Opened 4 years ago

Last modified 2 years ago

#17127 new enhancement

Fix and re-enable --master-key option, possibly --out (for keys) and possibly --nopass for non-interactive key generation

Reported by: nickm Owned by:
Priority: Medium Milestone: Tor: unspecified
Component: Core Tor/Tor Version:
Severity: Normal Keywords: tor-relay key-management usability cli
Cc: s7r, tyseom Actual Points:
Parent ID: Points: small/medium
Reviewer: Sponsor:

Description

See #16769 -- it proposed a few command-line arguments to make ed25519 key management easier. I got one of them implemented, but the rest weren't ready for 0.2.7.

Child Tickets

Change History (20)

comment:1 Changed 4 years ago by s7r

Cc: s7r added

comment:2 Changed 4 years ago by nickm

Keywords: 028-triaged added

comment:3 Changed 4 years ago by nickm

Sponsor: SponsorU

comment:4 Changed 4 years ago by nickm

Points: small/medium

comment:5 Changed 4 years ago by tyseom

Cc: tyseom added
Severity: Normal

comment:6 Changed 4 years ago by s7r

We have been asked on the mail list for an option to create ed25519 master id keys on demand with --keygen in a non-interactive way for management scripts or applications which interact with Tor. Currently, when calling --keygen we are asked for a passphrase (it's not mandatory, we can press enter and proceed with an unencrypted master id key but it cannot be done in a non-interactive way).

nusenu suggested and me and teor think it's a good idea to also have a --nopass option to use with --keygen. When used Tor will just create an unencrypted master id key without asking for further input.

comment:7 Changed 4 years ago by s7r

Summary: Fix and re-enable --master-key option and possibly --out (for keys)Fix and re-enable --master-key option, possibly --out (for keys) and possibly --nopass for non-interactive key generation

comment:8 Changed 4 years ago by s7r

Since --master-key and --out are meant to split in 2 the attributes of --DataDirectory and eliminate the requirement of of a "keys" subfolder, we should code it in a way that these cannot be used together, to avoid confusions.

--DataDirectory will expect to find the master identity key in the given path under a "keys" subfolder under the filename "ed25519_master_id_secret_key" or "ed25519_master_id_secret_key_encrypted" and save all the output files in the same place.

--master-key and --out will require a direct path to the master identity key that can have any filename and a direct path for saving the output files. Might as well treat --master-key and --out dependent on each other.

comment:9 Changed 4 years ago by nickm

Owner: set to nickm
Status: newaccepted

comment:10 Changed 4 years ago by nickm

Milestone: Tor: 0.2.8.x-finalTor: 0.2.9.x-final

These tickets, though owned by me, are not deliverables I can realistically deliver by the 0.2.8 freeze window.

comment:11 Changed 4 years ago by isabela

Sponsor: SponsorUSponsorU-can

comment:12 Changed 4 years ago by nickm

Owner: nickm deleted
Status: acceptedassigned

comment:13 Changed 4 years ago by isabela

Milestone: Tor: 0.2.9.x-finalTor: 0.2.???

tickets market to be removed from milestone 029

comment:14 Changed 4 years ago by nickm

Keywords: SponsorU-deferred added
Sponsor: SponsorU-can

Remove the SponsorU status from these items, which we already decided to defer from 0.2.9. add the SponsorU-deferred tag instead in case we ever want to remember which ones these were.

comment:15 Changed 3 years ago by teor

Milestone: Tor: 0.2.???Tor: 0.3.???

Milestone renamed

comment:16 Changed 3 years ago by nickm

Keywords: tor-03-unspecified-201612 added
Milestone: Tor: 0.3.???Tor: unspecified

Finally admitting that 0.3.??? was a euphemism for Tor: unspecified all along.

comment:17 Changed 3 years ago by nickm

Keywords: tor-03-unspecified-201612 removed

Remove an old triaging keyword.

comment:18 Changed 3 years ago by nickm

Keywords: 028-triaged removed

comment:19 Changed 3 years ago by nickm

Status: assignednew

Change the status of all assigned/accepted Tor tickets with owner="" to "new".

comment:20 Changed 2 years ago by nickm

Keywords: tor-relay key-management usability cli added; SponsorU-deferred removed
Note: See TracTickets for help on using tickets.