summaryrefslogtreecommitdiffhomepage
path: root/CHANGELOG
Commit message (Collapse)AuthorAge
* releasing package keysafe version 0.202002140.20200214Joey Hess2020-02-14
|
* purism's server is dead apparentlyJoey Hess2020-02-14
| | | | | | | | | | | Downgrade purism's keysafe server from recommended to alternate, mostly because the server is down, and AFAIK has been down for years, and I don't currently know if they plan to ever provide it again. I hope it comes back, especially since they committed to run it through 2027.. This commit was sponsored by Jack Hill on Patreon.
* updated many dependencies, ghc 8.xJoey Hess2020-02-14
| | | | | | | | | | | | | Updated many dependencies, notably secret-sharing which dropped the dep on polynomial, and so allows building with ghc 8.x. Did not try to support building with older ghc because the semigroup-monid transition would make it nontrivial. Stackage lts-14.25 is a compromise, since the stack shipped in debian (even unstable) is not able to handle newer ones. This commit was sponsored by Eric Drechsel on Patreon.
* releasing package keysafe version 0.201803260.20180326Joey Hess2018-03-26
|
* Updated to argon2-1.3.Joey Hess2018-03-26
| | | | | | | New parameters are set to the old values and test suite passes so this looks good. This commit was sponsored by Nick Daly on Patreon.
* releasing package keysafe version 0.201708110.20170811Joey Hess2017-08-11
|
* Fix build with some versions of servant.Joey Hess2017-04-03
| | | | | | Application is exported by Servant 0.8.1, but apparently not by some other versions that the cabal file allows to be used. Explictly import from Network.Wai
* releasing package keysafe version 0.201703030.20170303Joey Hess2017-03-03
|
* Updated to use raaz-0.1.1.Joey Hess2017-03-03
| | | | This commit was sponsored by John Peloquin on Patreon.
* releasing package keysafe version 0.201701220.20170122Joey Hess2017-01-22
|
* Keysafe has a new website, https://keysafe.branchable.com/Joey Hess2017-01-22
|
* Clarify that dollars in cost estimates are USD.Joey Hess2017-01-14
| | | | This commit was sponsored by Ignacio on Patreon.
* Adjust cabal bounds to allow building with ghc 8.0.Joey Hess2016-11-29
| | | | | | However, the stack.yaml is still using an old LTS version to avoid polynomial's failure to build with ghc 8.0 (https://github.com/mokus0/polynomial/issues/8)
* prep release0.20161107Joey Hess2016-11-07
|
* Defer requesting secret key from gpg until just before backupJoey Hess2016-11-06
| | | | | | | | | So the user knows why gpg is asking for this secret key to be backed up. Before, this was done as soon as keysafe started, which didn't give the user any indication what was going on, unless they had multiple keys and so picked the key to back up from a list. This commit was sponsored by Thomas Hochstein on Patreon.
* Better suggestion when user is having difficulty thinking of a strong enough ↵Joey Hess2016-11-06
| | | | | | password. This commit was sponsored by Ignacio on Patreon.
* Purism's keysafe server has been vetted to Recommended level!Joey Hess2016-11-01
| | | | | | | | It's set up meeting all criteria for Recommened, and I've received a gpg signed statement about it from Todd Weaver. The server does not yet have backups set up, as far as I know, but that's not a hard criteria for Recommended.
* improved queue uploadJoey Hess2016-10-24
| | | | | | | | | * --upload-queued: Exit nonzero if unable to upload all queued objects. * --autostart: If unable to upload all queued objects initially, delay between 1 and 2 hours and try again. This way, if tor takes some time to start after login, it will retry later, when tor is hopefully running.
* Fix --check-server to not fail when the server has not had anything stored ↵Joey Hess2016-10-24
| | | | | | | | on it yet. Threw an exception because the share directory was not created yet. This commit was sponsored by Anthony DeRobertis on Patreon.
* The third keysafe server is now available, provided by Purism.Joey Hess2016-10-24
| | | | | | Hoped this will be Recommended, but it's still being vetted. This commit was sponsored by Andreas on Patreon.
* Change default for --port to 4242.Joey Hess2016-10-23
|
* Makefile: Allow setting BUILDEROPTIONS=-j1 to avoid concurrent build, which ↵Joey Hess2016-10-22
| | | | | | should make build reproducible. (And removed an accidential double $BUILDER build)
* prep releaseJoey Hess2016-10-22
|
* makefile improvementsJoey Hess2016-10-22
| | | | | * Makefile: Propigate LDFLAGS, CFLAGS, and CPPFLAGS through ghc. * Makefile: Allow setting BUILDER=./Setup to build w/o cabal or stack.
* thanks sean!Joey Hess2016-10-22
|
* releasing package keysafe version 0.201610070.20161007Joey Hess2016-10-20
|
* /etc/default/keysafe is read by both the systemd service file and the init ↵Joey Hess2016-10-18
| | | | | | script, and contains configuration for the keysafe server. This commit was sponsored by Ole-Morten Duesund on Patreon.
* Added a LSB init script, for non-systemd systems.Joey Hess2016-10-18
| | | | | | | (It currently uses Debian's start-stop-daemon, so would need porting for other distributions.) This commit was sponsored by Fernando Jimenez on Patreon.
* Removed dependency on crypto-random.Joey Hess2016-10-07
| | | | | | | | Use raaz for random bytestring generation exclusively. It was already used in all important places, but chaffing was using crypto-random. Note that System.Random is used for delays during chaffing and by random-shuffle.
* Check if --store-local directory is writable.Joey Hess2016-10-06
| | | | | | | | | | | | | | | | | | | | If run with --totalshares larger than the number of servers, and the --store-local directory is not writable, this causes keysafe to throw out the unwritable directory and so error out early due to their not being enough storage locations. That's better than the old behavior, which was to try to use the --store-local directory, fail and so proceed to storing the share on a server. That would eventually fail with "no storage locations" when it runs out of servers. That was bad, because shares were uploaded to servers, but perhaps not enough for restore to work, and a new name/othername would be needed to re-run the backup. This is not a perfect fix; if the --store-local directory is writable at first but for some reason the write of the share to it later fails, the situation described above still happens. This commit was sponsored by Jochen Bartl on Patreon.
* prep release0.20161006Joey Hess2016-10-06
|
* Gpg keyid bugsJoey Hess2016-10-06
| | | | | | | | | | | | | | Fix bugs with entry of gpg keyid in the keysafe.log. Gpg.anyKey was being used in writing the log, which made the log contain gpg keys with an empty keyid. Fix bug in --autostart that caused the full gpg keyid to be used in the name, so restores would only work when --gpgkeyid was specifid. Added a Distinguisher data type rather than the Gpg.anyKey hack. This commit was sponsored by Thom May on Patreon.
* New --add-storage-directory and --add-server optionsJoey Hess2016-10-06
| | | | | | | | * New --add-storage-directory and --add-server options, which can be used to make keysafe backup/restore using additional locations. * Removed --store-local option; use --add-storage-directory instead. This commit was sponsored by Thomas Hochstein on Patreon.
* Remove embedded copy of argon2 binding, depend on fixed version of package.Joey Hess2016-10-05
| | | | | | Test suite passes. This commit was sponsored by Ignacio on Patreon
* releasing package keysafe version 0.201609270.20160927Joey Hess2016-09-27
|
* Filter out escape sequences and any other unusual characters when writing ↵Joey Hess2016-09-27
| | | | | | | all messages to the console. This should protect against all attacks where the server sends back a malicious message.
* Server: Round number of objects down to the nearest thousand, to avoid ↵Joey Hess2016-09-27
| | | | leaking too much data about when objects are uploaded to servers.
* Added --check-servers mode, which is useful both at the command line to see ↵Joey Hess2016-09-27
| | | | | | what servers keysafe knows about, and as a cron job. This commit was sponsored by Jake Vosloo on Patreon.
* Server: --motd can be used to provide a Message Of The Day.Joey Hess2016-09-27
| | | | This commit was sponsored by Anthony DeRobertis on Patreon.
* small updatesJoey Hess2016-09-26
|
* check server levelsJoey Hess2016-09-26
| | | | | | | | | Don't upload more than neededshares-1 shares to Alternate servers without asking the user if they want to do this potentially dangerous action. Never allow uploads to Untrusted servers. This commit was sponsored by Ignacio on Patreon.
* Randomize the server list.Joey Hess2016-09-26
| | | | | | | May help avoid some correlations. Once there are many servers, will spread the load out amoung them. This commit was sponsored by Ethan Aubin.
* Fix embedded copy of Argon2 to not use Word64, fixing build on 32 bit systems.Joey Hess2016-09-26
|
* Added --chaff-max-delay option for slower chaffing.Joey Hess2016-09-23
| | | | This commit was sponsored by Jeff Goeke-Smith on Patreon.
* Makefile: Avoid rebuilding on make install, so that sudo make install works.Joey Hess2016-09-23
|
* prep release0.20160922Joey Hess2016-09-22
|
* In --autostart mode, check for gpg keys that have not been backed up, and ↵Joey Hess2016-09-22
| | | | | | | | offer to back them up. Only ask once per key. This commit was sponsored by Thomas Hochstein on Patreon.
* changelogJoey Hess2016-09-22
|
* Added --autostart mode and install FDO autostart fileJoey Hess2016-09-22
| | | | | | | | | | | | | | | | | | | | --autostart mode currently only uploads queued keys, but it will later be expanded to do more. Including checking the BackupRecord for problems when necessary. The autostart file is installed by keysafe --backup, so that when keysafe is installed with stack, and used, it will make sure it autostarts in the future. The autostart file is installed by the Makefile too. This will later let --autostart check for keys that have not been backed up and prompt about backing them up. This way, the user won't need to remember to run keysafe to back things up. Reused Utility.FreeDesktop from git-annex, and had to add some stuff it depends on. This commit was sponsored by Fernando Jimenez on Patreon.
* changelogJoey Hess2016-09-22
|
generated by cgit v1.2.3 (git 2.39.1) at 2024-05-18 18:30:08 +0000