See #16769 (moved) -- it proposed a few command-line arguments to make ed25519 key management easier. I got one of them implemented, but the rest weren't ready for 0.2.7.
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information
Child items ...
Show closed items
Linked items 0
Link issues together to show that they're related.
Learn more.
We have been asked on the mail list for an option to create ed25519 master id keys on demand with --keygen in a non-interactive way for management scripts or applications which interact with Tor. Currently, when calling --keygen we are asked for a passphrase (it's not mandatory, we can press enter and proceed with an unencrypted master id key but it cannot be done in a non-interactive way).
nusenu suggested and me and teor think it's a good idea to also have a --nopass option to use with --keygen. When used Tor will just create an unencrypted master id key without asking for further input.
Trac: Summary: Fix and re-enable --master-key option and possibly --out (for keys) to Fix and re-enable --master-key option, possibly --out (for keys) and possibly --nopass for non-interactive key generation
Since --master-key and --out are meant to split in 2 the attributes of --DataDirectory and eliminate the requirement of of a "keys" subfolder, we should code it in a way that these cannot be used together, to avoid confusions.
--DataDirectory will expect to find the master identity key in the given path under a "keys" subfolder under the filename "ed25519_master_id_secret_key" or "ed25519_master_id_secret_key_encrypted" and save all the output files in the same place.
--master-key and --out will require a direct path to the master identity key that can have any filename and a direct path for saving the output files. Might as well treat --master-key and --out dependent on each other.
Remove the SponsorU status from these items, which we already decided to defer from 0.2.9. add the SponsorU-deferred tag instead in case we ever want to remember which ones these were.