[dane] updated hash-slinger package

Paul Wouters <paul@nohats.ca> Tue, 06 January 2015 16:31 UTC

Date: Tue, 06 Jan 2015 11:29:26 -0500
From: Paul Wouters <paul@nohats.ca>
To: dane WG list <dane@ietf.org>
Message-ID: <alpine.LFD.2.10.1501061124530.13632@bofh.nohats.ca>
User-Agent: Alpine 2.10 (LFD 1266 2009-07-14)
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset="US-ASCII"; format="flowed"
Archived-At: http://mailarchive.ietf.org/arch/msg/dane/qAFpawpmVqtB8KA3dHcCgKzzqKE
Subject: [dane] updated hash-slinger package
Precedence: list

http://people.redhat.com/pwouters/hash-slinger

(in fedora/epel updates-testing repository)

I just pushed an update to hash-slinger, so now you can do:

$ openpgpkey --fetch paul@nohats.ca
-----BEGIN PGP PUBLIC KEY BLOCK-----
Comment: paul@nohats.ca key obtained from DNS
Comment: key transfer was protected by DNSSEC
Version: GnuPG v1

mQENAz97DD0AAAEH/2hrtp4YrNMcOAAF8YbM8ryWl8uH/dTFzV2plMt+CVh7V5EG
N7icm8n+aXUJeY+pvftjiXj0kvEJmcOllfbvG+4Bus4cn2NtM7Yy0kZLSE050bkn
OE+WX9/ffbnXQcnk/E6DBnosIaxPCxnmL2SV6UtGNkbeC3tDcUWfrMtQaqkUhhqN
gfD1p47HIrbPGnr4EX+Ck52HPe7/neo9WZ6XR4pWNQ50clJXJfBpwZVpedx9f0ys
[...]
pOfy75us2QcD8vVTXB/pItRy+2eJP1uhiP85Xko8QhVn6Hi0spJeGHt5Wk63Mrvm
gZ3ro3/uz7/w0P56Q1bX5+bfGq8JB1UFOA0gwxZCdg==
=T8tU
-----END PGP PUBLIC KEY BLOCK-----


$ openpgpkey --fetch paul@nohats.ca | gpg --import --dry-run
gpg: WARNING: digest algorithm MD5 is deprecated
gpg: please see http://www.gnupg.org/faq/weak-digest-algos.html for more
information
gpg: key B5CC27E1: "Paul Wouters (migration only, use new key)
<paul@nohats.ca>" not changed
gpg: Total number processed: 1
gpg:              unchanged: 1

It also fixes the --create option to deal with all the weird character
set anomalies in people's keys. Requires python-gnupg 0.3.7. So all
people with non-english entries in they gpg keyring should be able
to finally use openpgpkey to create OPENPGPKEY records:

openpgpkey --create your@email.com --output generic  (generic record format)
openpgpkey --create your@email.com --output rfc  (OPENPGPKEY presentation format)

(openpgpkey --verify will fetch and compare with local keyring)

It also fixes sshfp for debian and adds ECDSA key support.
And finally I added ipseckey (only with libreswan and possibly openswan)

Paul

[dane] updated hash-slinger package Paul Wouters