/mandos/trunk

To get this branch, use:
bzr branch /loggerhead/mandos/trunk
96 by Teddy Hogeborn
* Makefile (PREFIX, CONFDIR, MANDIR): Use $(DESTDIR).
1
<?xml version="1.0" encoding="UTF-8"?>
80 by Teddy Hogeborn
* mandos-keygen.xml: New man page for mandos-keygen(8).
2
<!DOCTYPE refentry PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3
	"http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4
<!ENTITY COMMANDNAME "mandos-keygen">
962 by Teddy Hogeborn
Add support for using raw public keys in TLS (RFC 7250)
5
<!ENTITY TIMESTAMP "2019-02-10">
217 by Teddy Hogeborn
* .bzrignore: Added "man" directory (created by "make install-html").
6
<!ENTITY % common SYSTEM "common.ent">
7
%common;
80 by Teddy Hogeborn
* mandos-keygen.xml: New man page for mandos-keygen(8).
8
]>
9
91 by Teddy Hogeborn
* Makefile (DOCBOOKTOMAN): Include all DocBook-to-manpage-related
10
<refentry xmlns:xi="http://www.w3.org/2001/XInclude">
80 by Teddy Hogeborn
* mandos-keygen.xml: New man page for mandos-keygen(8).
11
  <refentryinfo>
112 by Teddy Hogeborn
* mandos-clients.conf.xml (/refentry/refentryinfo/title): Changed to
12
    <title>Mandos Manual</title>
96 by Teddy Hogeborn
* Makefile (PREFIX, CONFDIR, MANDIR): Use $(DESTDIR).
13
    <!-- NWalsh’s docbook scripts use this to generate the footer: -->
112 by Teddy Hogeborn
* mandos-clients.conf.xml (/refentry/refentryinfo/title): Changed to
14
    <productname>Mandos</productname>
217 by Teddy Hogeborn
* .bzrignore: Added "man" directory (created by "make install-html").
15
    <productnumber>&version;</productnumber>
111 by Teddy Hogeborn
* mandos-clients.conf.xml (ENTITY TIMESTAMP): New. Automatically
16
    <date>&TIMESTAMP;</date>
80 by Teddy Hogeborn
* mandos-keygen.xml: New man page for mandos-keygen(8).
17
    <authorgroup>
18
      <author>
19
	<firstname>Björn</firstname>
20
	<surname>Påhlsson</surname>
21
	<address>
505.1.2 by Teddy Hogeborn
Change "fukt.bsnet.se" to "recompile.se" throughout.
22
	  <email>belorn@recompile.se</email>
80 by Teddy Hogeborn
* mandos-keygen.xml: New man page for mandos-keygen(8).
23
	</address>
24
      </author>
25
      <author>
26
	<firstname>Teddy</firstname>
27
	<surname>Hogeborn</surname>
28
	<address>
505.1.2 by Teddy Hogeborn
Change "fukt.bsnet.se" to "recompile.se" throughout.
29
	  <email>teddy@recompile.se</email>
80 by Teddy Hogeborn
* mandos-keygen.xml: New man page for mandos-keygen(8).
30
	</address>
31
      </author>
32
    </authorgroup>
33
    <copyright>
34
      <year>2008</year>
246 by Teddy Hogeborn
* README: Update copyright year; add "2009".
35
      <year>2009</year>
778 by Teddy Hogeborn
Update copyright year.
36
      <year>2010</year>
493 by Teddy Hogeborn
* Makefile (DOCS): Added "intro.8mandos".
37
      <year>2011</year>
544 by Teddy Hogeborn
Updated year in copyright notices.
38
      <year>2012</year>
778 by Teddy Hogeborn
Update copyright year.
39
      <year>2013</year>
40
      <year>2014</year>
41
      <year>2015</year>
807 by Teddy Hogeborn
Update copyright year.
42
      <year>2016</year>
899 by Teddy Hogeborn
Update copyright year to 2017
43
      <year>2017</year>
923 by Teddy Hogeborn
Update copyright year to 2018
44
      <year>2018</year>
969 by Teddy Hogeborn
Update copyright year to 2019
45
      <year>2019</year>
96 by Teddy Hogeborn
* Makefile (PREFIX, CONFDIR, MANDIR): Use $(DESTDIR).
46
      <holder>Teddy Hogeborn</holder>
47
      <holder>Björn Påhlsson</holder>
80 by Teddy Hogeborn
* mandos-keygen.xml: New man page for mandos-keygen(8).
48
    </copyright>
131 by Teddy Hogeborn
* Makefile: Make all DocBook rules include legalnotice.xml as a
49
    <xi:include href="legalnotice.xml"/>
80 by Teddy Hogeborn
* mandos-keygen.xml: New man page for mandos-keygen(8).
50
  </refentryinfo>
182 by Teddy Hogeborn
* Makefile (install): Use "install-client-nokey".
51
  
80 by Teddy Hogeborn
* mandos-keygen.xml: New man page for mandos-keygen(8).
52
  <refmeta>
53
    <refentrytitle>&COMMANDNAME;</refentrytitle>
54
    <manvolnum>8</manvolnum>
55
  </refmeta>
56
  
57
  <refnamediv>
58
    <refname><command>&COMMANDNAME;</command></refname>
59
    <refpurpose>
123 by Teddy Hogeborn
* mandos-keygen: Minor help text change.
60
      Generate key and password for Mandos client and server.
80 by Teddy Hogeborn
* mandos-keygen.xml: New man page for mandos-keygen(8).
61
    </refpurpose>
62
  </refnamediv>
182 by Teddy Hogeborn
* Makefile (install): Use "install-client-nokey".
63
  
80 by Teddy Hogeborn
* mandos-keygen.xml: New man page for mandos-keygen(8).
64
  <refsynopsisdiv>
65
    <cmdsynopsis>
66
      <command>&COMMANDNAME;</command>
118 by Teddy Hogeborn
* mandos-keygen.xml (SYNOPSIS): Fixed tags. Unify short and long
67
      <group>
68
	<arg choice="plain"><option>--dir
69
	<replaceable>DIRECTORY</replaceable></option></arg>
70
	<arg choice="plain"><option>-d
71
	<replaceable>DIRECTORY</replaceable></option></arg>
72
      </group>
73
      <sbr/>
74
      <group>
75
	<arg choice="plain"><option>--type
76
	<replaceable>KEYTYPE</replaceable></option></arg>
77
	<arg choice="plain"><option>-t
78
	<replaceable>KEYTYPE</replaceable></option></arg>
79
      </group>
80
      <sbr/>
81
      <group>
82
	<arg choice="plain"><option>--length
83
	<replaceable>BITS</replaceable></option></arg>
84
	<arg choice="plain"><option>-l
85
	<replaceable>BITS</replaceable></option></arg>
86
      </group>
87
      <sbr/>
88
      <group>
89
	<arg choice="plain"><option>--subtype
90
	<replaceable>KEYTYPE</replaceable></option></arg>
91
	<arg choice="plain"><option>-s
92
	<replaceable>KEYTYPE</replaceable></option></arg>
93
      </group>
94
      <sbr/>
95
      <group>
96
	<arg choice="plain"><option>--sublength
97
	<replaceable>BITS</replaceable></option></arg>
98
	<arg choice="plain"><option>-L
99
	<replaceable>BITS</replaceable></option></arg>
100
      </group>
101
      <sbr/>
102
      <group>
103
	<arg choice="plain"><option>--name
104
	<replaceable>NAME</replaceable></option></arg>
105
	<arg choice="plain"><option>-n
106
	<replaceable>NAME</replaceable></option></arg>
107
      </group>
108
      <sbr/>
109
      <group>
110
	<arg choice="plain"><option>--email
111
	<replaceable>ADDRESS</replaceable></option></arg>
112
	<arg choice="plain"><option>-e
113
	<replaceable>ADDRESS</replaceable></option></arg>
114
      </group>
115
      <sbr/>
116
      <group>
117
	<arg choice="plain"><option>--comment
118
	<replaceable>TEXT</replaceable></option></arg>
119
	<arg choice="plain"><option>-c
120
	<replaceable>TEXT</replaceable></option></arg>
121
      </group>
122
      <sbr/>
123
      <group>
124
	<arg choice="plain"><option>--expire
125
	<replaceable>TIME</replaceable></option></arg>
126
	<arg choice="plain"><option>-x
127
	<replaceable>TIME</replaceable></option></arg>
128
      </group>
129
      <sbr/>
708 by Teddy Hogeborn
mandos-keygen: Generate "checker" option to use SSH fingerprints.
130
      <group>
962 by Teddy Hogeborn
Add support for using raw public keys in TLS (RFC 7250)
131
	<arg choice="plain"><option>--tls-keytype
132
	<replaceable>KEYTYPE</replaceable></option></arg>
133
	<arg choice="plain"><option>-T
134
	<replaceable>KEYTYPE</replaceable></option></arg>
135
      </group>
136
      <sbr/>
137
      <group>
708 by Teddy Hogeborn
mandos-keygen: Generate "checker" option to use SSH fingerprints.
138
	<arg choice="plain"><option>--force</option></arg>
139
	<arg choice="plain"><option>-f</option></arg>
140
      </group>
80 by Teddy Hogeborn
* mandos-keygen.xml: New man page for mandos-keygen(8).
141
    </cmdsynopsis>
142
    <cmdsynopsis>
143
      <command>&COMMANDNAME;</command>
144
      <group choice="req">
122 by Teddy Hogeborn
* mandos-keygen.xml (SYNOPSIS): Put long options before short.
145
	<arg choice="plain"><option>--password</option></arg>
97 by Teddy Hogeborn
* mandos-keygen: Bug fix: Recognize new options --subtype and
146
	<arg choice="plain"><option>-p</option></arg>
198 by Teddy Hogeborn
* mandos-keygen: New "--passfile" option. Confirm entered password.
147
	<arg choice="plain"><option>--passfile
148
	<replaceable>FILE</replaceable></option></arg>
149
	<arg choice="plain"><option>-F</option>
150
	<replaceable>FILE</replaceable></arg>
97 by Teddy Hogeborn
* mandos-keygen: Bug fix: Recognize new options --subtype and
151
      </group>
118 by Teddy Hogeborn
* mandos-keygen.xml (SYNOPSIS): Fixed tags. Unify short and long
152
      <sbr/>
153
      <group>
154
	<arg choice="plain"><option>--dir
155
	<replaceable>DIRECTORY</replaceable></option></arg>
156
	<arg choice="plain"><option>-d
157
	<replaceable>DIRECTORY</replaceable></option></arg>
97 by Teddy Hogeborn
* mandos-keygen: Bug fix: Recognize new options --subtype and
158
      </group>
118 by Teddy Hogeborn
* mandos-keygen.xml (SYNOPSIS): Fixed tags. Unify short and long
159
      <sbr/>
160
      <group>
161
	<arg choice="plain"><option>--name
162
	<replaceable>NAME</replaceable></option></arg>
163
	<arg choice="plain"><option>-n
164
	<replaceable>NAME</replaceable></option></arg>
97 by Teddy Hogeborn
* mandos-keygen: Bug fix: Recognize new options --subtype and
165
      </group>
708 by Teddy Hogeborn
mandos-keygen: Generate "checker" option to use SSH fingerprints.
166
      <group>
167
	<arg choice="plain"><option>--no-ssh</option></arg>
168
	<arg choice="plain"><option>-S</option></arg>
169
      </group>
97 by Teddy Hogeborn
* mandos-keygen: Bug fix: Recognize new options --subtype and
170
    </cmdsynopsis>
171
    <cmdsynopsis>
172
      <command>&COMMANDNAME;</command>
173
      <group choice="req">
122 by Teddy Hogeborn
* mandos-keygen.xml (SYNOPSIS): Put long options before short.
174
	<arg choice="plain"><option>--help</option></arg>
96 by Teddy Hogeborn
* Makefile (PREFIX, CONFDIR, MANDIR): Use $(DESTDIR).
175
	<arg choice="plain"><option>-h</option></arg>
80 by Teddy Hogeborn
* mandos-keygen.xml: New man page for mandos-keygen(8).
176
      </group>
177
    </cmdsynopsis>
178
    <cmdsynopsis>
179
      <command>&COMMANDNAME;</command>
180
      <group choice="req">
122 by Teddy Hogeborn
* mandos-keygen.xml (SYNOPSIS): Put long options before short.
181
	<arg choice="plain"><option>--version</option></arg>
96 by Teddy Hogeborn
* Makefile (PREFIX, CONFDIR, MANDIR): Use $(DESTDIR).
182
	<arg choice="plain"><option>-v</option></arg>
80 by Teddy Hogeborn
* mandos-keygen.xml: New man page for mandos-keygen(8).
183
      </group>
184
    </cmdsynopsis>
185
  </refsynopsisdiv>
123 by Teddy Hogeborn
* mandos-keygen: Minor help text change.
186
  
80 by Teddy Hogeborn
* mandos-keygen.xml: New man page for mandos-keygen(8).
187
  <refsect1 id="description">
188
    <title>DESCRIPTION</title>
189
    <para>
190
      <command>&COMMANDNAME;</command> is a program to generate the
962 by Teddy Hogeborn
Add support for using raw public keys in TLS (RFC 7250)
191
      TLS and OpenPGP keys used by
171 by Teddy Hogeborn
Renamed "password-request" to "mandos-client".
192
      <citerefentry><refentrytitle>mandos-client</refentrytitle>
962 by Teddy Hogeborn
Add support for using raw public keys in TLS (RFC 7250)
193
      <manvolnum>8mandos</manvolnum></citerefentry>.  The keys are
964 by Teddy Hogeborn
Doc fix: Change some "/etc/mandos" to "/etc/keys/mandos"
194
      normally written to /etc/keys/mandos for later installation into
195
      the initrd image, but this, and most other things, can be
196
      changed with command line options.
80 by Teddy Hogeborn
* mandos-keygen.xml: New man page for mandos-keygen(8).
197
    </para>
97 by Teddy Hogeborn
* mandos-keygen: Bug fix: Recognize new options --subtype and
198
    <para>
123 by Teddy Hogeborn
* mandos-keygen: Minor help text change.
199
      This program can also be used with the
198 by Teddy Hogeborn
* mandos-keygen: New "--passfile" option. Confirm entered password.
200
      <option>--password</option> or <option>--passfile</option>
201
      options to generate a ready-made section for
202
      <filename>clients.conf</filename> (see
97 by Teddy Hogeborn
* mandos-keygen: Bug fix: Recognize new options --subtype and
203
      <citerefentry><refentrytitle>mandos-clients.conf</refentrytitle>
123 by Teddy Hogeborn
* mandos-keygen: Minor help text change.
204
      <manvolnum>5</manvolnum></citerefentry>).
97 by Teddy Hogeborn
* mandos-keygen: Bug fix: Recognize new options --subtype and
205
    </para>
80 by Teddy Hogeborn
* mandos-keygen.xml: New man page for mandos-keygen(8).
206
  </refsect1>
207
  
86 by Teddy Hogeborn
* mandos-keygen.xml: Removed <?xml-stylesheet>. New entity
208
  <refsect1 id="purpose">
209
    <title>PURPOSE</title>
210
    <para>
211
      The purpose of this is to enable <emphasis>remote and unattended
212
      rebooting</emphasis> of client host computer with an
213
      <emphasis>encrypted root file system</emphasis>.  See <xref
214
      linkend="overview"/> for details.
215
    </para>
216
  </refsect1>
217
  
80 by Teddy Hogeborn
* mandos-keygen.xml: New man page for mandos-keygen(8).
218
  <refsect1 id="options">
219
    <title>OPTIONS</title>
123 by Teddy Hogeborn
* mandos-keygen: Minor help text change.
220
    
80 by Teddy Hogeborn
* mandos-keygen.xml: New man page for mandos-keygen(8).
221
    <variablelist>
222
      <varlistentry>
123 by Teddy Hogeborn
* mandos-keygen: Minor help text change.
223
	<term><option>--help</option></term>
224
	<term><option>-h</option></term>
80 by Teddy Hogeborn
* mandos-keygen.xml: New man page for mandos-keygen(8).
225
	<listitem>
226
	  <para>
227
	    Show a help message and exit
228
	  </para>
229
	</listitem>
230
      </varlistentry>
182 by Teddy Hogeborn
* Makefile (install): Use "install-client-nokey".
231
      
80 by Teddy Hogeborn
* mandos-keygen.xml: New man page for mandos-keygen(8).
232
      <varlistentry>
123 by Teddy Hogeborn
* mandos-keygen: Minor help text change.
233
	<term><option>--dir
234
	<replaceable>DIRECTORY</replaceable></option></term>
235
	<term><option>-d
236
	<replaceable>DIRECTORY</replaceable></option></term>
80 by Teddy Hogeborn
* mandos-keygen.xml: New man page for mandos-keygen(8).
237
	<listitem>
238
	  <para>
964 by Teddy Hogeborn
Doc fix: Change some "/etc/mandos" to "/etc/keys/mandos"
239
	    Target directory for key files.  Default is <filename
240
	    class="directory">/etc/keys/mandos</filename>.
80 by Teddy Hogeborn
* mandos-keygen.xml: New man page for mandos-keygen(8).
241
	  </para>
242
	</listitem>
243
      </varlistentry>
182 by Teddy Hogeborn
* Makefile (install): Use "install-client-nokey".
244
      
80 by Teddy Hogeborn
* mandos-keygen.xml: New man page for mandos-keygen(8).
245
      <varlistentry>
123 by Teddy Hogeborn
* mandos-keygen: Minor help text change.
246
	<term><option>--type
247
	<replaceable>TYPE</replaceable></option></term>
248
	<term><option>-t
249
	<replaceable>TYPE</replaceable></option></term>
80 by Teddy Hogeborn
* mandos-keygen.xml: New man page for mandos-keygen(8).
250
	<listitem>
251
	  <para>
962 by Teddy Hogeborn
Add support for using raw public keys in TLS (RFC 7250)
252
	    OpenPGP key type.  Default is <quote>RSA</quote>.
80 by Teddy Hogeborn
* mandos-keygen.xml: New man page for mandos-keygen(8).
253
	  </para>
254
	</listitem>
255
      </varlistentry>
182 by Teddy Hogeborn
* Makefile (install): Use "install-client-nokey".
256
      
80 by Teddy Hogeborn
* mandos-keygen.xml: New man page for mandos-keygen(8).
257
      <varlistentry>
123 by Teddy Hogeborn
* mandos-keygen: Minor help text change.
258
	<term><option>--length
259
	<replaceable>BITS</replaceable></option></term>
260
	<term><option>-l
261
	<replaceable>BITS</replaceable></option></term>
80 by Teddy Hogeborn
* mandos-keygen.xml: New man page for mandos-keygen(8).
262
	<listitem>
263
	  <para>
962 by Teddy Hogeborn
Add support for using raw public keys in TLS (RFC 7250)
264
	    OpenPGP key length in bits.  Default is 4096.
80 by Teddy Hogeborn
* mandos-keygen.xml: New man page for mandos-keygen(8).
265
	  </para>
266
	</listitem>
267
      </varlistentry>
182 by Teddy Hogeborn
* Makefile (install): Use "install-client-nokey".
268
      
80 by Teddy Hogeborn
* mandos-keygen.xml: New man page for mandos-keygen(8).
269
      <varlistentry>
123 by Teddy Hogeborn
* mandos-keygen: Minor help text change.
270
	<term><option>--subtype
271
	<replaceable>KEYTYPE</replaceable></option></term>
272
	<term><option>-s
273
	<replaceable>KEYTYPE</replaceable></option></term>
96 by Teddy Hogeborn
* Makefile (PREFIX, CONFDIR, MANDIR): Use $(DESTDIR).
274
	<listitem>
275
	  <para>
962 by Teddy Hogeborn
Add support for using raw public keys in TLS (RFC 7250)
276
	    OpenPGP subkey type.  Default is <quote>RSA</quote>
96 by Teddy Hogeborn
* Makefile (PREFIX, CONFDIR, MANDIR): Use $(DESTDIR).
277
	  </para>
278
	</listitem>
279
      </varlistentry>
182 by Teddy Hogeborn
* Makefile (install): Use "install-client-nokey".
280
      
96 by Teddy Hogeborn
* Makefile (PREFIX, CONFDIR, MANDIR): Use $(DESTDIR).
281
      <varlistentry>
123 by Teddy Hogeborn
* mandos-keygen: Minor help text change.
282
	<term><option>--sublength
283
	<replaceable>BITS</replaceable></option></term>
284
	<term><option>-L
285
	<replaceable>BITS</replaceable></option></term>
96 by Teddy Hogeborn
* Makefile (PREFIX, CONFDIR, MANDIR): Use $(DESTDIR).
286
	<listitem>
287
	  <para>
962 by Teddy Hogeborn
Add support for using raw public keys in TLS (RFC 7250)
288
	    OpenPGP subkey length in bits.  Default is 4096.
96 by Teddy Hogeborn
* Makefile (PREFIX, CONFDIR, MANDIR): Use $(DESTDIR).
289
	  </para>
290
	</listitem>
291
      </varlistentry>
182 by Teddy Hogeborn
* Makefile (install): Use "install-client-nokey".
292
      
96 by Teddy Hogeborn
* Makefile (PREFIX, CONFDIR, MANDIR): Use $(DESTDIR).
293
      <varlistentry>
123 by Teddy Hogeborn
* mandos-keygen: Minor help text change.
294
	<term><option>--email
295
	<replaceable>ADDRESS</replaceable></option></term>
296
	<term><option>-e
297
	<replaceable>ADDRESS</replaceable></option></term>
80 by Teddy Hogeborn
* mandos-keygen.xml: New man page for mandos-keygen(8).
298
	<listitem>
299
	  <para>
300
	    Email address of key.  Default is empty.
301
	  </para>
302
	</listitem>
303
      </varlistentry>
182 by Teddy Hogeborn
* Makefile (install): Use "install-client-nokey".
304
      
80 by Teddy Hogeborn
* mandos-keygen.xml: New man page for mandos-keygen(8).
305
      <varlistentry>
123 by Teddy Hogeborn
* mandos-keygen: Minor help text change.
306
	<term><option>--comment
307
	<replaceable>TEXT</replaceable></option></term>
308
	<term><option>-c
309
	<replaceable>TEXT</replaceable></option></term>
80 by Teddy Hogeborn
* mandos-keygen.xml: New man page for mandos-keygen(8).
310
	<listitem>
311
	  <para>
631 by Teddy Hogeborn
* mandos (priority): Bug fix: Add even more magic to make the old
312
	    Comment field for key.  Default is empty.
80 by Teddy Hogeborn
* mandos-keygen.xml: New man page for mandos-keygen(8).
313
	  </para>
314
	</listitem>
315
      </varlistentry>
182 by Teddy Hogeborn
* Makefile (install): Use "install-client-nokey".
316
      
80 by Teddy Hogeborn
* mandos-keygen.xml: New man page for mandos-keygen(8).
317
      <varlistentry>
123 by Teddy Hogeborn
* mandos-keygen: Minor help text change.
318
	<term><option>--expire
319
	<replaceable>TIME</replaceable></option></term>
320
	<term><option>-x
321
	<replaceable>TIME</replaceable></option></term>
80 by Teddy Hogeborn
* mandos-keygen.xml: New man page for mandos-keygen(8).
322
	<listitem>
323
	  <para>
324
	    Key expire time.  Default is no expiration.  See
325
	    <citerefentry><refentrytitle>gpg</refentrytitle>
326
	    <manvolnum>1</manvolnum></citerefentry> for syntax.
327
	  </para>
328
	</listitem>
329
      </varlistentry>
182 by Teddy Hogeborn
* Makefile (install): Use "install-client-nokey".
330
      
80 by Teddy Hogeborn
* mandos-keygen.xml: New man page for mandos-keygen(8).
331
      <varlistentry>
962 by Teddy Hogeborn
Add support for using raw public keys in TLS (RFC 7250)
332
	<term><option>--tls-keytype
333
	<replaceable>KEYTYPE</replaceable></option></term>
334
	<term><option>-T
335
	<replaceable>KEYTYPE</replaceable></option></term>
336
	<listitem>
337
	  <para>
338
	    TLS key type.  Default is <quote>ed25519</quote>
339
	  </para>
340
	</listitem>
341
      </varlistentry>
342
      
343
      <varlistentry>
123 by Teddy Hogeborn
* mandos-keygen: Minor help text change.
344
	<term><option>--force</option></term>
345
	<term><option>-f</option></term>
80 by Teddy Hogeborn
* mandos-keygen.xml: New man page for mandos-keygen(8).
346
	<listitem>
347
	  <para>
123 by Teddy Hogeborn
* mandos-keygen: Minor help text change.
348
	    Force overwriting old key.
80 by Teddy Hogeborn
* mandos-keygen.xml: New man page for mandos-keygen(8).
349
	  </para>
350
	</listitem>
351
      </varlistentry>
97 by Teddy Hogeborn
* mandos-keygen: Bug fix: Recognize new options --subtype and
352
      <varlistentry>
123 by Teddy Hogeborn
* mandos-keygen: Minor help text change.
353
	<term><option>--password</option></term>
354
	<term><option>-p</option></term>
97 by Teddy Hogeborn
* mandos-keygen: Bug fix: Recognize new options --subtype and
355
	<listitem>
356
	  <para>
357
	    Prompt for a password and encrypt it with the key already
964 by Teddy Hogeborn
Doc fix: Change some "/etc/mandos" to "/etc/keys/mandos"
358
	    present in either <filename>/etc/keys/mandos</filename> or
359
	    the directory specified with the <option>--dir</option>
97 by Teddy Hogeborn
* mandos-keygen: Bug fix: Recognize new options --subtype and
360
	    option.  Outputs, on standard output, a section suitable
361
	    for inclusion in <citerefentry><refentrytitle
362
	    >mandos-clients.conf</refentrytitle><manvolnum
363
	    >8</manvolnum></citerefentry>.  The host name or the name
364
	    specified with the <option>--name</option> option is used
365
	    for the section header.  All other options are ignored,
123 by Teddy Hogeborn
* mandos-keygen: Minor help text change.
366
	    and no key is created.
97 by Teddy Hogeborn
* mandos-keygen: Bug fix: Recognize new options --subtype and
367
	  </para>
368
	</listitem>
369
      </varlistentry>
198 by Teddy Hogeborn
* mandos-keygen: New "--passfile" option. Confirm entered password.
370
      <varlistentry>
371
	<term><option>--passfile
372
	<replaceable>FILE</replaceable></option></term>
373
	<term><option>-F
374
	<replaceable>FILE</replaceable></option></term>
375
	<listitem>
376
	  <para>
377
	    The same as <option>--password</option>, but read from
378
	    <replaceable>FILE</replaceable>, not the terminal.
379
	  </para>
380
	</listitem>
381
      </varlistentry>
708 by Teddy Hogeborn
mandos-keygen: Generate "checker" option to use SSH fingerprints.
382
      <varlistentry>
383
	<term><option>--no-ssh</option></term>
384
	<term><option>-S</option></term>
385
	<listitem>
386
	  <para>
387
	    When <option>--password</option> or
388
	    <option>--passfile</option> is given, this option will
389
	    prevent <command>&COMMANDNAME;</command> from calling
390
	    <command>ssh-keyscan</command> to get an SSH fingerprint
391
	    for this host and, if successful, output suitable config
392
	    options to use this fingerprint as a
393
	    <option>checker</option> option in the output.  This is
394
	    otherwise the default behavior.
395
	  </para>
396
	</listitem>
397
      </varlistentry>
80 by Teddy Hogeborn
* mandos-keygen.xml: New man page for mandos-keygen(8).
398
    </variablelist>
399
  </refsect1>
182 by Teddy Hogeborn
* Makefile (install): Use "install-client-nokey".
400
  
86 by Teddy Hogeborn
* mandos-keygen.xml: Removed <?xml-stylesheet>. New entity
401
  <refsect1 id="overview">
402
    <title>OVERVIEW</title>
91 by Teddy Hogeborn
* Makefile (DOCBOOKTOMAN): Include all DocBook-to-manpage-related
403
    <xi:include href="overview.xml"/>
86 by Teddy Hogeborn
* mandos-keygen.xml: Removed <?xml-stylesheet>. New entity
404
    <para>
962 by Teddy Hogeborn
Add support for using raw public keys in TLS (RFC 7250)
405
      This program is a small utility to generate new TLS and OpenPGP
406
      keys for new Mandos clients, and to generate sections for
407
      inclusion in <filename>clients.conf</filename> on the server.
86 by Teddy Hogeborn
* mandos-keygen.xml: Removed <?xml-stylesheet>. New entity
408
    </para>
409
  </refsect1>
182 by Teddy Hogeborn
* Makefile (install): Use "install-client-nokey".
410
  
80 by Teddy Hogeborn
* mandos-keygen.xml: New man page for mandos-keygen(8).
411
  <refsect1 id="exit_status">
412
    <title>EXIT STATUS</title>
413
    <para>
123 by Teddy Hogeborn
* mandos-keygen: Minor help text change.
414
      The exit status will be 0 if a new key (or password, if the
415
      <option>--password</option> option was used) was successfully
416
      created, otherwise not.
80 by Teddy Hogeborn
* mandos-keygen.xml: New man page for mandos-keygen(8).
417
    </para>
418
  </refsect1>
419
  
87 by Teddy Hogeborn
* Makefile: Bug fix: fixed creation of man pages in "plugins.d".
420
  <refsect1 id="environment">
421
    <title>ENVIRONMENT</title>
422
    <variablelist>
423
      <varlistentry>
117 by Teddy Hogeborn
* mandos-keygen.xml (ENVIRONMENT): Replaced <varname> with <envar>.
424
	<term><envar>TMPDIR</envar></term>
87 by Teddy Hogeborn
* Makefile: Bug fix: fixed creation of man pages in "plugins.d".
425
	<listitem>
426
	  <para>
427
	    If set, temporary files will be created here. See
428
	    <citerefentry><refentrytitle>mktemp</refentrytitle>
429
	    <manvolnum>1</manvolnum></citerefentry>.
430
	  </para>
431
	</listitem>
432
      </varlistentry>
433
    </variablelist>
434
  </refsect1>
435
  
224 by Teddy Hogeborn
* mandos-keygen.xml (FILES): Fixed id to be "files", not "file".
436
  <refsect1 id="files">
80 by Teddy Hogeborn
* mandos-keygen.xml: New man page for mandos-keygen(8).
437
    <title>FILES</title>
438
    <para>
87 by Teddy Hogeborn
* Makefile: Bug fix: fixed creation of man pages in "plugins.d".
439
      Use the <option>--dir</option> option to change where
440
      <command>&COMMANDNAME;</command> will write the key files.  The
441
      default file names are shown here.
80 by Teddy Hogeborn
* mandos-keygen.xml: New man page for mandos-keygen(8).
442
    </para>
87 by Teddy Hogeborn
* Makefile: Bug fix: fixed creation of man pages in "plugins.d".
443
    <variablelist>
444
      <varlistentry>
964 by Teddy Hogeborn
Doc fix: Change some "/etc/mandos" to "/etc/keys/mandos"
445
	<term><filename>/etc/keys/mandos/seckey.txt</filename></term>
87 by Teddy Hogeborn
* Makefile: Bug fix: fixed creation of man pages in "plugins.d".
446
	<listitem>
447
	  <para>
448
	    OpenPGP secret key file which will be created or
449
	    overwritten.
450
	  </para>
451
	</listitem>
452
      </varlistentry>
453
      <varlistentry>
964 by Teddy Hogeborn
Doc fix: Change some "/etc/mandos" to "/etc/keys/mandos"
454
	<term><filename>/etc/keys/mandos/pubkey.txt</filename></term>
87 by Teddy Hogeborn
* Makefile: Bug fix: fixed creation of man pages in "plugins.d".
455
	<listitem>
456
	  <para>
457
	    OpenPGP public key file which will be created or
458
	    overwritten.
459
	  </para>
460
	</listitem>
461
      </varlistentry>
462
      <varlistentry>
962 by Teddy Hogeborn
Add support for using raw public keys in TLS (RFC 7250)
463
	<term><filename>/etc/keys/mandos/tls-privkey.pem</filename></term>
464
	<listitem>
465
	  <para>
466
	    Private key file which will be created or overwritten.
467
	  </para>
468
	</listitem>
469
      </varlistentry>
470
      <varlistentry>
471
	<term><filename>/etc/keys/mandos/tls-pubkey.pem</filename></term>
472
	<listitem>
473
	  <para>
474
	    Public key file which will be created or overwritten.
475
	  </para>
476
	</listitem>
477
      </varlistentry>
478
      <varlistentry>
521.1.1 by teddy at bsnet
* plugins.d/mandos-client.c (SYNOPSIS, OPTIONS): Document
479
	<term><filename class="directory">/tmp</filename></term>
87 by Teddy Hogeborn
* Makefile: Bug fix: fixed creation of man pages in "plugins.d".
480
	<listitem>
481
	  <para>
482
	    Temporary files will be written here if
483
	    <varname>TMPDIR</varname> is not set.
484
	  </para>
485
	</listitem>
486
      </varlistentry>
487
    </variablelist>
80 by Teddy Hogeborn
* mandos-keygen.xml: New man page for mandos-keygen(8).
488
  </refsect1>
182 by Teddy Hogeborn
* Makefile (install): Use "install-client-nokey".
489
  
821 by Teddy Hogeborn
Add bug reporting information to manual pages
490
  <refsect1 id="bugs">
491
    <title>BUGS</title>
492
    <xi:include href="bugs.xml"/>
493
  </refsect1>
182 by Teddy Hogeborn
* Makefile (install): Use "install-client-nokey".
494
  
86 by Teddy Hogeborn
* mandos-keygen.xml: Removed <?xml-stylesheet>. New entity
495
  <refsect1 id="example">
496
    <title>EXAMPLE</title>
87 by Teddy Hogeborn
* Makefile: Bug fix: fixed creation of man pages in "plugins.d".
497
    <informalexample>
498
      <para>
499
	Normal invocation needs no options:
500
      </para>
501
      <para>
113 by Teddy Hogeborn
* mandos-keygen.xml (EXAMPLE): Replaced all occurrences of command
502
	<userinput>&COMMANDNAME;</userinput>
87 by Teddy Hogeborn
* Makefile: Bug fix: fixed creation of man pages in "plugins.d".
503
      </para>
504
    </informalexample>
505
    <informalexample>
506
      <para>
123 by Teddy Hogeborn
* mandos-keygen: Minor help text change.
507
	Create key in another directory and of another type.  Force
87 by Teddy Hogeborn
* Makefile: Bug fix: fixed creation of man pages in "plugins.d".
508
	overwriting old key files:
509
      </para>
510
      <para>
511
512
<!-- do not wrap this line -->
113 by Teddy Hogeborn
* mandos-keygen.xml (EXAMPLE): Replaced all occurrences of command
513
<userinput>&COMMANDNAME; --dir ~/keydir --type RSA --force</userinput>
87 by Teddy Hogeborn
* Makefile: Bug fix: fixed creation of man pages in "plugins.d".
514
515
      </para>
516
    </informalexample>
123 by Teddy Hogeborn
* mandos-keygen: Minor help text change.
517
    <informalexample>
518
      <para>
964 by Teddy Hogeborn
Doc fix: Change some "/etc/mandos" to "/etc/keys/mandos"
519
	Prompt for a password, encrypt it with the keys in <filename
520
	class="directory">/etc/keys/mandos</filename> and output a
521
	section suitable for <filename>clients.conf</filename>.
123 by Teddy Hogeborn
* mandos-keygen: Minor help text change.
522
      </para>
523
      <para>
524
	<userinput>&COMMANDNAME; --password</userinput>
525
      </para>
526
    </informalexample>
527
    <informalexample>
528
      <para>
964 by Teddy Hogeborn
Doc fix: Change some "/etc/mandos" to "/etc/keys/mandos"
529
	Prompt for a password, encrypt it with the keys in the
123 by Teddy Hogeborn
* mandos-keygen: Minor help text change.
530
	<filename>client-key</filename> directory and output a section
531
	suitable for <filename>clients.conf</filename>.
532
      </para>
533
      <para>
534
535
<!-- do not wrap this line -->
536
<userinput>&COMMANDNAME; --password --dir client-key</userinput>
537
538
      </para>
539
    </informalexample>
80 by Teddy Hogeborn
* mandos-keygen.xml: New man page for mandos-keygen(8).
540
  </refsect1>
182 by Teddy Hogeborn
* Makefile (install): Use "install-client-nokey".
541
  
80 by Teddy Hogeborn
* mandos-keygen.xml: New man page for mandos-keygen(8).
542
  <refsect1 id="security">
543
    <title>SECURITY</title>
544
    <para>
96 by Teddy Hogeborn
* Makefile (PREFIX, CONFDIR, MANDIR): Use $(DESTDIR).
545
      The <option>--type</option>, <option>--length</option>,
546
      <option>--subtype</option>, and <option>--sublength</option>
123 by Teddy Hogeborn
* mandos-keygen: Minor help text change.
547
      options can be used to create keys of low security.  If in
548
      doubt, leave them to the default values.
87 by Teddy Hogeborn
* Makefile: Bug fix: fixed creation of man pages in "plugins.d".
549
    </para>
550
    <para>
123 by Teddy Hogeborn
* mandos-keygen: Minor help text change.
551
      The key expire time is <emphasis>not</emphasis> guaranteed to be
552
      honored by <citerefentry><refentrytitle>mandos</refentrytitle>
87 by Teddy Hogeborn
* Makefile: Bug fix: fixed creation of man pages in "plugins.d".
553
      <manvolnum>8</manvolnum></citerefentry>.
80 by Teddy Hogeborn
* mandos-keygen.xml: New man page for mandos-keygen(8).
554
    </para>
555
  </refsect1>
182 by Teddy Hogeborn
* Makefile (install): Use "install-client-nokey".
556
  
80 by Teddy Hogeborn
* mandos-keygen.xml: New man page for mandos-keygen(8).
557
  <refsect1 id="see_also">
558
    <title>SEE ALSO</title>
559
    <para>
493 by Teddy Hogeborn
* Makefile (DOCS): Added "intro.8mandos".
560
      <citerefentry><refentrytitle>intro</refentrytitle>
561
      <manvolnum>8mandos</manvolnum></citerefentry>,
114 by Teddy Hogeborn
* mandos-clients.conf.xml (SEE ALSO): Alphabetized, as per
562
      <citerefentry><refentrytitle>gpg</refentrytitle>
563
      <manvolnum>1</manvolnum></citerefentry>,
123 by Teddy Hogeborn
* mandos-keygen: Minor help text change.
564
      <citerefentry><refentrytitle>mandos-clients.conf</refentrytitle>
565
      <manvolnum>5</manvolnum></citerefentry>,
80 by Teddy Hogeborn
* mandos-keygen.xml: New man page for mandos-keygen(8).
566
      <citerefentry><refentrytitle>mandos</refentrytitle>
92 by Teddy Hogeborn
* mandos-keygen.xml (SEE ALSO): Remove "and".
567
      <manvolnum>8</manvolnum></citerefentry>,
171 by Teddy Hogeborn
Renamed "password-request" to "mandos-client".
568
      <citerefentry><refentrytitle>mandos-client</refentrytitle>
708 by Teddy Hogeborn
mandos-keygen: Generate "checker" option to use SSH fingerprints.
569
      <manvolnum>8mandos</manvolnum></citerefentry>,
570
      <citerefentry><refentrytitle>ssh-keyscan</refentrytitle>
571
      <manvolnum>1</manvolnum></citerefentry>
80 by Teddy Hogeborn
* mandos-keygen.xml: New man page for mandos-keygen(8).
572
    </para>
573
  </refsect1>
574
  
575
</refentry>
111 by Teddy Hogeborn
* mandos-clients.conf.xml (ENTITY TIMESTAMP): New. Automatically
576
<!-- Local Variables: -->
577
<!-- time-stamp-start: "<!ENTITY TIMESTAMP [\"']" -->
578
<!-- time-stamp-end: "[\"']>" -->
579
<!-- time-stamp-format: "%:y-%02m-%02d" -->
580
<!-- End: -->