On Mon, Aug 28, 2000 at 06:15:45PM +0200, Niels Mvller wrote:
> > Maybe some sort of detail: "You sent the following fingerprint. XX
> > XX XX XX. You have registered the following fingerprints: XX XX XX
> > XX, XX XX XX XX. No match" Right now I don't realy understand the
> > error message.
>
> It might be possible to include the algorithm name in the message.
>
> Although not trivial to do right, as the names are generally forgotten
> as soon as they have been interned to ATOM_FOO (if foo is a known
> magic word) or zero (if the symbol was not present in the atoms.in).
> In the latter case, the information is lost.
Hmm - I wasn't thinking anything as complicated as storing and then
printing later for information. I was more thinking some well placed:
if (debug) { printf("I have this fingerprint: %s\n"); }
Immediately when it reads the file.
> Fingerprints are more difficult; if the client says "this is a
> gnomovision public key", it is difficult for the server to figure out
> what kind of fingerprinting makes sense for the gnomovision system.
> (For a concrete example, substitute openpgp for gnomovision).
Hmm - It doesn't have to be a real fingerprint, just some human readable
form that a debugger could follow it along. If all it reads is the file
name, printing that might be sufficient (Assuming that you can generate
it from what the client send you)
> > Yes. It created a directory called ~/.lsh/authorized_keys_sha1 and
> > placed the 2 public keys there that I put in in some binary format. (I'm
> > testing with both lsh and ssh2 and being equally unloved)
>
> It's not enough to copy the files there; they must also have the
> right names (in fact, it is *only* the names of the files in that
> directory that matter, the server doesn't even read their contents).
I guess I'm not being clear today. I used the lsh-authorize script.
(That's what 'it' reffered to) =)
> > Thanks I'll try this, I just need to get Scheme and the new M4 loaded on
> > to subversions.
>
> Newer m4 is not crucial; it's needed only for regenerating some files
> in the testsuite.
Ah, good. Thanks.
> For scheme, IIRC the needed debian packages are guile and slib.
Thanks. I tried apt-geting them and it didn't like me. I'll try again
later, I had to run to work.
--
"It is easy to be blinded to the essential uselessness of computers by
the sense of accomplishment you get from getting them to work at all."
- Douglas Adams
