debian/0000755000000000000000000000000012107637506007175 5ustar debian/copyright0000644000000000000000000000344612107637442011136 0ustar Format: http://www.debian.org/doc/packaging-manuals/copyright-format/1.0/ Upstream-Name: sshfp Upstream-Contact: Paul Wouters Jake Appelbaum Source: ftp://ftp.xelerance.com/sshfp/ Copyright: 2006-2011 Xelerance Corporation License: GPL-2+ Files: dane Copyright: 2011 Xelerance Corporation License: GPL-2+ Files: sshfp Copyright: 2006-2010 Xelerance Corporation License: GPL-2+ Files: tlsdns.py Copyright: 2010-2011 Xelerance Corporation License: GPL-2 This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, version 2 of the License. . This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. . On Debian systems, the full text of the GNU General Public License version 2 can be found in the file `/usr/share/common-licenses/GPL-2'. Files: debian/* Copyright: 2007-2011 Julien Valroff License: GPL-2+ License: GPL-2+ This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. . This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. . On Debian systems, the full text of the GNU General Public License version 2 can be found in the file `/usr/share/common-licenses/GPL-2'. debian/dane0000755000000000000000000000005312107637442010027 0ustar #!/bin/sh exec /usr/share/sshfp/dane.py $@ debian/patches/0000755000000000000000000000000012107637442010623 5ustar debian/patches/002_fix-undefined-var.diff0000644000000000000000000000173512107637442015357 0ustar Description: Fix undefined variable Author: Ward Vandewege Bug-Debian: http://bugs.debian.org/681253 Last-Update: 2012-07-14 --- a/sshfp +++ b/sshfp @@ -129,7 +129,7 @@ fingerprints.append(process_records(data, wantedHosts)) return "\n".join(fingerprints) -def check_keytype(keytype): +def check_keytype(keytype, hostname): global algos for algo in algos: if "ssh-%s" % algo[:-1] == keytype[:-1]: @@ -141,7 +141,7 @@ def process_record(record, hostname): (host, keytype, key) = record.split(" ") key = key.rstrip() - if check_keytype(keytype): + if check_keytype(keytype, hostname): record = create_sshfp(hostname, keytype, key) return record return "" @@ -168,7 +168,7 @@ if "," in host: host = host.split(",")[0] if all_hosts or host in hostnames or host == hostnames: - if not check_keytype(keytype): + if not check_keytype(keytype, host): continue all_records.append(create_sshfp(host, keytype, key)) if all_records: debian/patches/003_fix-k-option.diff0000644000000000000000000000124412107637442014364 0ustar Description: Fix use of option -k Author: Casper Gielen Bug-Debian: http://bugs.debian.org/697844 Last-Update: 2012-07-14 --- a/sshfp +++ b/sshfp @@ -258,7 +258,7 @@ action="store", dest="known_hosts", metavar="KNOWN_HOSTS_FILE", - default=None, + default=DEFAULT_KNOWN_HOSTS_FILE, help="obtain public ssh keys from the known_hosts file KNOWN_HOSTS_FILE") parser.add_option("-s", "--scan", action="store_true", @@ -342,8 +342,6 @@ if not args: print >> sys.stderr, "WARNING: Assuming -a" all_hosts = True - if not options.scan: - khfile = DEFAULT_KNOWN_HOSTS_FILE if options.scan and options.all_hosts: datal = [] debian/patches/series0000644000000000000000000000010312107637442012032 0ustar 001_makefile.diff 002_fix-undefined-var.diff 003_fix-k-option.diff debian/patches/001_makefile.diff0000644000000000000000000000170712107637442013617 0ustar Description: Ships daneldnsx.py in the Debian package Author: Julien Valroff Bug-Debian: http://bugs.debian.org/648659 Last-Update: 2011-11-15 --- a/Makefile +++ b/Makefile @@ -4,17 +4,17 @@ BIN = $(DESTDIR)/usr/bin MAN = $(DESTDIR)/usr/share/man/man1 +SHARE = $(DESTDIR)/usr/share/sshfp -all: man daneldnsx +all: man install: install -m 0755 -d $(BIN) install -m 0755 sshfp $(BIN) - install -m 0755 dane $(BIN) + install -m 0755 dane $(SHARE)/dane.py install -m 0755 -d $(MAN) install -m 0644 sshfp.1 $(MAN) install -m 0644 dane.1 $(MAN) - python -mcompileall daneldnsx.py gzip $(MAN)/sshfp.1 gzip $(MAN)/dane.1 @@ -24,14 +24,11 @@ dane.1: dane.1.xml xmlto man dane.1.xml -daneldnsx: - python -mcompileall daneldnsx.py - man: man-page man-page: sshfp.1 dane.1 clean: - -rm -f sshfp.1 dane.1 daneldnsx.pyc + -rm -f sshfp.1 dane.1 dist-clean: @echo Nothing to dist-clean - This is a python script debian/install0000644000000000000000000000007412107637442010566 0ustar debian/dane /usr/bin/ daneldnsx.py /usr/share/sshfp/ debian/dirs0000644000000000000000000000002112107637442010051 0ustar /usr/share/sshfp debian/changelog0000644000000000000000000000703312107637442011051 0ustar sshfp (1.2.2-4) unstable; urgency=low * Fix previously applied patch - thanks to Armin Burchardt (Closes: #681253) * Add patch to actually make use of option -k - thanks to Casper Gielen (Closes: #697844) -- Julien Valroff Sat, 16 Feb 2013 09:04:50 +0100 sshfp (1.2.2-3) unstable; urgency=low * Drop unconditional dependency on python-argparse which was included in python 2.7 - thanks to Adrian Bunk (Closes: #653639) * Update DEP-5 URI to the final location * Apply patch to fix undefined variable - thanks to Ward Vandewege (Closes: #681253) * Bump Standards-Version to 3.9.3 (no changes needed) -- Julien Valroff Tue, 28 Feb 2012 18:48:02 +0100 sshfp (1.2.2-2) unstable; urgency=low * Update DEP-5 uri * Ships daneldnsx.py and add a wrapper around dane (Closes: #648659) * Add dependencies for dane -- Julien Valroff Sun, 13 Nov 2011 21:24:26 +0100 sshfp (1.2.2-1) unstable; urgency=low * New upstream release: - Fix -4 / -6 flags - Throw errors on stderr to improve pipe usage - openSUSE package information on import error - Fix nameserver by IP address (ldns workaround) - Fix case where AAAA is found but no IPv6 is available * Fix watch file * Remove useless empty dh_auto_build override * Remove X-Python-Version field as I am unsure which is the minimum supported python version -- Julien Valroff Sat, 17 Sep 2011 08:20:07 +0200 sshfp (1.2.1-1) unstable; urgency=low * New upstream release * Update copyright information for the new release * Switch from pysupport to dh_python2 * Update to new policy 3.9.2 (no changes needed) * Update VCS fields -- Julien Valroff Mon, 25 Apr 2011 15:11:26 +0200 sshfp (1.1.6-3) unstable; urgency=low * Update copyright file to latest DPE-5 revision * Remove unused substvars from control file * Bump debhelper compat to 8 -- Julien Valroff Sat, 12 Feb 2011 15:15:53 +0100 sshfp (1.1.6-2) unstable; urgency=low * Fix watch file for new upstream website * Update my email address -- Julien Valroff Mon, 08 Nov 2010 21:43:10 +0100 sshfp (1.1.6-1) unstable; urgency=low * New upstream release * Drop patches merged upstream * Add build-depends on xmlto * Add patch to use the manpage from the orig tarball * Pass --unapply-patches to dpkg-source before build -- Julien Valroff Sat, 16 Oct 2010 18:35:10 +0200 sshfp (1.1.3-3) unstable; urgency=low * Bump Debian policy version to 3.9.1 * Add patch to avoid deprecation warnings with python 2.6 (thanks to Martin Jackson for the patch) -- Julien Valroff Sun, 03 Oct 2010 21:18:02 +0200 sshfp (1.1.3-2) unstable; urgency=low * Updated for new Debian policy 3.8.3 (no changes needed) * Converted to 3.0 (quilt) source package format * Switched from SVN to GIT - updated VCS-* fields * Make use of dh override feature -- Julien Valroff Fri, 01 Jan 2010 18:55:15 +0100 sshfp (1.1.3-1) unstable; urgency=low [ Julien Valroff ] * First upload to Debian (Closes: #413240) [ Maximiliano Curia ] * Added 001_makefile.dpatch, to fix some erroneous directory creation. * Added 002_manpage.dpatch, to change some erroneous comment lines. * Added Maximiliano Curia as Uploader. -- Julien Valroff Wed, 09 Jul 2008 17:40:38 +0200 debian/control0000644000000000000000000000166412107637442010606 0ustar Source: sshfp Section: net Priority: extra Maintainer: Julien Valroff Uploaders: Maximiliano Curia Build-Depends: debhelper (>= 8), python (>= 2.6.6-3) Homepage: http://www.xelerance.com/software/sshfp/ Vcs-Git: git://git.kirya.net/debian/sshfp Vcs-Browser: http://git.kirya.net/?p=debian/sshfp.git;a=summary Standards-Version: 3.9.3 Package: sshfp Architecture: all Depends: ${misc:Depends}, ${python:Depends}, python-dnspython, openssh-client, python (>= 2.7) | python-argparse, python-ldns, python-ipcalc Description: DNS SSHFP records generator sshfp generates RFC4255 SSHFP DNS records based on the public keys stored in a known_hosts file, or public keys can be obtained by using ssh-keyscan. Serve these entries from the DNS server for your domain to provide authentication via the ssh VerifyHostKeyDNS option. . This package also includes the dane command to generate IETF DANE WG DNS records. debian/watch0000644000000000000000000000010612107637442010222 0ustar version=3 opts=pasv ftp://ftp.xelerance.com/sshfp/sshfp-(.*)\.tar\.gz debian/compat0000644000000000000000000000000212107637442010372 0ustar 8 debian/rules0000755000000000000000000000011712107637442010253 0ustar #!/usr/bin/make -f %: dh $@ --with python2 override_dh_auto_clean: dh_clean debian/source/0000755000000000000000000000000012107637442010474 5ustar debian/source/format0000644000000000000000000000001412107637442011702 0ustar 3.0 (quilt) debian/docs0000644000000000000000000000002112107637442010040 0ustar BUGS README TODO