSO</title>
537
303
<para>
538
<citerefentry><refentrytitle>cryptsetup</refentrytitle>
539
<manvolnum>8</manvolnum></citerefentry>,
540
<citerefentry><refentrytitle>crypttab</refentrytitle>
541
<manvolnum>5</manvolnum></citerefentry>,
542
304
<citerefentry><refentrytitle>mandos</refentrytitle>
543
305
<manvolnum>8</manvolnum></citerefentry>,
544
306
<citerefentry><refentrytitle>password-prompt</refentrytitle>
546
308
<citerefentry><refentrytitle>plugin-runner</refentrytitle>
547
309
<manvolnum>8mandos</manvolnum></citerefentry>
548
310
</para>
549
<variablelist>
550
<varlistentry>
551
<term>
552
<ulink url="http://www.zeroconf.org/">Zeroconf</ulink>
553
</term>
554
<listitem>
555
<para>
556
Zeroconf is the network protocol standard used for finding
557
Mandos servers on the local network.
558
</para>
559
</listitem>
560
</varlistentry>
561
<varlistentry>
562
<term>
563
<ulink url="http://www.avahi.org/">Avahi</ulink>
564
</term>
565
<listitem>
566
<para>
567
Avahi is the library this program calls to find Zeroconf
568
services.
569
</para>
570
</listitem>
571
</varlistentry>
572
<varlistentry>
573
<term>
574
<ulink url="http://www.gnu.org/software/gnutls/"
575
>GnuTLS</ulink>
576
</term>
577
<listitem>
578
<para>
579
GnuTLS is the library this client uses to implement TLS for
580
communicating securely with the server, and at the same time
581
send the public OpenPGP key to the server.
582
</para>
583
</listitem>
584
</varlistentry>
585
<varlistentry>
586
<term>
587
<ulink url="http://www.gnupg.org/related_software/gpgme/"
588
>GPGME</ulink>
589
</term>
590
<listitem>
591
<para>
592
GPGME is the library used to decrypt the OpenPGP data sent
593
by the server.
594
</para>
595
</listitem>
596
</varlistentry>
597
<varlistentry>
598
<term>
599
RFC 4291: <citetitle>IP Version 6 Addressing
600
Architecture</citetitle>
601
</term>
602
<listitem>
603
<variablelist>
604
<varlistentry>
605
<term>Section 2.2: <citetitle>Text Representation of
606
Addresses</citetitle></term>
607
<listitem><para/></listitem>
608
</varlistentry>
609
<varlistentry>
610
<term>Section 2.5.5.2: <citetitle>IPv4-Mapped IPv6
611
Address</citetitle></term>
612
<listitem><para/></listitem>
613
</varlistentry>
614
<varlistentry>
615
<term>Section 2.5.6, <citetitle>Link-Local IPv6 Unicast
616
Addresses</citetitle></term>
617
<listitem>
618
<para>
619
This client uses IPv6 link-local addresses, which are
620
immediately usable since a link-local addresses is
621
automatically assigned to a network interfaces when it
622
is brought up.
623
</para>
624
</listitem>
625
</varlistentry>
626
</variablelist>
627
</listitem>
628
</varlistentry>
629
<varlistentry>
630
<term>
631
RFC 4346: <citetitle>The Transport Layer Security (TLS)
632
Protocol Version 1.1</citetitle>
633
</term>
634
<listitem>
635
<para>
636
TLS 1.1 is the protocol implemented by GnuTLS.
637
</para>
638
</listitem>
639
</varlistentry>
640
<varlistentry>
641
<term>
642
RFC 4880: <citetitle>OpenPGP Message Format</citetitle>
643
</term>
644
<listitem>
645
<para>
646
The data received from the server is binary encrypted
647
OpenPGP data.
648
</para>
649
</listitem>
650
</varlistentry>
651
<varlistentry>
652
<term>
653
RFC 5081: <citetitle>Using OpenPGP Keys for Transport Layer
654
Security</citetitle>
655
</term>
656
<listitem>
657
<para>
658
This is implemented by GnuTLS and used by this program so
659
that OpenPGP keys can be used.
660
</para>
661
</listitem>
662
</varlistentry>
663
</variablelist>
311
<itemizedlist>
312
<listitem><para>
313
<ulink url="http://www.zeroconf.org/">Zeroconf</ulink>
314
</para></listitem>
315
316
<listitem><para>
317
<ulink url="http://www.avahi.org/">Avahi</ulink>
318
</para></listitem>
319
320
<listitem><para>
321
<ulink
322
url="http://www.gnu.org/software/gnutls/">GnuTLS</ulink>
323
</para></listitem>
324
325
<listitem><para>
326
<ulink
327
url="http://www.gnupg.org/related_software/gpgme/">
328
GPGME</ulink>
329
</para></listitem>
330
331
<listitem><para>
332
<citation>RFC 4880: <citetitle>OpenPGP Message
333
Format</citetitle></citation>
334
</para></listitem>
335
336
<listitem><para>
337
<citation>RFC 5081: <citetitle>Using OpenPGP Keys for
338
Transport Layer Security</citetitle></citation>
339
</para></listitem>
340
341
<listitem><para>
342
<citation>RFC 4291: <citetitle>IP Version 6 Addressing
343
Architecture</citetitle>, section 2.5.6, Link-Local IPv6
344
Unicast Addresses</citation>
345
</para></listitem>
346
</itemizedlist>
664
347
</refsect1>
348
665
349
</refentry>
666
667
350
<!-- Local Variables: -->
668
351
<!-- time-stamp-start: "<!ENTITY TIMESTAMP [\"']" -->
669
352
<!-- time-stamp-end: "[\"']>" -->
Loggerhead is a web-based interface for Breezy
Version: 2.0.2.dev0