summaryrefslogtreecommitdiffhomepage
Commit message (Collapse)AuthorAge
* prep release0.20160922Joey Hess2016-09-22
|
* change json serialization for backup log once againJoey Hess2016-09-22
| | | | Adding field accessors makes the json nicer.
* updateJoey Hess2016-09-22
|
* In --autostart mode, check for gpg keys that have not been backed up, and ↵Joey Hess2016-09-22
| | | | | | | | offer to back them up. Only ask once per key. This commit was sponsored by Thomas Hochstein on Patreon.
* avoid zenity choking on something it seems to expect to be htmlJoey Hess2016-09-22
| | | | Not documented at all as expecting html in --text. Such bad documentation..
* changelogJoey Hess2016-09-22
|
* record already-existing backup in log after restoring a secret keyJoey Hess2016-09-22
| | | | | | | This will prevent --autostart from prompting to get the newly restored key backed up again. This commit was sponsored by Remy van Elst on Patreon.
* improve layoutJoey Hess2016-09-22
|
* change backup log format so it can also log when backup of a key was skippedJoey Hess2016-09-22
| | | | | | | | This will be used later when keysafe --autostart prompts if the user wants to back up their gpg key. Making the change now before the backup log format gets frozen. This commit was sponsored by Josh Taylor on Patreon.
* avoid crashing when moving from local storage directory that does not existJoey Hess2016-09-22
|
* Added --autostart mode and install FDO autostart fileJoey Hess2016-09-22
| | | | | | | | | | | | | | | | | | | | --autostart mode currently only uploads queued keys, but it will later be expanded to do more. Including checking the BackupRecord for problems when necessary. The autostart file is installed by keysafe --backup, so that when keysafe is installed with stack, and used, it will make sure it autostarts in the future. The autostart file is installed by the Makefile too. This will later let --autostart check for keys that have not been backed up and prompt about backing them up. This way, the user won't need to remember to run keysafe to back things up. Reused Utility.FreeDesktop from git-annex, and had to add some stuff it depends on. This commit was sponsored by Fernando Jimenez on Patreon.
* copy in Utility.UserInfo from git-annexJoey Hess2016-09-22
| | | | | This is worth doing to support falling back to HOME on systems using LDAP or NIS where getpwent fails.
* phony so make rebuildsJoey Hess2016-09-22
|
* changelogJoey Hess2016-09-22
|
* cleanupJoey Hess2016-09-22
|
* allow servers to have multiple or no addressesJoey Hess2016-09-22
| | | | | | | | | | | | | This allows the server list to contain 3 servers although only 1 is running so far; uploads to the others will be queued. It also allows a server to be spread amoung multiple addresses, which may be useful later for scaling. This changes BackupRecord serialization, but it's not been in a keysafe release yet, so that's not a problem. This commit was sponsored by Boyd Stephen Smith Jr. on Patreon.
* todoJoey Hess2016-09-16
|
* fix tar syntaxJoey Hess2016-09-16
|
* don't include path in tarballJoey Hess2016-09-16
|
* Added --backup-server and --restore-serverJoey Hess2016-09-15
| | | | | | To aid in backing up keysafe servers with minimal information leakage. This commit was sponsored by Andrea Rota.
* Change format of ~/.keysafe/backup.logJoey Hess2016-09-15
| | | | | | | Allow deserializing SecretKeySource so we can later know what gpg keys are backed up. Converted KeyId to Text as JSON can't handle ByteString.
* TODOJoey Hess2016-09-15
|
* chaff only the current object size, not old onesJoey Hess2016-09-14
|
* rejigger to avoid division underflowJoey Hess2016-09-14
|
* simplifyJoey Hess2016-09-14
|
* Make rate limiter adapt to ongoing load more quickly -- every 15 minutes ↵Joey Hess2016-09-14
| | | | instead of every 60.
* Reduce number of buckets in rate limiter, avoiding ones with very low proof ↵Joey Hess2016-09-14
| | | | | | | | of work. This got out of whack when sections were converted to rationals; there were buckets that needed trivial proofs of work, and having these extra buckets increased the total possible throughput.
* formatJoey Hess2016-09-14
|
* releasing package keysafe version 0.201609140.20160914Joey Hess2016-09-14
|
* cleanupJoey Hess2016-09-14
|
* Revert "add date to logger"Joey Hess2016-09-14
| | | | | | This reverts commit 0f0aa21ea11f6eae368326b178d4c3eaf5cc5186. Dunno why, but this prevents it printing anything. Needs investigation.
* catch exceptions in eg, tor socket setupJoey Hess2016-09-14
| | | | | | Socks can throw exceptions at connection time, and these are not caught by the ExceptT, so catch at a higher level, and catch all exceptions to prevent the client crashing.
* fixJoey Hess2016-09-14
|
* put back my serverJoey Hess2016-09-14
|
* updateJoey Hess2016-09-14
|
* Store information about backed up keys in ~/.keysafe/backup.logJoey Hess2016-09-14
| | | | | | | | This can be deleted by the user at any time, but it's useful in case a server is known to be compromised, or a problem is found with keysafe's implementation that makes a backup insecure. This commit was sponsored by Nick Daly on Patreon.
* use multiple threads for chaffingJoey Hess2016-09-14
|
* Added --chaff mode which uploads random junk to servers.Joey Hess2016-09-14
| | | | | | | | This is useful both to test the server throttling of uploads, and to make it harder for servers to know if an object actually contains secret key information. This commit was sponsored by Brock Spratlen on Patreon.
* rate limiting and PoW seem to work now!Joey Hess2016-09-14
|
* constructed the bloom filter wrongJoey Hess2016-09-14
|
* fix PoW deserializationJoey Hess2016-09-14
|
* Fix --uploadqueued bug that prevented deletion of local queued file.Joey Hess2016-09-14
|
* Warn when --uploadqueued fails to upload to servers.Joey Hess2016-09-14
|
* Warn when uploads fail and are put in the upload queue.Joey Hess2016-09-14
|
* Another fix to gpg secret key list parser.Joey Hess2016-09-14
| | | | | | | gpg2 2.1.15 seems to have added some new fields to the --with-colons --list-secret-keys output. These include "fpr" and "grp", and come before the "uid" line. So, the parser was giving up before it saw the name. Fix by continueing to look for the uid line until the next "sec" line.
* fix buildJoey Hess2016-09-14
|
* actually, that doesn't work so well, maxProofOfWork is not a power of 2Joey Hess2016-09-13
|
* another benchamrkJoey Hess2016-09-13
|
* updateJoey Hess2016-09-13
|
* use less expensive hash for proof of workJoey Hess2016-09-13
| | | | | | | | | | | | | | The server has to run the hash once to verify a request, so a hash that took 4 seconds could make the server do too much work if it's being flooded with requests. So, made the hash much less expensive. This required keeping track of fractional seconds. Actually, I used Rational for them, to avoid most rounding problems. That turned out nice. I've only tuned the proofOfWorkHashTunable on my fanless overheating laptop so far. It seems to be fairly reasonablly tuned though.