summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2021-10-10re-order functionsHEADmasterAndrew Cady
2021-10-10remove unusedAndrew Cady
2021-10-10trivial cleanupsAndrew Cady
renamed several functions removed unused code
2021-10-10quiet optionAndrew Cady
2021-10-10improve outputAndrew Cady
2021-10-10rename ssh-update-host-keysAndrew Cady
2021-10-10cryptonomic-vpn calls out to ./get-host-keysAndrew Cady
cryptonomic-vpn calls out to ./get-host-keys to get host keys. That path has to be changed. OK for here since both need to be merged into selfpublish.sh.
2021-10-10get-host-keys: now modifies the real UserKnownHostsFileAndrew Cady
2021-10-10fixup! improve get-host-keysAndrew Cady
2021-10-10get-host-keys improvementsAndrew Cady
2021-10-10renames for clarityAndrew Cady
2021-10-10improve get-host-keys moreAndrew Cady
2021-10-10improve get-host-keysAndrew Cady
2021-10-10get-host-keys command is workingAndrew Cady
The command fetches and validates the host key of a self-authenticating cryptonomic url. Then it tries to log in on the server and obtain proof of all the system's other host keys. That way, we can use SSH to share the RSA key that Strongswan needs. But still use ed25519 for the primary identity in the URL. This is the functionality that needs to be incorporated into 'cryptonomic-vpn' to make ed25519.cryptonomic.net urls work.
2021-10-09update-host-keys test/diagnostic programAndrew Cady
2021-10-09rename public key fileAndrew Cady
2021-10-09OpenSSH based authentication of remote host key works!!!Andrew Cady
2021-10-09fixup! implement optionsAndrew Cady
2021-10-09fix documentationAndrew Cady
2021-10-09Use SSHFP keyhash-based filename for private keyAndrew Cady
The same should be used for the public key, but isn't (yet).
2021-10-09improve/shorten help outputAndrew Cady
2021-10-09locally authenticate cryptonomic.net self-authenticating namesAndrew Cady
this is pretty sweet
2021-10-09cleaning upAndrew Cady
2021-10-09move scrap notes into notes/Andrew Cady
2021-10-09rename executable to cryptonomic-vpnAndrew Cady
2021-10-09improve options considerablyAndrew Cady
2021-10-08implement optionsAndrew Cady
2021-10-04clean up keycopy.sh somewhat (and rename it)Andrew Cady
2021-09-29.gitignoreAndrew Cady
2021-09-29remove redundant configurationAndrew Cady
2021-09-29use ssh-keyscan on ip to get key (not secure)Andrew Cady
2021-09-29working static config into templateroot
2021-09-29keycopy.sh: forget about old configAndrew Cady
2021-09-29VICI style config worksroot
2021-09-28ipsec.confroot
2021-09-28moreroot
2021-09-16worksAndrew Cady