Package: monkeysphere
Version: 0.31-1
Severity: wishlist

one of the primary things preventing me from encouraging use of monkeysphere
here at freegeek is that it requires use of fully qualified domain names.

while i understand the desire to not add many potentially non-unique UIDs to
the keyring, i'm wondering if it would be possible (perhaps with a commandline
option) for the monkeysphere ssh-proxycommand to append the search domain(s)
when someone attempts to connect to ssh without a FQDN. i.e.

if someone types:

  ssh foo

and the search domain was example.net, then the monkeysphere proxy would look
for:

  gpg --search '=ssh://foo.example.net' 

and append the key appropriately to known_hosts if it verifies correctly?


at the very least, it shouldn't try any monkeysphere magic when not ssh'ing to
a FQDN.


this comes up for me fairly often, as i sometimes connect to a service via
"foo.example.net", but sometimes connect to "foo" and manually verify the key.
monkeysphere deletes the entry for "foo" when i connect to "foo.example.net"
later.  this makes it difficult to use monkeysphere, unfortunately.


live well,
  vagrant


-- System Information:
Debian Release: squeeze/sid
  APT prefers testing
  APT policy: (500, 'testing'), (500, 'stable'), (102, 'unstable'), (101, 
'experimental')
Architecture: i386 (i686)

Kernel: Linux 2.6.32-5-686 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages monkeysphere depends on:
ii  adduser                       3.112      add and remove users and groups
ii  gnupg                         1.4.10-4   GNU privacy guard - a free PGP rep
ii  libcrypt-openssl-rsa-perl     0.25-1+b1  Perl module providing basic RSA fu
ii  lockfile-progs                0.1.15     Programs for locking and unlocking
ii  perl [libdigest-sha-perl]     5.10.1-14  Larry Wall's Practical Extraction 
ii  procmail                      3.22-19    Versatile e-mail processor

Versions of packages monkeysphere recommends:
ii  cron                         3.0pl1-114  process scheduling daemon
ii  netcat-traditional [netcat]  1.10-38     TCP/IP swiss army knife
ii  openssh-client               1:5.5p1-4   secure shell (SSH) client, for sec
ii  ssh-askpass                  1:1.2.4.1-9 under X, asks user for a passphras

Versions of packages monkeysphere suggests:
ii  msva-perl [monkeysphere-valid 0.3-1      Cryptographic identity validation 

-- no debconf information



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to