/mandos/trunk

To get this branch, use:
bzr branch http://bzr.recompile.se/loggerhead/mandos/trunk

« back to all changes in this revision

Viewing changes to INSTALL

  • Committer: Teddy Hogeborn
  • Date: 2019-02-10 03:50:20 UTC
  • Revision ID: teddy@recompile.se-20190210035020-nttr1tybgwwixueu
http://bugs.debian.org/879538
http://bugs.debian.org/916673
Show debconf note about new TLS key IDs

If mandos-client did not see TLS keys and had to create them, or if
mandos sees GnuTLS version 3.6.6 or later, show an important notice on
package installation about the importance of adding the new key_id
options to clients.conf on the Mandos server.

* debian/control (Package: mandos, Package: mandos-client): Depend on
                                                            debconf.
* debian/mandos-client.lintian-overrides: Override warnings.
* debian/mandos-client.postinst (create_keys): Show notice if new TLS
                                               key files were created.
* debian/mandos-client.templates: New.
* debian/mandos.lintian-overrides: Override warnings.
* debian/mandos.postinst (configure): If GnuTLS 3.6.6 or later is
                                      detected, show an important
                                      notice (once) about the new
                                      key_id option required in
                                      clients.conf.
* debian/mandos.templates: New.

Show diffs side-by-side

added added

removed removed

Lines of Context:
INSTALL
38
38
    "man -l mandos.8".
39
39
    
40
40
*** Mandos Server
41
 
    + GnuTLS 3.3          http://www.gnutls.org/
 
41
    + GnuTLS 3.3          https://www.gnutls.org/
 
42
      (but not 3.6.0 or later, until 3.6.6, which works)
42
43
    + Avahi 0.6.16        http://www.avahi.org/
43
44
    + Python 2.7          https://www.python.org/
44
 
    + dbus-python 0.82.4  http://dbus.freedesktop.org/doc/dbus-python/
 
45
    + dbus-python 0.82.4 https://dbus.freedesktop.org/doc/dbus-python/
45
46
    + PyGObject 3.7.1     https://wiki.gnome.org/Projects/PyGObject
46
 
    + pkg-config  http://www.freedesktop.org/wiki/Software/pkg-config/
 
47
    + pkg-config https://www.freedesktop.org/wiki/Software/pkg-config/
47
48
    + Urwid 1.0.1         http://urwid.org/
48
49
      (Only needed by the "mandos-monitor" tool.)
49
50
    
59
60
    + GNU C Library 2.16 https://gnu.org/software/libc/
60
61
    + initramfs-tools 0.85i
61
62
                        https://tracker.debian.org/pkg/initramfs-tools
62
 
    + GnuTLS 3.3        http://www.gnutls.org/
 
63
    + GnuTLS 3.3        https://www.gnutls.org/
 
64
      (but not 3.6.0 or later, until 3.6.6 which works)
63
65
    + Avahi 0.6.16      http://www.avahi.org/
64
66
    + GnuPG 1.4.9       https://www.gnupg.org/
65
67
    + GPGME 1.1.6       https://www.gnupg.org/related_software/gpgme/
66
 
    + pkg-config  http://www.freedesktop.org/wiki/Software/pkg-config/
 
68
    + pkg-config https://www.freedesktop.org/wiki/Software/pkg-config/
67
69
    
68
70
    Strongly recommended:
69
71
    + OpenSSH           http://www.openssh.com/
70
72
    
71
73
    Package names:
72
 
    initramfs-tools libgnutls-dev libavahi-core-dev gnupg
 
74
    initramfs-tools libgnutls-dev gnutls-bin libavahi-core-dev gnupg
73
75
    libgpgme11-dev pkg-config ssh
74
76
 
75
77
* Installing the Mandos server
123
125
     
124
126
        # /usr/lib/mandos/plugins.d/mandos-client \
125
127
                --pubkey=/etc/keys/mandos/pubkey.txt \
126
 
                --seckey=/etc/keys/mandos/seckey.txt; echo
 
128
                --seckey=/etc/keys/mandos/seckey.txt \
 
129
                --tls-privkey=/etc/keys/mandos/tls-privkey.pem \
 
130
                --tls-pubkey=/etc/keys/mandos/tls-pubkey.pem; echo
127
131
     
128
132
     This command should retrieve the password from the server,
129
133
     decrypt it, and output it to standard output.