The Monkeysphere enables you to use the OpenPGPweb of trust to verify ssh connections. SSHkey-based authentication is tried-and-true, but itlacks a true public key infrastructure for keycertification, revocation, and expiration.Monkeysphere is a framework that uses the OpenPGPweb of trust for these PKI functions. It can beused in both directions: for users to getvalidated host keys, and for hosts to authenticateusers.
MSVA-QUERY-AGENT(1) User Contributed Perl Documentation MSVA-QUERY-AGENT(1)NAME
msva-query-agent - query a Monkeysphere Validation Agent
SYNOPSIS
msva-query-agent CONTEXT PEER PKC_TYPE [PEER_TYPE] < /path/to/public_key_carrier
ABSTRACT
msva-query-agent validates certificates for a given use by querying a running Monkeysphere Validation Agent.
USAGE
msva-query-agent reads a certificate from standard input, and posts it to the running Monkeysphere Validation Agent. The return code
indicates the validity (as determined by the agent) of the certificate for the specified purpose. The agent's return message (if any) is
emitted on stdout.
The first three command-line arguments are all required, supplied in order, as follows:
CONTEXT
Context in which the certificate is being validated (e.g. 'https', 'ssh', 'ike')
PEER
The name of the intended peer. When validating a certificate for a service, supply the host's full DNS name (e.g. 'foo.example.net')
PKC_TYPE
The format of public key carrier data provided on standard input (e.g. 'x509der', 'x509pem', 'opensshpubkey', 'rfc4716')
The fourth argument is optional:
PEER_TYPE
The type of peer we are inquiring about (e.g. 'client', 'server')
RETURN CODE
If the certificate is valid for the requested peer in the given context, the return code is 0. Otherwise, the return code is 1.
ENVIRONMENT VARIABLES
msva-query-agent's behavior is controlled by environment variables:
MONKEYSPHERE_VALIDATION_AGENT_SOCKET
Socket over which to query the validation agent. If unset, the default value is 'http://127.0.0.1:8901'.
MSVA_LOG_LEVEL
Log messages about its operation to stderr. MSVA_LOG_LEVEL controls its verbosity, and should be one of (in increasing verbosity):
silent, quiet, fatal, error, info, verbose, debug, debug1, debug2, debug3. Default is 'error'.
COMMUNICATION PROTOCOL DETAILS
Communications with the Monkeysphere Validation Agent are in the form of JSON requests over plain HTTP. Responses from the agent are also
JSON objects. For details on the structure of the requests and responses, please see
http://web.monkeysphere.info/validation-agent/protocol
SEE ALSO msva-perl(1), monkeysphere(1), monkeysphere(7)BUGS AND FEEDBACK
Bugs or feature requests for msva-perl and associated tools should be filed with the Monkeysphere project's bug tracker at
https://labs.riseup.net/code/projects/monkeysphere/issues/
AUTHORS AND CONTRIBUTORS
Jameson Graef Rollins <jrollins@finestructure.net<gt> Daniel Kahn Gillmor <dkg@fifthhorseman.net<gt>
The Monkeysphere Team http://web.monkeysphere.info/
COPYRIGHT AND LICENSE
Copyright AX 2010, Jameson Graef Rollins and others from the Monkeysphere team. msva-query-agent is free software, distributed under the
GNU Public License, version 3 or later.
perl v5.14.2 2013-04-05 MSVA-QUERY-AGENT(1)