=== modified file 'Makefile' --- Makefile 2008-08-24 06:17:02 +0000 +++ Makefile 2008-08-25 06:44:13 +0000 @@ -33,7 +33,7 @@ LDFLAGS=$(COVERAGE) # Commands to format a DocBook refentry document into a manual page -DOCBOOKTOMAN=cd $(dir $^); xsltproc --nonet --xinclude \ +DOCBOOKTOMAN=cd $(dir $<); xsltproc --nonet --xinclude \ --param man.charmap.use.subset 0 \ --param make.year.ranges 1 \ --param make.single.year.ranges 1 \ @@ -87,19 +87,39 @@ distclean: clean mostlyclean: clean maintainer-clean: clean - -rm --force --recursive keydir + -rm --force --recursive keydir confdir check: ./mandos --check -run-client: all - -mkdir keydir - -./mandos-keygen --dir keydir +# Run the server with a local key +run-client: all keydir/seckey.txt keydir/pubkey.txt \ + keydir/secring.gpg keydir/pubring.gpg ./plugin-runner --plugin-dir=plugins.d \ --options-for=password-request:--keydir=keydir -run-server: - ./mandos --debug --configdir=. +# Used by run-client +keydir/secring.gpg: keydir/seckey.txt + gpg --homedir $(dir $<) --import $^ +keydir/pubring.gpg: keydir/pubkey.txt + gpg --homedir $(dir $<) --import $^ +keydir/seckey.txt keydir/pubkey.txt: mandos-keygen + install --directory keydir + ./mandos-keygen --dir keydir --force + +# Run the server with a local config +run-server: confdir/mandos.conf confdir/clients.conf + ./mandos --debug --configdir=confdir + +# Used by run-server +confdir/mandos.conf: mandos.conf + install --directory confdir + install $^ $@ +confdir/clients.conf: clients.conf keydir/seckey.txt + install --directory confdir + install clients.conf $@ +# Add a client password + ./mandos-keygen --dir keydir --password >> $@ install: install-server install-client === modified file 'mandos-keygen' --- mandos-keygen 2008-08-25 01:16:38 +0000 +++ mandos-keygen 2008-08-25 03:53:42 +0000 @@ -24,7 +24,7 @@ KEYDIR="/etc/mandos" KEYTYPE=DSA -KEYLENGTH=1024 +KEYLENGTH=2048 SUBKEYTYPE=ELG-E SUBKEYLENGTH=2048 KEYNAME="`hostname --fqdn`" @@ -56,7 +56,7 @@ -d DIR, --dir DIR Target directory for key files -t TYPE, --type TYPE Key type. Default is DSA. -l BITS, --length BITS - Key length in bits. Default is 1024. + Key length in bits. Default is 2048. -s TYPE, --subtype TYPE Subkey type. Default is ELG-E. -L BITS, --sublength BITS === modified file 'mandos-keygen.xml' --- mandos-keygen.xml 2008-08-24 07:42:14 +0000 +++ mandos-keygen.xml 2008-08-25 03:53:42 +0000 @@ -256,7 +256,7 @@ bits - Key length in bits. Default is 1024. + Key length in bits. Default is 2048. === modified file 'mandos-options.xml' --- mandos-options.xml 2008-08-23 07:17:28 +0000 +++ mandos-options.xml 2008-08-25 06:44:13 +0000 @@ -12,11 +12,11 @@ If this is specified, the server will only announce the service - and listen to requests on network interface - IF. Default is to use all available - interfaces. Note: a failure to bind to the - specified interface is not considered critical, and the server - does not exit, but will instead continue starting normally. + and listen to requests on the specified network interface. + Default is to use all available interfaces. Note: a failure to bind to the specified + interface is not considered critical, and the server does not + exit, but will instead continue normally. @@ -37,8 +37,8 @@ If the server is run in debug mode, it will run in the foreground - and print a lot of debugging information. The default is - not to run in debug mode. + and print a lot of debugging information. The default is to + not run in debug mode. === modified file 'mandos.conf.xml' --- mandos.conf.xml 2008-08-20 03:22:45 +0000 +++ mandos.conf.xml 2008-08-25 06:44:13 +0000 @@ -103,7 +103,7 @@ interface interface = IF + >NAME @@ -123,7 +123,7 @@ port port = PORT + >NUMBER @@ -146,7 +146,7 @@ priority priority = PRIORITY + >STRING === modified file 'mandos.xml' --- mandos.xml 2008-08-20 00:35:41 +0000 +++ mandos.xml 2008-08-25 06:44:13 +0000 @@ -72,7 +72,7 @@ &COMMANDNAME; - --interfaceIF + --interfaceNAME --addressADDRESS --portPORT --priorityPRIORITY @@ -82,7 +82,7 @@ &COMMANDNAME; - -iIF + -iNAME -aADDRESS -pPORT --priorityPRIORITY @@ -150,8 +150,8 @@ - -i, --interface - IF + -i, --interface NAME