summaryrefslogtreecommitdiffhomepage
Commit message (Collapse)AuthorAge
* prep release0.20161107Joey Hess2016-11-07
|
* Defer requesting secret key from gpg until just before backupJoey Hess2016-11-06
| | | | | | | | | So the user knows why gpg is asking for this secret key to be backed up. Before, this was done as soon as keysafe started, which didn't give the user any indication what was going on, unless they had multiple keys and so picked the key to back up from a list. This commit was sponsored by Thomas Hochstein on Patreon.
* Better suggestion when user is having difficulty thinking of a strong enough ↵Joey Hess2016-11-06
| | | | | | password. This commit was sponsored by Ignacio on Patreon.
* results of a little bit of usability testingJoey Hess2016-11-05
|
* Purism's keysafe server has been vetted to Recommended level!Joey Hess2016-11-01
| | | | | | | | It's set up meeting all criteria for Recommened, and I've received a gpg signed statement about it from Todd Weaver. The server does not yet have backups set up, as far as I know, but that's not a hard criteria for Recommended.
* improved queue uploadJoey Hess2016-10-24
| | | | | | | | | * --upload-queued: Exit nonzero if unable to upload all queued objects. * --autostart: If unable to upload all queued objects initially, delay between 1 and 2 hours and try again. This way, if tor takes some time to start after login, it will retry later, when tor is hopefully running.
* clarify which part of CyprusJoey Hess2016-10-24
|
* Fix --check-server to not fail when the server has not had anything stored ↵Joey Hess2016-10-24
| | | | | | | | on it yet. Threw an exception because the share directory was not created yet. This commit was sponsored by Anthony DeRobertis on Patreon.
* The third keysafe server is now available, provided by Purism.Joey Hess2016-10-24
| | | | | | Hoped this will be Recommended, but it's still being vetted. This commit was sponsored by Andreas on Patreon.
* updateJoey Hess2016-10-23
|
* Change default for --port to 4242.Joey Hess2016-10-23
|
* remove Setup build cruft0.20161022Joey Hess2016-10-22
|
* Makefile: Allow setting BUILDEROPTIONS=-j1 to avoid concurrent build, which ↵Joey Hess2016-10-22
| | | | | | should make build reproducible. (And removed an accidential double $BUILDER build)
* prep releaseJoey Hess2016-10-22
|
* makefile improvementsJoey Hess2016-10-22
| | | | | * Makefile: Propigate LDFLAGS, CFLAGS, and CPPFLAGS through ghc. * Makefile: Allow setting BUILDER=./Setup to build w/o cabal or stack.
* add Documentation url to service fileJoey Hess2016-10-22
|
* thanks sean!Joey Hess2016-10-22
|
* Merge remote-tracking branch 'spwhitton/lintian'Joey Hess2016-10-22
|\
| * fix use of .IP macro in manpageSean Whitton2016-10-22
| | | | | | | | | | "67: warning: numeric expression expected (got `B')" Gbp-Pq: Name fix-use-of-.IP-macro-in-manpage.patch
| * add keywords to desktop fileSean Whitton2016-10-22
| | | | | | Gbp-Pq: Name add-keywords-to-desktop-file.patch
| * fix spelling errors caught by lintianSean Whitton2016-10-22
| | | | | | Gbp-Pq: Name fix-spelling-errors-caught-by-lintian.patch
* | signed commits after this pointJoey Hess2016-10-22
|/ | | | | | All commits made by me to the keysafe repository after this point should be signed. Forgot to configure gpg to do it for the earlier commits, although there are signed tags for all past releases.
* releasing package keysafe version 0.201610070.20161007Joey Hess2016-10-20
|
* no need for init script +x in gitJoey Hess2016-10-18
|
* forgot to update the man page for all the recently added optionsJoey Hess2016-10-18
|
* fix modeJoey Hess2016-10-18
|
* updateJoey Hess2016-10-18
|
* /etc/default/keysafe is read by both the systemd service file and the init ↵Joey Hess2016-10-18
| | | | | | script, and contains configuration for the keysafe server. This commit was sponsored by Ole-Morten Duesund on Patreon.
* Added a LSB init script, for non-systemd systems.Joey Hess2016-10-18
| | | | | | | (It currently uses Debian's start-stop-daemon, so would need porting for other distributions.) This commit was sponsored by Fernando Jimenez on Patreon.
* Argon2dJoey Hess2016-10-18
|
* Removed dependency on crypto-random.Joey Hess2016-10-07
| | | | | | | | Use raaz for random bytestring generation exclusively. It was already used in all important places, but chaffing was using crypto-random. Note that System.Random is used for delays during chaffing and by random-shuffle.
* test writability with a long filenameJoey Hess2016-10-06
|
* thoughtJoey Hess2016-10-06
|
* Check if --store-local directory is writable.Joey Hess2016-10-06
| | | | | | | | | | | | | | | | | | | | If run with --totalshares larger than the number of servers, and the --store-local directory is not writable, this causes keysafe to throw out the unwritable directory and so error out early due to their not being enough storage locations. That's better than the old behavior, which was to try to use the --store-local directory, fail and so proceed to storing the share on a server. That would eventually fail with "no storage locations" when it runs out of servers. That was bad, because shares were uploaded to servers, but perhaps not enough for restore to work, and a new name/othername would be needed to re-run the backup. This is not a perfect fix; if the --store-local directory is writable at first but for some reason the write of the share to it later fails, the situation described above still happens. This commit was sponsored by Jochen Bartl on Patreon.
* prep release0.20161006Joey Hess2016-10-06
|
* Gpg keyid bugsJoey Hess2016-10-06
| | | | | | | | | | | | | | Fix bugs with entry of gpg keyid in the keysafe.log. Gpg.anyKey was being used in writing the log, which made the log contain gpg keys with an empty keyid. Fix bug in --autostart that caused the full gpg keyid to be used in the name, so restores would only work when --gpgkeyid was specifid. Added a Distinguisher data type rather than the Gpg.anyKey hack. This commit was sponsored by Thom May on Patreon.
* updateJoey Hess2016-10-06
|
* New --add-storage-directory and --add-server optionsJoey Hess2016-10-06
| | | | | | | | * New --add-storage-directory and --add-server options, which can be used to make keysafe backup/restore using additional locations. * Removed --store-local option; use --add-storage-directory instead. This commit was sponsored by Thomas Hochstein on Patreon.
* move level from Server to StorageJoey Hess2016-10-06
| | | | | | | This allows local storage locations to have levels too, and also get shuffled nicely. This commit was sponsored by Ethan Aubin.
* todoJoey Hess2016-10-05
|
* Remove embedded copy of argon2 binding, depend on fixed version of package.Joey Hess2016-10-05
| | | | | | Test suite passes. This commit was sponsored by Ignacio on Patreon
* releasing package keysafe version 0.201609270.20160927Joey Hess2016-09-27
|
* Filter out escape sequences and any other unusual characters when writing ↵Joey Hess2016-09-27
| | | | | | | all messages to the console. This should protect against all attacks where the server sends back a malicious message.
* todoJoey Hess2016-09-27
|
* Server: Round number of objects down to the nearest thousand, to avoid ↵Joey Hess2016-09-27
| | | | leaking too much data about when objects are uploaded to servers.
* Added --check-servers mode, which is useful both at the command line to see ↵Joey Hess2016-09-27
| | | | | | what servers keysafe knows about, and as a cron job. This commit was sponsored by Jake Vosloo on Patreon.
* Server: --motd can be used to provide a Message Of The Day.Joey Hess2016-09-27
| | | | This commit was sponsored by Anthony DeRobertis on Patreon.
* small updatesJoey Hess2016-09-26
|
* TODOJoey Hess2016-09-26
|
* check server levelsJoey Hess2016-09-26
| | | | | | | | | Don't upload more than neededshares-1 shares to Alternate servers without asking the user if they want to do this potentially dangerous action. Never allow uploads to Untrusted servers. This commit was sponsored by Ignacio on Patreon.
generated by cgit v1.2.3 (git 2.39.1) at 2024-05-21 23:45:06 +0000