Skip to Content.
Sympa Menu

sm-admin - [SM-Admin] Re: CVS Sourcemage server account setup request

sm-admin AT lists.ibiblio.org

Subject: Developer Only Discussion List

List archive

Chronological Thread  
  • From: Eric Schabell <E.D.Schabell AT uvt.nl>
  • To: sm-admin AT lists.ibiblio.org
  • Subject: [SM-Admin] Re: CVS Sourcemage server account setup request
  • Date: Mon, 31 Mar 2003 09:46:55 +0200

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Howdy all!

Here is a bit of a mail with inludes response info from Joost for those that
have not yet had their pgp sorted out, maybe this will help you setup your
pgp and prevent Joost from having to repeat himself to each user requesting a
cvs setup (this is a mail from Mathieu, but not intended to poke fun, just
using him as an example, others have had the same problems):

>
> > I don't know much about ssh keys and so on, so I'll give you what I used
> > on our last cvs sever. Please let me know if it doesn't work for you.
>
> The SSH public key you've sent me is a SSH v1 key; it looks like:
>
> 1024 35 13938393...080416749 ml@nostromo
>
> SSH v2 RSA keys look like e.g.
>
> ssh-rsa AAAAB3Nza....87XOVVefy8= joostvb AT uvt.nl
>
> <snip>
>
> This is a public key, ID 1024D/F734C504, claiming to belong to "Mathieu
> Lubrano (M_L) <m.l AT compaqnet.fr>":
>
> joostvb@banach:~% cat | gpg --armor --import
> ...
> gpg: key F734C504: public key imported
> gpg: Total number processed: 1
> gpg: imported: 1
>
> It is not signed by any key, except the Mathieu Lubrano key itself:
>
> joostvb@banach:~% gpg --list-sigs lubrano
> pub 1024D/F734C504 2002-08-18 Mathieu Lubrano (M_L) <m.l AT compaqnet.fr>
> sig F734C504 2002-08-18 Mathieu Lubrano (M_L) <m.l AT compaqnet.fr>
> sub 1024g/E11C0E9E 2002-08-18
> sig F734C504 2002-08-18 Mathieu Lubrano (M_L) <m.l AT compaqnet.fr>
>
> Your email message was not signed with your PGP key.
>
> OK, so this is not enough.
>
> What you (and other Source Mage people) could do:
>
> If you haven't yet got one: generate a SSH v2 keypair:
>
> ssh-keygen -t rsa -C 'username AT host.dom.ain'
>
> Give a non-trivial passphrase, be sure to store the private part of the
> keypair on a well-administered and secured box. Do _not_ copy it to any
> other box.
>
> If you haven't yet got one: generate a PGP keypair.
>
> gpg --gen-key
>
> Lots of questions are asked, the defaults are almost always fine. Just
> be sure the email adress you're asked for is an adress controlled by
> you.
>
> Upload your GPG key to the keyserver network:
>
> gpg --keyserver wwwkeys.pgp.net --send-key 5841DBB9
>
> (5841DBB9 is to be replaced by your key id.)
>
> In a while, your key should be distributed on the OpenPGP keyserver
> network. A userfriendly webinterface is at http://www.keyserver.net/ .
>
> Get your key signed by some people: join a keysigning party, or meet
> someone who's willing to sign your key. An introduction to keysigning
> parties is at http://www.cryptnet.net/fdp/crypto/gpg-party.html .
> Another nice and short introduction in keysigning is available from
> http://people.debian.org/~stevenk/keysigning.html .
>
> At http://www.biglumber.com/x/web?va=1 , a list of people willing to
> sign keys is available. There might be someone listed, living near you.
> Another list is here: http://nm.debian.org/gpg_offer.php .
>
> Once that's done, send your SSH public key ( ~/.ssh/id_rsa.pub ) in
> a PGP signed message to me. If your email program has PGP support,
> you know how to do this (or read your MUA's documentation). If not,
> you can do it "manually":
>
> Save your message to me, along with the SSH public key, in a file called
> msg. Then run:
>
> gpg --clearsign --armor msg
>
> A file
>
> msg.asc
>
> gets created. Mail this file to me.
>
> The PGP stuff is only needed to convince me the SSH public key I get
> sent, really belongs to the person sending it. If troubles get caused
> by the specific useraccount created, accessible via this SSH key, I am
> sure I am blaming the right person. No possibilities to claim: "it
> wasn't me!" Well, less possibilities... Once this initial
> authentication is done, there's no need for PGP stuff any more. All
> authentication will be done using SSH only, from then on.
>
> In https://lists.ibiblio.org/sympa/arc/sm-admin/2003-March/000072.html ,
> you can read exactly what I need from you.
>
> However, Beware! The CVS box is _not_ yet available. Official policies
> on usage are _not_ yet known, and might even turn out to be conflicting
> with what I ask from you now (though that's not very likely).
>
>
> Bye,
>
> Joost
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQE+h/JyruUhvfIGbDIRAqW3AJ9TV2h9kutaXktVumamkOHvUTpebQCeKPOH
f+jGIbBdZ2yvsXVdnarI5us=
=Aots
-----END PGP SIGNATURE-----



  • [SM-Admin] Re: CVS Sourcemage server account setup request, Eric Schabell, 03/31/2003

Archive powered by MHonArc 2.6.24.

Top of Page