summaryrefslogtreecommitdiffhomepage
Commit message (Collapse)AuthorAge
* releasing package keysafe version 0.201610070.20161007Joey Hess2016-10-20
|
* no need for init script +x in gitJoey Hess2016-10-18
|
* forgot to update the man page for all the recently added optionsJoey Hess2016-10-18
|
* fix modeJoey Hess2016-10-18
|
* updateJoey Hess2016-10-18
|
* /etc/default/keysafe is read by both the systemd service file and the init ↵Joey Hess2016-10-18
| | | | | | script, and contains configuration for the keysafe server. This commit was sponsored by Ole-Morten Duesund on Patreon.
* Added a LSB init script, for non-systemd systems.Joey Hess2016-10-18
| | | | | | | (It currently uses Debian's start-stop-daemon, so would need porting for other distributions.) This commit was sponsored by Fernando Jimenez on Patreon.
* Argon2dJoey Hess2016-10-18
|
* Removed dependency on crypto-random.Joey Hess2016-10-07
| | | | | | | | Use raaz for random bytestring generation exclusively. It was already used in all important places, but chaffing was using crypto-random. Note that System.Random is used for delays during chaffing and by random-shuffle.
* test writability with a long filenameJoey Hess2016-10-06
|
* thoughtJoey Hess2016-10-06
|
* Check if --store-local directory is writable.Joey Hess2016-10-06
| | | | | | | | | | | | | | | | | | | | If run with --totalshares larger than the number of servers, and the --store-local directory is not writable, this causes keysafe to throw out the unwritable directory and so error out early due to their not being enough storage locations. That's better than the old behavior, which was to try to use the --store-local directory, fail and so proceed to storing the share on a server. That would eventually fail with "no storage locations" when it runs out of servers. That was bad, because shares were uploaded to servers, but perhaps not enough for restore to work, and a new name/othername would be needed to re-run the backup. This is not a perfect fix; if the --store-local directory is writable at first but for some reason the write of the share to it later fails, the situation described above still happens. This commit was sponsored by Jochen Bartl on Patreon.
* prep release0.20161006Joey Hess2016-10-06
|
* Gpg keyid bugsJoey Hess2016-10-06
| | | | | | | | | | | | | | Fix bugs with entry of gpg keyid in the keysafe.log. Gpg.anyKey was being used in writing the log, which made the log contain gpg keys with an empty keyid. Fix bug in --autostart that caused the full gpg keyid to be used in the name, so restores would only work when --gpgkeyid was specifid. Added a Distinguisher data type rather than the Gpg.anyKey hack. This commit was sponsored by Thom May on Patreon.
* updateJoey Hess2016-10-06
|
* New --add-storage-directory and --add-server optionsJoey Hess2016-10-06
| | | | | | | | * New --add-storage-directory and --add-server options, which can be used to make keysafe backup/restore using additional locations. * Removed --store-local option; use --add-storage-directory instead. This commit was sponsored by Thomas Hochstein on Patreon.
* move level from Server to StorageJoey Hess2016-10-06
| | | | | | | This allows local storage locations to have levels too, and also get shuffled nicely. This commit was sponsored by Ethan Aubin.
* todoJoey Hess2016-10-05
|
* Remove embedded copy of argon2 binding, depend on fixed version of package.Joey Hess2016-10-05
| | | | | | Test suite passes. This commit was sponsored by Ignacio on Patreon
* releasing package keysafe version 0.201609270.20160927Joey Hess2016-09-27
|
* Filter out escape sequences and any other unusual characters when writing ↵Joey Hess2016-09-27
| | | | | | | all messages to the console. This should protect against all attacks where the server sends back a malicious message.
* todoJoey Hess2016-09-27
|
* Server: Round number of objects down to the nearest thousand, to avoid ↵Joey Hess2016-09-27
| | | | leaking too much data about when objects are uploaded to servers.
* Added --check-servers mode, which is useful both at the command line to see ↵Joey Hess2016-09-27
| | | | | | what servers keysafe knows about, and as a cron job. This commit was sponsored by Jake Vosloo on Patreon.
* Server: --motd can be used to provide a Message Of The Day.Joey Hess2016-09-27
| | | | This commit was sponsored by Anthony DeRobertis on Patreon.
* small updatesJoey Hess2016-09-26
|
* TODOJoey Hess2016-09-26
|
* check server levelsJoey Hess2016-09-26
| | | | | | | | | Don't upload more than neededshares-1 shares to Alternate servers without asking the user if they want to do this potentially dangerous action. Never allow uploads to Untrusted servers. This commit was sponsored by Ignacio on Patreon.
* wordingJoey Hess2016-09-26
|
* Randomize the server list.Joey Hess2016-09-26
| | | | | | | May help avoid some correlations. Once there are many servers, will spread the load out amoung them. This commit was sponsored by Ethan Aubin.
* Fix embedded copy of Argon2 to not use Word64, fixing build on 32 bit systems.Joey Hess2016-09-26
|
* reorderJoey Hess2016-09-26
|
* delay before starting chaffingJoey Hess2016-09-23
| | | | | Since there are multiple threads, this prevents the first upload from each coming at nearly the same time.
* Added --chaff-max-delay option for slower chaffing.Joey Hess2016-09-23
| | | | This commit was sponsored by Jeff Goeke-Smith on Patreon.
* fix buildJoey Hess2016-09-23
|
* server levelsJoey Hess2016-09-23
|
* seems that stack needs system ghc for some reasonJoey Hess2016-09-23
|
* Makefile: Avoid rebuilding on make install, so that sudo make install works.Joey Hess2016-09-23
|
* improveJoey Hess2016-09-23
|
* improveJoey Hess2016-09-23
|
* todoJoey Hess2016-09-22
|
* prep release0.20160922Joey Hess2016-09-22
|
* change json serialization for backup log once againJoey Hess2016-09-22
| | | | Adding field accessors makes the json nicer.
* updateJoey Hess2016-09-22
|
* In --autostart mode, check for gpg keys that have not been backed up, and ↵Joey Hess2016-09-22
| | | | | | | | offer to back them up. Only ask once per key. This commit was sponsored by Thomas Hochstein on Patreon.
* avoid zenity choking on something it seems to expect to be htmlJoey Hess2016-09-22
| | | | Not documented at all as expecting html in --text. Such bad documentation..
* changelogJoey Hess2016-09-22
|
* record already-existing backup in log after restoring a secret keyJoey Hess2016-09-22
| | | | | | | This will prevent --autostart from prompting to get the newly restored key backed up again. This commit was sponsored by Remy van Elst on Patreon.
* improve layoutJoey Hess2016-09-22
|
* change backup log format so it can also log when backup of a key was skippedJoey Hess2016-09-22
| | | | | | | | This will be used later when keysafe --autostart prompts if the user wants to back up their gpg key. Making the change now before the backup log format gets frozen. This commit was sponsored by Josh Taylor on Patreon.
generated by cgit v1.2.3 (git 2.39.1) at 2024-05-17 06:27:47 +0000