summaryrefslogtreecommitdiffhomepage
Commit message (Collapse)AuthorAge
* remove Setup build cruft0.20161022Joey Hess2016-10-22
|
* Makefile: Allow setting BUILDEROPTIONS=-j1 to avoid concurrent build, which ↵Joey Hess2016-10-22
| | | | | | should make build reproducible. (And removed an accidential double $BUILDER build)
* prep releaseJoey Hess2016-10-22
|
* makefile improvementsJoey Hess2016-10-22
| | | | | * Makefile: Propigate LDFLAGS, CFLAGS, and CPPFLAGS through ghc. * Makefile: Allow setting BUILDER=./Setup to build w/o cabal or stack.
* add Documentation url to service fileJoey Hess2016-10-22
|
* thanks sean!Joey Hess2016-10-22
|
* Merge remote-tracking branch 'spwhitton/lintian'Joey Hess2016-10-22
|\
| * fix use of .IP macro in manpageSean Whitton2016-10-22
| | | | | | | | | | "67: warning: numeric expression expected (got `B')" Gbp-Pq: Name fix-use-of-.IP-macro-in-manpage.patch
| * add keywords to desktop fileSean Whitton2016-10-22
| | | | | | Gbp-Pq: Name add-keywords-to-desktop-file.patch
| * fix spelling errors caught by lintianSean Whitton2016-10-22
| | | | | | Gbp-Pq: Name fix-spelling-errors-caught-by-lintian.patch
* | signed commits after this pointJoey Hess2016-10-22
|/ | | | | | All commits made by me to the keysafe repository after this point should be signed. Forgot to configure gpg to do it for the earlier commits, although there are signed tags for all past releases.
* releasing package keysafe version 0.201610070.20161007Joey Hess2016-10-20
|
* no need for init script +x in gitJoey Hess2016-10-18
|
* forgot to update the man page for all the recently added optionsJoey Hess2016-10-18
|
* fix modeJoey Hess2016-10-18
|
* updateJoey Hess2016-10-18
|
* /etc/default/keysafe is read by both the systemd service file and the init ↵Joey Hess2016-10-18
| | | | | | script, and contains configuration for the keysafe server. This commit was sponsored by Ole-Morten Duesund on Patreon.
* Added a LSB init script, for non-systemd systems.Joey Hess2016-10-18
| | | | | | | (It currently uses Debian's start-stop-daemon, so would need porting for other distributions.) This commit was sponsored by Fernando Jimenez on Patreon.
* Argon2dJoey Hess2016-10-18
|
* Removed dependency on crypto-random.Joey Hess2016-10-07
| | | | | | | | Use raaz for random bytestring generation exclusively. It was already used in all important places, but chaffing was using crypto-random. Note that System.Random is used for delays during chaffing and by random-shuffle.
* test writability with a long filenameJoey Hess2016-10-06
|
* thoughtJoey Hess2016-10-06
|
* Check if --store-local directory is writable.Joey Hess2016-10-06
| | | | | | | | | | | | | | | | | | | | If run with --totalshares larger than the number of servers, and the --store-local directory is not writable, this causes keysafe to throw out the unwritable directory and so error out early due to their not being enough storage locations. That's better than the old behavior, which was to try to use the --store-local directory, fail and so proceed to storing the share on a server. That would eventually fail with "no storage locations" when it runs out of servers. That was bad, because shares were uploaded to servers, but perhaps not enough for restore to work, and a new name/othername would be needed to re-run the backup. This is not a perfect fix; if the --store-local directory is writable at first but for some reason the write of the share to it later fails, the situation described above still happens. This commit was sponsored by Jochen Bartl on Patreon.
* prep release0.20161006Joey Hess2016-10-06
|
* Gpg keyid bugsJoey Hess2016-10-06
| | | | | | | | | | | | | | Fix bugs with entry of gpg keyid in the keysafe.log. Gpg.anyKey was being used in writing the log, which made the log contain gpg keys with an empty keyid. Fix bug in --autostart that caused the full gpg keyid to be used in the name, so restores would only work when --gpgkeyid was specifid. Added a Distinguisher data type rather than the Gpg.anyKey hack. This commit was sponsored by Thom May on Patreon.
* updateJoey Hess2016-10-06
|
* New --add-storage-directory and --add-server optionsJoey Hess2016-10-06
| | | | | | | | * New --add-storage-directory and --add-server options, which can be used to make keysafe backup/restore using additional locations. * Removed --store-local option; use --add-storage-directory instead. This commit was sponsored by Thomas Hochstein on Patreon.
* move level from Server to StorageJoey Hess2016-10-06
| | | | | | | This allows local storage locations to have levels too, and also get shuffled nicely. This commit was sponsored by Ethan Aubin.
* todoJoey Hess2016-10-05
|
* Remove embedded copy of argon2 binding, depend on fixed version of package.Joey Hess2016-10-05
| | | | | | Test suite passes. This commit was sponsored by Ignacio on Patreon
* releasing package keysafe version 0.201609270.20160927Joey Hess2016-09-27
|
* Filter out escape sequences and any other unusual characters when writing ↵Joey Hess2016-09-27
| | | | | | | all messages to the console. This should protect against all attacks where the server sends back a malicious message.
* todoJoey Hess2016-09-27
|
* Server: Round number of objects down to the nearest thousand, to avoid ↵Joey Hess2016-09-27
| | | | leaking too much data about when objects are uploaded to servers.
* Added --check-servers mode, which is useful both at the command line to see ↵Joey Hess2016-09-27
| | | | | | what servers keysafe knows about, and as a cron job. This commit was sponsored by Jake Vosloo on Patreon.
* Server: --motd can be used to provide a Message Of The Day.Joey Hess2016-09-27
| | | | This commit was sponsored by Anthony DeRobertis on Patreon.
* small updatesJoey Hess2016-09-26
|
* TODOJoey Hess2016-09-26
|
* check server levelsJoey Hess2016-09-26
| | | | | | | | | Don't upload more than neededshares-1 shares to Alternate servers without asking the user if they want to do this potentially dangerous action. Never allow uploads to Untrusted servers. This commit was sponsored by Ignacio on Patreon.
* wordingJoey Hess2016-09-26
|
* Randomize the server list.Joey Hess2016-09-26
| | | | | | | May help avoid some correlations. Once there are many servers, will spread the load out amoung them. This commit was sponsored by Ethan Aubin.
* Fix embedded copy of Argon2 to not use Word64, fixing build on 32 bit systems.Joey Hess2016-09-26
|
* reorderJoey Hess2016-09-26
|
* delay before starting chaffingJoey Hess2016-09-23
| | | | | Since there are multiple threads, this prevents the first upload from each coming at nearly the same time.
* Added --chaff-max-delay option for slower chaffing.Joey Hess2016-09-23
| | | | This commit was sponsored by Jeff Goeke-Smith on Patreon.
* fix buildJoey Hess2016-09-23
|
* server levelsJoey Hess2016-09-23
|
* seems that stack needs system ghc for some reasonJoey Hess2016-09-23
|
* Makefile: Avoid rebuilding on make install, so that sudo make install works.Joey Hess2016-09-23
|
* improveJoey Hess2016-09-23
|