GNU logs - #25094, boring messages

Message sent to bug-guix@HIDDEN:

Subject: bug#25094: Add comments to archive keys and acls
Resent-From: Hartmut Goebel <h.goebel@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Fri, 02 Dec 2016 17:39:01 +0000
Resent-Message-ID: <handler.25094.B.148070030811172 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
To: 25094 <at> debbugs.gnu.org
From: Hartmut Goebel <h.goebel@HIDDEN>
Organization: crazy-compilers.com
Message-ID: <5841B184.4050802@HIDDEN>
Date: Fri, 2 Dec 2016 18:38:12 +0100
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101
 Thunderbird/38.3.0
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit
Precedence: list
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>

Hi,

the keys for authenticating an archive currently do not hold any
comment. This makes it hard to track acls and remove certain keys if
required.

Please implement some way to add and change the comment on keys in
/etc/guix/ and in /etc/guix/acl.

Proposed usage when generating the key:
  guix archive --generate-key=… --comment "store.example.com"

Proposed usage when importing the key and overwriting any existing comment

  guix archive --authorize --comment "store.example.com"

For now, since we have no commands for key management, these would be
enough IMO. Existing commenty an easily be changed in the file, so for
now we do not need a tool for this.

-- 
Regards
Hartmut Goebel

| Hartmut Goebel          | h.goebel@HIDDEN               |
| www.crazy-compilers.com | compilers which you thought are impossible |

Message sent:

Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-Mailer: MIME-tools 5.505 (Entity 5.505)
Content-Type: text/plain; charset=utf-8
X-Loop: help-debbugs@HIDDEN
From: help-debbugs@HIDDEN (GNU bug Tracking System)
To: Hartmut Goebel <h.goebel@HIDDEN>
Subject: bug#25094: Acknowledgement (Add comments to archive keys and acls)
Message-ID: <handler.25094.B.148070030811172.ack <at> debbugs.gnu.org>
References: <5841B184.4050802@HIDDEN>
X-Gnu-PR-Message: ack 25094
X-Gnu-PR-Package: guix
Reply-To: 25094 <at> debbugs.gnu.org
Date: Fri, 02 Dec 2016 17:39:01 +0000

Thank you for filing a new bug report with debbugs.gnu.org.

This is an automatically generated reply to let you know your message
has been received.

Your message is being forwarded to the package maintainers and other
interested parties for their attention; they will reply in due course.

Your message has been sent to the package maintainer(s):
 bug-guix@HIDDEN

If you wish to submit further information on this problem, please
send it to 25094 <at> debbugs.gnu.org.

Please do not send mail to help-debbugs@HIDDEN unless you wish
to report a problem with the Bug-tracking system.

--=20
25094: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D25094
GNU Bug Tracking System
Contact help-debbugs@HIDDEN with problems

Message sent to bug-guix@HIDDEN:

Subject: bug#25094: Add comments to archive keys and acls
Resent-From: Leo Famulari <leo@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Fri, 02 Dec 2016 18:14:02 +0000
Resent-Message-ID: <handler.25094.B25094.148070243714604 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
To: Hartmut Goebel <h.goebel@HIDDEN>
Cc: 25094 <at> debbugs.gnu.org
Date: Fri, 2 Dec 2016 13:13:51 -0500
From: Leo Famulari <leo@HIDDEN>
Message-ID: <20161202181351.GA30572@jasmine>
References: <5841B184.4050802@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <5841B184.4050802@HIDDEN>
User-Agent: Mutt/1.7.1 (2016-10-04)
Precedence: list
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>

On Fri, Dec 02, 2016 at 06:38:12PM +0100, Hartmut Goebel wrote:
> Hi,
> 
> the keys for authenticating an archive currently do not hold any
> comment. This makes it hard to track acls and remove certain keys if
> required.

Indeed, this makes key management a little harder than it needs to be.

> Please implement some way to add and change the comment on keys in
> /etc/guix/ and in /etc/guix/acl.
> 
> Proposed usage when generating the key:
>   guix archive --generate-key=… --comment "store.example.com"
> 
> Proposed usage when importing the key and overwriting any existing comment
> 
>   guix archive --authorize --comment "store.example.com"
> 
> For now, since we have no commands for key management, these would be
> enough IMO. Existing commenty an easily be changed in the file, so for
> now we do not need a tool for this.

I think that the comment should either be signed somehow, or the field
name should be "untrusted-comment".

OpenBSD's signify tool (which we have a port of in Guix) does this:

------
$ cat foo.pub
untrusted comment: Leo's example public key
RWRrY3me0s1DYDBfpcUKZ+ul9m8FgdZfz5+cHjxBabEsvDrjL/ecTeUL
------

Minisign, which is a 3rd party tool compatible with signify, also has
trusted comments:

https://github.com/jedisct1/minisign/blob/master/src/manpage.md#notes

Message sent to bug-guix@HIDDEN:

Subject: bug#25094: Add comments to archive keys and acls
Resent-From: ludo@HIDDEN (Ludovic =?UTF-8?Q?Court=C3=A8s?=)
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Sat, 03 Dec 2016 23:57:01 +0000
Resent-Message-ID: <handler.25094.B25094.148080937125903 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
To: Leo Famulari <leo@HIDDEN>
Cc: Hartmut Goebel <h.goebel@HIDDEN>, 25094 <at> debbugs.gnu.org
From: ludo@HIDDEN (Ludovic =?UTF-8?Q?Court=C3=A8s?=)
References: <5841B184.4050802@HIDDEN>
 <20161202181351.GA30572@jasmine>
Date: Sun, 04 Dec 2016 00:55:58 +0100
In-Reply-To: <20161202181351.GA30572@jasmine> (Leo Famulari's message of "Fri, 
 2 Dec 2016 13:13:51 -0500")
Message-ID: <87inr08t4h.fsf@HIDDEN>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/25.1 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Precedence: list
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>

Leo Famulari <leo@HIDDEN> skribis:

> On Fri, Dec 02, 2016 at 06:38:12PM +0100, Hartmut Goebel wrote:
>> Hi,
>>=20
>> the keys for authenticating an archive currently do not hold any
>> comment. This makes it hard to track acls and remove certain keys if
>> required.
>
> Indeed, this makes key management a little harder than it needs to be.

Agreed.  The crux of the problem is that libgcrypt=E2=80=99s canonical sexp
parser does not recognize comments.
<http://people.csail.mit.edu/rivest/Sexp.txt> does not specify comments,
which may be the reason, but other implementations of canonical sexps
(such as lsh and Nettle) do recognize them, so we should just get
libgcrypt to follow suit.

>> Please implement some way to add and change the comment on keys in
>> /etc/guix/ and in /etc/guix/acl.
>>=20
>> Proposed usage when generating the key:
>>   guix archive --generate-key=3D=E2=80=A6 --comment "store.example.com"
>>=20
>> Proposed usage when importing the key and overwriting any existing comme=
nt
>>=20
>>   guix archive --authorize --comment "store.example.com"
>>=20
>> For now, since we have no commands for key management, these would be
>> enough IMO. Existing commenty an easily be changed in the file, so for
>> now we do not need a tool for this.
>
> I think that the comment should either be signed somehow, or the field
> name should be "untrusted-comment".

I think it=E2=80=99s no different than the optional comment in OpenSSH publ=
ic
keys, and it should be clear that it=E2=80=99s free from and untrusted by
definition (the sexp syntax at least makes it clear that it=E2=80=99s a com=
ment,
as opposed to the OpenSSH public key format).

Ludo=E2=80=99.

Message received at control <at> debbugs.gnu.org:

Received: (at control) by debbugs.gnu.org; 25 Jan 2017 17:52:20 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Wed Jan 25 12:52:20 2017
Received: from localhost ([127.0.0.1]:43258 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1cWRk3-0007Vx-T5
	for submit <at> debbugs.gnu.org; Wed, 25 Jan 2017 12:52:20 -0500
Received: from eggs.gnu.org ([208.118.235.92]:56325)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <ludo@HIDDEN>) id 1cWRk2-0007Vk-J2
 for control <at> debbugs.gnu.org; Wed, 25 Jan 2017 12:52:18 -0500
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
 (envelope-from <ludo@HIDDEN>) id 1cWRjt-0000kW-H8
 for control <at> debbugs.gnu.org; Wed, 25 Jan 2017 12:52:13 -0500
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org
X-Spam-Level: 
X-Spam-Status: No, score=-5.1 required=5.0 tests=BAYES_00,RP_MATCHES_RCVD
 autolearn=disabled version=3.3.2
Received: from fencepost.gnu.org ([2001:4830:134:3::e]:35693)
 by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from <ludo@HIDDEN>)
 id 1cWRjt-0000kS-EJ
 for control <at> debbugs.gnu.org; Wed, 25 Jan 2017 12:52:09 -0500
Received: from reverse-83.fdn.fr ([80.67.176.83]:39890 helo=ribbon)
 by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256)
 (Exim 4.82) (envelope-from <ludo@HIDDEN>) id 1cWRjs-0003e8-PN
 for control <at> debbugs.gnu.org; Wed, 25 Jan 2017 12:52:09 -0500
Date: Wed, 25 Jan 2017 18:52:07 +0100
Message-Id: <87mvefvxh4.fsf@HIDDEN>
To: control <at> debbugs.gnu.org
From: ludo@HIDDEN (Ludovic =?utf-8?Q?Court=C3=A8s?=)
Subject: control message for bug #25094
MIME-version: 1.0
Content-type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit
X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic]
X-Received-From: 2001:4830:134:3::e
X-Spam-Score: -8.2 (--------)
X-Debbugs-Envelope-To: control
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -8.2 (--------)

severity 25094 wishlist

Last modified: Mon, 25 Nov 2019 12:00:02 UTC

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997 nCipher Corporation Ltd, 1994-97 Ian Jackson.