Re: Desperately Seeking Kristian - SKS HKPS certificate renewals
If only there was some way to establish trust (secrecy, authenticity, integrity) relationships in a distributed manner, rather than relying on a small pool of third parties who might suddenly become unavailable... 樂 On Fri, Jun 12, 2020 at 10:39 AM Todd Fleisher wrote: > Thanks for the suggestion, Gabor. He doesn’t appear to have been active > there since last summer, but it can’t hurt to try. > > -T > > > On Jun 11, 2020, at 21:19, Gabor Kiss wrote: > > > > On Thu, 11 Jun 2020, Todd Fleisher wrote: > > > >> Has anyone seen or heard from Kristian in the last month or so? I?ve > reached > > > >> SKS HKPS pool will become defunct. If anyone has other channels by > which to > >> reach Kristian, please use them to reach out and make sure he is OK & > aware > >> of this impending issue. > > > > https://mobile.twitter.com/krifisk > > > > Gabor > > > > -- GDB has a 'break' feature; why doesn't it have 'fix' too?
Re: [Sks-devel] dump-only server (gossip but not public pool availability)
you can spin up a second instance on the same host, perhaps bound to 127.0.0.1:21370 and 127.0.0.1:21371. Have your public instance also peer with the localhost-only instance, and the locallhost-only instance peer only with your public instance. Then you can start and stop the localhost-only instance to dump it. On Sun, Feb 4, 2018 at 4:26 PM, Hendrik Visagewrote: > Good day, > > As I can’t dump the SKS database while running, and the file snapshot > setup not quite feasible for my setup(s) yet, I was wondering about a > gossiping only server (and only gossiping to a limited set servers close > peers) that isn’t connected/advertised to the SKS pool. > This would then be a server I could easily take offline and dump keys > every so often, not impacting the pool availability etc. > > Which settings should I use to achieve the above, as it seems the moment I > start the server, it starts to broadcast it’s availability to be included > in the pool? > > --- > Hendrik Visage > HeViS.Co Systems Pty Ltd > T/A Envisage Systems / Envisage Cloud Solutions > +27-84-612-5345 <+27%2084%20612%205345> or +27-21-945-1192 > <+27%2021%20945%201192> > hvis...@envisage.co.za > > > > > ___ > Sks-devel mailing list > Sks-devel@nongnu.org > https://lists.nongnu.org/mailman/listinfo/sks-devel > > -- GDB has a 'break' feature; why doesn't it have 'fix' too? ___ Sks-devel mailing list Sks-devel@nongnu.org https://lists.nongnu.org/mailman/listinfo/sks-devel
Re: [Sks-devel] Linking error in sks-1.1.0
On Thu, Dec 11, 2008 at 11:26 AM, Sebastian Wieseler sebast...@nanofortnight.org wrote: Ahh. Thanks! Terrible that db-4.6 isn't yet umasked on Gentoo. :-( you could build db 4.6 and install it into /home/sks. then you have the required library, but you don't pollute the base system -- GDB has a 'break' feature; why doesn't it have 'fix' too? ___ Sks-devel mailing list Sks-devel@nongnu.org http://lists.nongnu.org/mailman/listinfo/sks-devel
Re: [Sks-devel] Installing a new SKS server
On Sun, 12 Aug 2007, Jack Cummings wrote: On Sun, Aug 12, 2007 at 09:05:17PM -0600, Chris Kuethe wrote: I assume that was you grabbing my latest keydump - let me know when you've got it loaded and the name of your server, and I'll add you to my peers list. Monthly keydumps sound like a good use for torrents. Yes, though I don't mind leaving a not-too-outdated dump up at ftp://pgp.srv.ualberta.ca/ -- Chris Kuethe, GCIA: Secure Systems Specialist - U of A AICT office: 157 General Services Bldg.+1.780.492.8135 [EMAIL PROTECTED] GDB has a 'break' feature; why doesn't it have 'fix' too? ___ Sks-devel mailing list Sks-devel@nongnu.org http://lists.nongnu.org/mailman/listinfo/sks-devel
Re: [Sks-devel] Installing a new SKS server
On Mon, 13 Aug 2007, Ron Peterson wrote: 2007-08-13_00:20:59-0400 Jack Cummings [EMAIL PROTECTED]: On Sun, Aug 12, 2007 at 09:05:17PM -0600, Chris Kuethe wrote: I assume that was you grabbing my latest keydump - let me know when you've got it loaded and the name of your server, and I'll add you to my peers list. Monthly keydumps sound like a good use for torrents. I like that idea. I don't mind setting one up, but I've got to get through the end of summer crunch first. It occurs to me that this may not work as well as one might like. Everybody's keydump is going to be slightly different based on what order keys were loaded, last update time, where a given update was injected into the net ... to me that suggest that we'll have 40 servops all downloading a torrent they don't really need. So long as the keydump is within a few thousand keys of the full keyring, I think that's probably sufficient to bootstrap a server. Also, how often do keydumps actually get used? At least for users at other academic institutions, it makes sense to have a dump available via FTP - this may suffer less a the hands of the traffic shapers that are getting so common these days. If others would see value in this, I'm willing to schedule a weekly or monthly dump and leave it open for all interested parties... CK -- Chris Kuethe, GCIA: Secure Systems Specialist - U of A AICT office: 157 General Services Bldg.+1.780.492.8135 [EMAIL PROTECTED] GDB has a 'break' feature; why doesn't it have 'fix' too? ___ Sks-devel mailing list Sks-devel@nongnu.org http://lists.nongnu.org/mailman/listinfo/sks-devel
Re: [Sks-devel] Re: Permanent diff with pgp.srv.ualberta.ca
On Sun, 21 Aug 2005, Jason Harris wrote: On Sun, Aug 21, 2005 at 09:32:24AM -0600, Chris Kuethe wrote: Not sure what's going on there... Last reconciliation run was less than 10 minutes ago, and my keyserver thinks it has all the keys that you have. # ls -l diff-62.94.26.10_11371.txt -rw-r--r-- 1 sks sks 0 Aug 21 09:08 diff-62.94.26.10_11371.txt What if you remove the diff file? Does sks show the same keys after the next reconciliation attempt? We've had this happen several times before. Check the archives and you should learn that you need to force a sks cleandb on your end, Chris. Okie dokie. I just ran cleandb, though I ran it immediately after loading my keys but before bringing the keyserver up. CK -- Chris Kuethe, GCIA: Secure Systems Specialist - U of A CNS office: 157 General Services Bldg.+1.780.492.8135 [EMAIL PROTECTED] GDB has a 'break' feature; why doesn't it have 'fix' too? ___ Sks-devel mailing list [EMAIL PROTECTED] http://lists.nongnu.org/mailman/listinfo/sks-devel