145 lines
6.4 KiB
HTML
145 lines
6.4 KiB
HTML
<head>
|
|
<title>secstore(1) - Plan 9 from User Space</title>
|
|
<meta content="text/html; charset=utf-8" http-equiv=Content-Type>
|
|
</head>
|
|
<body bgcolor=#ffffff>
|
|
<table border=0 cellpadding=0 cellspacing=0 width=100%>
|
|
<tr height=10><td>
|
|
<tr><td width=20><td>
|
|
<tr><td width=20><td><b>SECSTORE(1)</b><td align=right><b>SECSTORE(1)</b>
|
|
<tr><td width=20><td colspan=2>
|
|
<br>
|
|
<p><font size=+1><b>NAME </b></font><br>
|
|
|
|
<table border=0 cellpadding=0 cellspacing=0><tr height=2><td><tr><td width=20><td>
|
|
|
|
aescbc, secstore, ipso – secstore commands<br>
|
|
|
|
</table>
|
|
<p><font size=+1><b>SYNOPSIS </b></font><br>
|
|
|
|
<table border=0 cellpadding=0 cellspacing=0><tr height=2><td><tr><td width=20><td>
|
|
|
|
<tt><font size=+1>secstore</font></tt> [ <tt><font size=+1>−s</font></tt> <i>server</i> ] [ <tt><font size=+1>−(g|G)</font></tt> <i>getfile</i> ] [ <tt><font size=+1>−p</font></tt> <i>putfile</i> ] [ <tt><font size=+1>−r</font></tt>
|
|
<i>rmfile</i> ] [ <tt><font size=+1>−c</font></tt> ] [ <tt><font size=+1>−u</font></tt> <i>user</i> ] [ <tt><font size=+1>−v</font></tt> ] [ <tt><font size=+1>−i</font></tt> ]
|
|
<table border=0 cellpadding=0 cellspacing=0><tr height=5><td></table>
|
|
|
|
<tt><font size=+1>aescbc</font></tt> -e <i><cleartext >ciphertext<br>
|
|
</i><tt><font size=+1>aescbc</font></tt> -d <i><ciphertext >cleartext
|
|
<table border=0 cellpadding=0 cellspacing=0><tr height=5><td></table>
|
|
</i>
|
|
<tt><font size=+1>ipso</font></tt> [ <tt><font size=+1>−a −e −l −f −s</font></tt> ] [ <i>file</i> ... ]
|
|
<table border=0 cellpadding=0 cellspacing=0><tr height=5><td></table>
|
|
|
|
|
|
</table>
|
|
<p><font size=+1><b>DESCRIPTION </b></font><br>
|
|
|
|
<table border=0 cellpadding=0 cellspacing=0><tr height=5><td></table>
|
|
|
|
|
|
<table border=0 cellpadding=0 cellspacing=0><tr height=2><td><tr><td width=20><td>
|
|
|
|
<i>Secstore</i> authenticates to the server using a password and optionally
|
|
a hardware token, then saves or retrieves a file. This is intended
|
|
to be a credentials store (public/private keypairs, passwords,
|
|
and other secrets) for a factotum.
|
|
<table border=0 cellpadding=0 cellspacing=0><tr height=5><td></table>
|
|
|
|
Option <tt><font size=+1>−p</font></tt> stores a file on the secstore.
|
|
<table border=0 cellpadding=0 cellspacing=0><tr height=5><td></table>
|
|
|
|
Option <tt><font size=+1>−g</font></tt> retrieves a file to the local directory; option <tt><font size=+1>−G</font></tt> writes
|
|
it to standard output instead. Specifying <i>getfile</i> of . will send
|
|
to standard output a list of remote files with dates, lengths
|
|
and SHA1 hashes.
|
|
<table border=0 cellpadding=0 cellspacing=0><tr height=5><td></table>
|
|
|
|
Option <tt><font size=+1>−r</font></tt> removes a file from the secstore.
|
|
<table border=0 cellpadding=0 cellspacing=0><tr height=5><td></table>
|
|
|
|
Option <tt><font size=+1>−c</font></tt> prompts for a password change.
|
|
<table border=0 cellpadding=0 cellspacing=0><tr height=5><td></table>
|
|
|
|
Option <tt><font size=+1>−v</font></tt> produces more verbose output, in particular providing
|
|
a few bits of feedback to help the user detect mistyping.
|
|
<table border=0 cellpadding=0 cellspacing=0><tr height=5><td></table>
|
|
|
|
Option <tt><font size=+1>−i</font></tt> says that the password should be read from standard
|
|
input instead of from <tt><font size=+1>/dev/cons</font></tt>.
|
|
<table border=0 cellpadding=0 cellspacing=0><tr height=5><td></table>
|
|
|
|
Option <tt><font size=+1>−n</font></tt> says that the password should be read from NVRAM instead
|
|
of from <tt><font size=+1>/dev/cons</font></tt>. This option is unsupported.
|
|
<table border=0 cellpadding=0 cellspacing=0><tr height=5><td></table>
|
|
|
|
The server is <tt><font size=+1>tcp!$auth!5356</font></tt>, or the server specified by option
|
|
<tt><font size=+1>−s</font></tt>.
|
|
<table border=0 cellpadding=0 cellspacing=0><tr height=5><td></table>
|
|
|
|
For example, to add a secret to the file read by <a href="../man4/factotum.html"><i>factotum</i>(4)</a> at
|
|
startup, open a new window, type<br>
|
|
|
|
<table border=0 cellpadding=0 cellspacing=0><tr height=2><td><tr><td width=20><td>
|
|
|
|
<tt><font size=+1>% ramfs −p; cd /tmp<br>
|
|
% auth/secstore −g factotum<br>
|
|
secstore password:<br>
|
|
% echo 'key proto=apop dom=x.com user=ehg !password=hi' >> factotum<br>
|
|
% auth/secstore −p factotum<br>
|
|
secstore password:<br>
|
|
% read −m factotum > /mnt/factotum/ctl<br>
|
|
|
|
<table border=0 cellpadding=0 cellspacing=0><tr height=5><td></table>
|
|
</font></tt>
|
|
|
|
</table>
|
|
and delete the window. The first line creates an ephemeral memory-resident
|
|
workspace, invisible to others and automatically removed when
|
|
the window is deleted. The next three commands fetch the persistent
|
|
copy of the secrets, append a new secret, and save the updated
|
|
file back to secstore. The final command
|
|
loads the new secret into the running factotum.
|
|
<table border=0 cellpadding=0 cellspacing=0><tr height=5><td></table>
|
|
|
|
<i>Aescbc</i> encrypts and decrypts using AES (Rijndael) in cipher block
|
|
chaining (CBC) mode.<br>
|
|
|
|
</table>
|
|
<p><font size=+1><b>SOURCE </b></font><br>
|
|
|
|
<table border=0 cellpadding=0 cellspacing=0><tr height=2><td><tr><td width=20><td>
|
|
|
|
<tt><font size=+1>/usr/local/plan9/src/cmd/secstore<br>
|
|
</font></tt>
|
|
</table>
|
|
<p><font size=+1><b>SEE ALSO </b></font><br>
|
|
|
|
<table border=0 cellpadding=0 cellspacing=0><tr height=2><td><tr><td width=20><td>
|
|
|
|
<a href="../man4/factotum.html"><i>factotum</i>(4)</a>, Plan 9’s <i>secstore</i>(8)<br>
|
|
|
|
</table>
|
|
<p><font size=+1><b>BUGS </b></font><br>
|
|
|
|
<table border=0 cellpadding=0 cellspacing=0><tr height=2><td><tr><td width=20><td>
|
|
|
|
There is deliberately no backup of files on the secstore, so <tt><font size=+1>−r</font></tt>
|
|
(or a disk crash) is irrevocable. You are advised to store important
|
|
secrets in a second location.<br>
|
|
|
|
</table>
|
|
|
|
<td width=20>
|
|
<tr height=20><td>
|
|
</table>
|
|
<!-- TRAILER -->
|
|
<table border=0 cellpadding=0 cellspacing=0 width=100%>
|
|
<tr height=15><td width=10><td><td width=10>
|
|
<tr><td><td>
|
|
<center>
|
|
<a href="../../"><img src="../../dist/spaceglenda100.png" alt="Space Glenda" border=1></a>
|
|
</center>
|
|
</table>
|
|
<!-- TRAILER -->
|
|
</body></html>
|