webapp gpg key generation
Now the webapp can generate a gpg key that is dedicated for use by git-annex. Since the key is single use, much of the complexity of generating gpg keys is avoided. Note that the key has no password, because gpg-agent is not available everywhere the assistant is installed. This is not a big security problem because the key is going to live on the same disk as the git annex repository, so an attacker with access to it can look directly in the repository to see the same files that get stored in the encrypted repository on the removable drive. There is no provision yet for backing up keys. This commit sponsored by Robert Beaty.
This commit is contained in:
parent
cac0688d0e
commit
9de189e788
8 changed files with 69 additions and 19 deletions
|
@ -7,7 +7,7 @@
|
|||
<p>
|
||||
Do you want to combine these files into your repository?
|
||||
<p>
|
||||
<a .btn onclick="$('#setupmodal').modal('show');" href="@{FinishAddDriveR (RemovableDriveKey drive Nothing)}">
|
||||
<a .btn onclick="$('#setupmodal').modal('show');" href="@{FinishAddDriveR drive NoRepoKey}">
|
||||
<i .icon-resize-small></i> Combine the repositories #
|
||||
The combined repositories will sync and share their files.
|
||||
<p>
|
||||
|
|
|
@ -9,12 +9,12 @@
|
|||
will also prevent you from sharing the repository with friends, or #
|
||||
easily accessing its contents on another computer.
|
||||
<p>
|
||||
<a .btn onclick="$('#setupmodal').modal('show');" href="@{FinishAddDriveR (RemovableDriveKey drive Nothing)}">
|
||||
<a .btn onclick="$('#setupmodal').modal('show');" href="@{FinishAddDriveR drive NoRepoKey}">
|
||||
<i .icon-minus-sign></i> Do not encrypt repository #
|
||||
Anyone who has the drive can see the files stored on it.
|
||||
$forall (keyid, name) <- secretkeys
|
||||
<p>
|
||||
<a .btn onclick="$('#setupmodal').modal('show');" href="@{FinishAddDriveR (RemovableDriveKey drive (Just keyid))}">
|
||||
<a .btn onclick="$('#setupmodal').modal('show');" href="@{FinishAddDriveR drive (RepoKey keyid)}">
|
||||
<i .icon-ok-sign></i> Encrypt repository #
|
||||
to
|
||||
<span title="key id #{keyid}">
|
||||
|
@ -24,7 +24,8 @@
|
|||
$else
|
||||
#{name}
|
||||
<p>
|
||||
<a .btn href="">
|
||||
<a .btn onclick="$('#genkeymodal').modal('show');" href="@{GenKeyForDriveR drive}">
|
||||
<i .icon-plus-sign></i> Encrypt repository #
|
||||
with a new encryption key
|
||||
^{setupDriveModal}
|
||||
^{genKeyModal}
|
||||
|
|
12
templates/configurators/genkeymodal.hamlet
Normal file
12
templates/configurators/genkeymodal.hamlet
Normal file
|
@ -0,0 +1,12 @@
|
|||
<div .modal .fade #genkeymodal>
|
||||
<div .modal-header>
|
||||
<h3>
|
||||
<img src="@{StaticR activityicon_gif}" alt=""> #
|
||||
Generating a #{maxRecommendedKeySize} bit GnuPg key.
|
||||
<div .modal-body>
|
||||
<p>
|
||||
Generating a GnuPg key can take a long time. To speed up the process, #
|
||||
it actually helps to use your computer for other things, which helps #
|
||||
generate random numbers that keep the GnuPg key secure.
|
||||
<p>
|
||||
So if this is taking too long, go play a game or something!
|
Loading…
Add table
Add a link
Reference in a new issue