keys-pub / keys-ext

Extensions and experiments.

keys.pub

☢ This project is in development and has not been audited or reviewed. Use at your own risk. ☢

Documentation

Visit keys.pub.

Repositories

Repo	Description
keys-pub/keys	Key management, signing and encryption, including keys/saltpack.
keys-pub/keys-ext	Extensions: Service (gRPC), command line client, DB, Firestore, HTTP API/Client/Server, Vault, Wormhole, etc.
keys-pub/app	Desktop app.

keys-ext's Issues

Ability to Delete Sigchain or Key from Server with Signed Request

I would like to request the ability to delete a key from keys.pub by submitting a signed deletion request.
I would also like to request the ability to delete entries from the sigchain by submitting a signed request.

Windows naming conflict

Windows support legacy DOS command keys.

I didn't install keys for CLI, so I don't know what will happen if install.
Just keep that in mind. Perhaps it may confuse or complicate writing cross-platform scripts.

I didn't find information on the DOS command keys on the Internet. I got the information from a message in the console, through keys /?, After the message keys -> "Keys mode is disabled."

`keys sign` should be compatible with other signing tools

We should make the -stdin the default behavior and make signer a positional argument, or whatever is consistent with other signing tools.

Also possibly for other commands as well.

org.freedesktop.secrets service dependency

When trying to start keysd:

INFO[2020-04-28T21:48:53.258673747Z] Keyring (system)                                                                                                                                                                               
The name org.freedesktop.secrets was not provided by any .service files

Is the long-term plan to depend on the system keyring, or to provide a mechanism that doesn't?

wormhole: SCTP transmission failure (in test)

Re-enable wormhole package test in go.yml when fixed.

2020-04-28T00:51:48.8206357Z go: extracting gortc.io/stun v1.22.1
2020-04-28T00:51:48.9014050Z go: extracting golang.org/x/net v0.0.0-20200324143707-d3edc9973b7e
2020-04-28T00:51:49.0039973Z go: finding github.com/pion/logging v0.2.2
2020-04-28T00:51:49.0090267Z go: finding github.com/pion/sctp v1.7.6
2020-04-28T00:51:49.0233086Z go: finding gortc.io/stun v1.22.1
2020-04-28T00:51:49.1140520Z go: finding github.com/flynn/noise v0.0.0-20180327030543-2492fe189ae6
2020-04-28T00:51:49.1148364Z go: finding github.com/keys-pub/keysd/http/client v0.0.0-20200414170516-1e0e72775735
2020-04-28T00:51:49.1346364Z go: finding github.com/keybase/saltpack v0.0.0-20200228190633-d75baa96bffb
2020-04-28T00:51:49.1924328Z go: finding github.com/stretchr/testify v1.5.1
2020-04-28T00:51:49.1947103Z go: finding github.com/labstack/echo/v4 v4.1.16
2020-04-28T00:51:49.2032351Z go: finding gopkg.in/yaml.v2 v2.2.8
2020-04-28T00:51:49.2038587Z go: finding github.com/mattn/go-colorable v0.1.6
2020-04-28T00:51:49.2130564Z go: finding github.com/mattn/go-isatty v0.0.12
2020-04-28T00:51:49.2333818Z go: finding golang.org/x/net v0.0.0-20200324143707-d3edc9973b7e
2020-04-28T00:52:01.7676269Z === RUN   TestNewWormhole
2020-04-28T00:52:01.7677845Z --- PASS: TestNewWormhole (3.31s)
2020-04-28T00:52:01.7678368Z === RUN   TestWormholeSameKey
2020-04-28T00:52:01.7679090Z --- PASS: TestWormholeSameKey (3.31s)
2020-04-28T00:52:01.7679854Z === RUN   TestWormholeCancel
2020-04-28T00:52:01.7680564Z --- PASS: TestWormholeCancel (1.10s)
2020-04-28T00:52:01.7682185Z === RUN   TestWormholeNoRecipient
2020-04-28T00:52:01.7682753Z --- PASS: TestWormholeNoRecipient (0.03s)
2020-04-28T00:52:01.7682900Z PASS
2020-04-28T00:52:01.7683295Z ok  	github.com/keys-pub/keysd/wormhole	7.764s
2020-04-28T01:01:54.5614930Z === RUN   TestNewClient
2020-04-28T01:01:54.5617096Z sctp ERROR: 2020/04/28 00:57:27 [0xc000120000] retransmission failure: T1-init
2020-04-28T01:01:54.5617705Z panic: test timed out after 10m0s
2020-04-28T01:01:54.5617910Z 
2020-04-28T01:01:54.5618316Z goroutine 26 [running]:
2020-04-28T01:01:54.5618713Z testing.(*M).startAlarm.func1()
2020-04-28T01:01:54.5619070Z 	/opt/hostedtoolcache/go/1.13.10/x64/src/testing/testing.go:1377 +0xdf
2020-04-28T01:01:54.5619537Z created by time.goFunc
2020-04-28T01:01:54.5619873Z 	/opt/hostedtoolcache/go/1.13.10/x64/src/time/sleep.go:168 +0x44
2020-04-28T01:01:54.5620241Z 
2020-04-28T01:01:54.5620504Z goroutine 1 [chan receive]:
2020-04-28T01:01:54.5620825Z testing.(*T).Run(0xc0000ee100, 0x7891b2, 0xd, 0x7a13a8, 0x47f3f6)
2020-04-28T01:01:54.5621359Z 	/opt/hostedtoolcache/go/1.13.10/x64/src/testing/testing.go:961 +0x377
2020-04-28T01:01:54.5621653Z testing.runTests.func1(0xc0000ee000)
2020-04-28T01:01:54.5622163Z 	/opt/hostedtoolcache/go/1.13.10/x64/src/testing/testing.go:1202 +0x78
2020-04-28T01:01:54.5622763Z testing.tRunner(0xc0000ee000, 0xc0000dddc0)
2020-04-28T01:01:54.5623313Z 	/opt/hostedtoolcache/go/1.13.10/x64/src/testing/testing.go:909 +0xc9
2020-04-28T01:01:54.5623592Z testing.runTests(0xc0000964a0, 0xa0dbe0, 0x3, 0x3, 0x0)
2020-04-28T01:01:54.5624039Z 	/opt/hostedtoolcache/go/1.13.10/x64/src/testing/testing.go:1200 +0x2a7
2020-04-28T01:01:54.5624291Z testing.(*M).Run(0xc0000e8080, 0x0)
2020-04-28T01:01:54.5624647Z 	/opt/hostedtoolcache/go/1.13.10/x64/src/testing/testing.go:1117 +0x176
2020-04-28T01:01:54.5624935Z main.main()
2020-04-28T01:01:54.5625159Z 	_testmain.go:50 +0x135
2020-04-28T01:01:54.5625311Z 
2020-04-28T01:01:54.5625602Z goroutine 20 [semacquire]:
2020-04-28T01:01:54.5625927Z sync.runtime_Semacquire(0xc000086b78)
2020-04-28T01:01:54.5626203Z 	/opt/hostedtoolcache/go/1.13.10/x64/src/runtime/sema.go:56 +0x42
2020-04-28T01:01:54.5626518Z sync.(*WaitGroup).Wait(0xc000086b70)
2020-04-28T01:01:54.5626887Z 	/opt/hostedtoolcache/go/1.13.10/x64/src/sync/waitgroup.go:130 +0x64
2020-04-28T01:01:54.5627612Z github.com/keys-pub/keysd/wormhole/sctp_test.testClient(0xc0000ee100, 0x1ed98af400)
2020-04-28T01:01:54.5627999Z 	/home/runner/work/keysd/keysd/wormhole/sctp/client_test.go:63 +0x397
2020-04-28T01:01:54.5628604Z github.com/keys-pub/keysd/wormhole/sctp_test.TestNewClient(0xc0000ee100)
2020-04-28T01:01:54.5629004Z 	/home/runner/work/keysd/keysd/wormhole/sctp/client_test.go:16 +0x30
2020-04-28T01:01:54.5629258Z testing.tRunner(0xc0000ee100, 0x7a13a8)
2020-04-28T01:01:54.5629689Z 	/opt/hostedtoolcache/go/1.13.10/x64/src/testing/testing.go:909 +0xc9
2020-04-28T01:01:54.5629946Z created by testing.(*T).Run
2020-04-28T01:01:54.5630206Z 	/opt/hostedtoolcache/go/1.13.10/x64/src/testing/testing.go:960 +0x350
2020-04-28T01:01:54.5630536Z 
2020-04-28T01:01:54.5630812Z goroutine 24 [IO wait]:
2020-04-28T01:01:54.5631254Z internal/poll.runtime_pollWait(0x7f9ebf0c9008, 0x72, 0x0)
2020-04-28T01:01:54.5631592Z 	/opt/hostedtoolcache/go/1.13.10/x64/src/runtime/netpoll.go:184 +0x55
2020-04-28T01:01:54.5632255Z internal/poll.(*pollDesc).wait(0xc0000e8498, 0x72, 0x400, 0x400, 0x0)
2020-04-28T01:01:54.5632619Z 	/opt/hostedtoolcache/go/1.13.10/x64/src/internal/poll/fd_poll_runtime.go:87 +0x45
2020-04-28T01:01:54.5635425Z internal/poll.(*pollDesc).waitRead(...)
2020-04-28T01:01:54.5635889Z 	/opt/hostedtoolcache/go/1.13.10/x64/src/internal/poll/fd_poll_runtime.go:92
2020-04-28T01:01:54.5636396Z internal/poll.(*FD).ReadFrom(0xc0000e8480, 0xc000146800, 0x400, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
2020-04-28T01:01:54.5636854Z 	/opt/hostedtoolcache/go/1.13.10/x64/src/internal/poll/fd_unix.go:219 +0x1c3
2020-04-28T01:01:54.5637359Z net.(*netFD).readFrom(0xc0000e8480, 0xc000146800, 0x400, 0x400, 0x28, 0x40d886, 0xc0000826c0, 0x0, 0x0)
2020-04-28T01:01:54.5638059Z 	/opt/hostedtoolcache/go/1.13.10/x64/src/net/fd_unix.go:208 +0x5b
2020-04-28T01:01:54.5638489Z net.(*UDPConn).readFrom(0xc00008a060, 0xc000146800, 0x400, 0x400, 0x28, 0xc00007fa70, 0xc000047f08, 0x44659c)
2020-04-28T01:01:54.5639029Z 	/opt/hostedtoolcache/go/1.13.10/x64/src/net/udpsock_posix.go:47 +0x6a
2020-04-28T01:01:54.5639643Z net.(*UDPConn).ReadFromUDP(0xc00008a060, 0xc000146800, 0x400, 0x400, 0x28, 0xc00007fa70, 0x0, 0x0)
2020-04-28T01:01:54.5640126Z 	/opt/hostedtoolcache/go/1.13.10/x64/src/net/udpsock.go:109 +0x5d
2020-04-28T01:01:54.5641075Z github.com/keys-pub/keysd/wormhole/sctp.(*Client).readFromUDP(0xc0000964e0, 0xc000125400, 0x28, 0x400, 0x0, 0x0)
2020-04-28T01:01:54.5641557Z 	/home/runner/work/keysd/keysd/wormhole/sctp/client.go:281 +0x75
2020-04-28T01:01:54.5642400Z github.com/keys-pub/keysd/wormhole/sctp.(*Client).handshake.func2(0xc000096401, 0xc0000964e0, 0xc00007b090, 0xc00007b0a0, 0xc000086b00, 0xc000086b90)
2020-04-28T01:01:54.5642888Z 	/home/runner/work/keysd/keysd/wormhole/sctp/handshake.go:39 +0x3c
2020-04-28T01:01:54.5643545Z created by github.com/keys-pub/keysd/wormhole/sctp.(*Client).handshake
2020-04-28T01:01:54.5644030Z 	/home/runner/work/keysd/keysd/wormhole/sctp/handshake.go:36 +0x1a3
2020-04-28T01:01:54.5644475Z 
2020-04-28T01:01:54.5644837Z goroutine 25 [semacquire]:
2020-04-28T01:01:54.5645151Z sync.runtime_Semacquire(0xc000086b98)
2020-04-28T01:01:54.5645652Z 	/opt/hostedtoolcache/go/1.13.10/x64/src/runtime/sema.go:56 +0x42
2020-04-28T01:01:54.5645971Z sync.(*WaitGroup).Wait(0xc000086b90)
2020-04-28T01:01:54.5647127Z 	/opt/hostedtoolcache/go/1.13.10/x64/src/sync/waitgroup.go:130 +0x64
2020-04-28T01:01:54.5648098Z github.com/keys-pub/keysd/wormhole/sctp.(*Client).handshake.func3(0xc000086b90, 0xc00006a420)
2020-04-28T01:01:54.5648501Z 	/home/runner/work/keysd/keysd/wormhole/sctp/handshake.go:68 +0x69
2020-04-28T01:01:54.5649065Z created by github.com/keys-pub/keysd/wormhole/sctp.(*Client).handshake
2020-04-28T01:01:54.5649434Z 	/home/runner/work/keysd/keysd/wormhole/sctp/handshake.go:66 +0x1ed
2020-04-28T01:01:54.5649647Z 
2020-04-28T01:01:54.5649926Z goroutine 10 [select]:
2020-04-28T01:01:54.5650261Z github.com/pion/sctp.(*Association).writeLoop(0xc000120000)
2020-04-28T01:01:54.5650746Z 	/home/runner/go/pkg/mod/github.com/pion/[email protected]/association.go:456 +0x18b
2020-04-28T01:01:54.5651088Z created by github.com/pion/sctp.(*Association).init
2020-04-28T01:01:54.5651425Z 	/home/runner/go/pkg/mod/github.com/pion/[email protected]/association.go:299 +0xcf
2020-04-28T01:01:54.5651652Z 
2020-04-28T01:01:54.5651928Z goroutine 9 [IO wait]:
2020-04-28T01:01:54.5652248Z internal/poll.runtime_pollWait(0x7f9ebf0c90d8, 0x72, 0x0)
2020-04-28T01:01:54.5652577Z 	/opt/hostedtoolcache/go/1.13.10/x64/src/runtime/netpoll.go:184 +0x55
2020-04-28T01:01:54.5652929Z internal/poll.(*pollDesc).wait(0xc0000e8118, 0x72, 0x2000, 0x2000, 0x0)
2020-04-28T01:01:54.5653293Z 	/opt/hostedtoolcache/go/1.13.10/x64/src/internal/poll/fd_poll_runtime.go:87 +0x45
2020-04-28T01:01:54.5653604Z internal/poll.(*pollDesc).waitRead(...)
2020-04-28T01:01:54.5653958Z 	/opt/hostedtoolcache/go/1.13.10/x64/src/internal/poll/fd_poll_runtime.go:92
2020-04-28T01:01:54.5654349Z internal/poll.(*FD).ReadFrom(0xc0000e8100, 0xc000122000, 0x2000, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0)
2020-04-28T01:01:54.5654708Z 	/opt/hostedtoolcache/go/1.13.10/x64/src/internal/poll/fd_unix.go:219 +0x1c3
2020-04-28T01:01:54.5655134Z net.(*netFD).readFrom(0xc0000e8100, 0xc000122000, 0x2000, 0x2000, 0x0, 0x7f9ebf11c418, 0xc00003aa80, 0xc000038e10, 0x1)
2020-04-28T01:01:54.5655484Z 	/opt/hostedtoolcache/go/1.13.10/x64/src/net/fd_unix.go:208 +0x5b
2020-04-28T01:01:54.5655903Z net.(*UDPConn).readFrom(0xc00008a058, 0xc000122000, 0x2000, 0x2000, 0xc000122000, 0x7f9ebf11c418, 0x1, 0x101000000000000)
2020-04-28T01:01:54.5656255Z 	/opt/hostedtoolcache/go/1.13.10/x64/src/net/udpsock_posix.go:47 +0x6a
2020-04-28T01:01:54.5656674Z net.(*UDPConn).ReadFromUDP(0xc00008a058, 0xc000122000, 0x2000, 0x2000, 0xc000012100, 0xc0001040a0, 0xc000038f18, 0x44659c)
2020-04-28T01:01:54.5657006Z 	/opt/hostedtoolcache/go/1.13.10/x64/src/net/udpsock.go:109 +0x5d
2020-04-28T01:01:54.5657695Z github.com/keys-pub/keysd/wormhole/sctp.(*udpConn).Read(0xc000022090, 0xc000122000, 0x2000, 0x2000, 0x1, 0x1, 0x3)
2020-04-28T01:01:54.5658070Z 	/home/runner/work/keysd/keysd/wormhole/sctp/conn.go:27 +0x57
2020-04-28T01:01:54.5658573Z github.com/pion/sctp.(*Association).readLoop(0xc000120000)
2020-04-28T01:01:54.5658959Z 	/home/runner/go/pkg/mod/github.com/pion/[email protected]/association.go:421 +0x193
2020-04-28T01:01:54.5659289Z created by github.com/pion/sctp.(*Association).init
2020-04-28T01:01:54.5659623Z 	/home/runner/go/pkg/mod/github.com/pion/[email protected]/association.go:298 +0xaa
2020-04-28T01:01:54.5660175Z FAIL	github.com/keys-pub/keysd/wormhole/sctp	600.007s
2020-04-28T01:01:54.5660725Z ?   	github.com/keys-pub/keysd/wormhole/sctp/cmd	[no test files]
2020-04-28T01:01:54.5661278Z ?   	github.com/keys-pub/keysd/wormhole/stuntest	[no test files]
2020-04-28T01:01:54.5661564Z FAIL
2020-04-28T01:01:54.5745144Z ##[error]Process completed with exit code 1.
2020-04-28T01:01:54.5789762Z Post job cleanup.
2020-04-28T01:01:54.6843969Z [command]/usr/bin/git version
2020-04-28T01:01:54.6908379Z git version 2.26.0
2020-04-28T01:01:54.6944811Z [command]/usr/bin/git config --local --name-only --get-regexp core\.sshCommand
2020-04-28T01:01:54.6988480Z [command]/usr/bin/git submodule foreach --recursive git config --local --name-only --get-regexp 'core\.sshCommand' && git config --local --unset-all 'core.sshCommand' || :
2020-04-28T01:01:54.7262560Z [command]/usr/bin/git config --local --name-only --get-regexp http\.https\:\/\/github\.com\/\.extraheader
2020-04-28T01:01:54.7303524Z http.https://github.com/.extraheader
2020-04-28T01:01:54.7312458Z [command]/usr/bin/git config --local --unset-all http.https://github.com/.extraheader
2020-04-28T01:01:54.7360613Z [command]/usr/bin/git submodule foreach --recursive git config --local --name-only --get-regexp 'http\.https\:\/\/github\.com\/\.extraheader' && git config --local --unset-all 'http.https://github.com/.extraheader' || :
2020-04-28T01:01:54.7681130Z Cleaning up orphan processes

More option to revoke a User statement

During the testing period, I accidentally delete the gist statement and also the keys pair that used to create the statement

Now I cannot associate another keys pair with my Github account as it is required to revoke the last statement 1st.

I think it is better to provide some extra method to revoke a User statement, in-case of private key lots

keys auth fails

keys auth fails with a password because the unlock request RPC is called with type UNKNOWN_AUTH instead of PASSWORD_AUTH.

Looks like the problem is here, because Type is not explicitly set when AuthUnlockRequest is created.

https://github.com/keys-pub/keysd/blob/a2a1183387edd59f8f4890feda7007e65419a1d6/service/cmd_auth.go#L77-L80

CLI signature verification output

Hi @gabriel

I want to use keys to sign a SHA256 hash of a binary, but the UX seems off to me. As far as I can tell so far, there is no output when the signature is successfully verified. The only obvious sign that it did something is a 0 exit code.

I started with this:

sha256sum mybinary | keys sign -s btburke@github -m armor,detached > mybinary.sig

Then verified with this:

sha256sum mybinary | keys verify -s btburke@github -x mybinary.sig

That works, because I get "verify failed" if I make a change to the binary.

But, from a user experience perspective I think it would inspire more confidence if a successful verification also had something on stdout, with maybe a -q, --quiet flag to only look at the return code.

Allow to export keys with any password

Now export of keys is allowed only with default auth password (or without password at all). Please add ability to export keys with any other password.

Fix import of keys without password

Please add parameter --no-password to command keys import. Now it's impossible to import keys without password from command line. GUI allow to do it.

User connection-fail should be removed from /user/search after awhile

User status with connection-fail can stay in search for a long time.
After awhile it is no longer a transient error and should be removed from search, or it should be removed right away?