Certificates

Author me@thomaskeller.biz
Branch net.venge.monotone.automate-netsync
Changelog * option_list.hh: new option "--do-not-enforce-ssh-agent" which stops
certain automate commands from requiring the existence of a running
ssh agent to do the dirty authentication work
* key_store.hh/cc: two new methods:
enforce_ssh_agent(): this is basically the same as if the caller gives
--ssh-sign=only via command line, which means that we're only using
ssh-agent to decrypt and sign our keys and do not use the get_passphrase
lua hook or even password prompting to decrypt the key. This is most
useful for commands which run inside stdio and therefor are not
capable of handling interactivity
agent_knows_key(rsa_keypair_id const & ident): this checks if a certain
key ident is already known to any running ssh-agent instance, so the
key can be used to sign stuff and authenticate against netsync servers
* cmd_netsync.cc(pull): ...use both here; if the option is not used,
we look for a running ssh agent instance and also if this agent knows
already of the key we're about to use for the pull; if either of these
things are not working out, we're refusing the pull and fail early.
Date 2008-04-30T14:16:06

Revision Details

Oldrevision Old revision is: [ab7577a7..] (diff)
Patch Patch file cmd_netsync.cc (diff)
Patch file key_store.cc (diff)
Patch file key_store.hh (diff)
Patch file options_list.hh (diff)
Ancestry of c0152bc572d145eecdf63706c0dd47019cf70fd9
reading this graph