Bug#693310: ITP: spiped -- create secure pipes between socket addresses

2012-11-15 Thread Cristian Ionescu-Idbohrn
On Thu, 15 Nov 2012, Peter Pentchev wrote:
> On Thu, Nov 15, 2012 at 09:12:53PM +0800, Paul Wise wrote:
> > On Thu, Nov 15, 2012 at 8:18 PM, Peter Pentchev wrote:
> >
> > >   Description : create secure pipes between socket addresses

[...]

> I personally think that it would be a useful alternative to have in
> Debian; of course, if people's opinion leans the other way, I would be
> prepared to withdraw the ITP.

I think you should go ahead with the package.  It sounds like a nice
alternative.


Cheers,

-- 
Cristian


-- 
To UNSUBSCRIBE, email to debian-wnpp-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/alpine.deb.2.02.1211151834510.8...@pnrfne.pvv.fr



Bug#693310: ITP: spiped -- create secure pipes between socket addresses

2012-11-15 Thread Peter Pentchev
On Thu, Nov 15, 2012 at 09:12:53PM +0800, Paul Wise wrote:
> On Thu, Nov 15, 2012 at 8:18 PM, Peter Pentchev wrote:
> 
> >   Description : create secure pipes between socket addresses
> >
> > spiped (pronounced "ess-pipe-dee") is a utility for creating symmetrically
> > encrypted and authenticated pipes between socket addresses, so that one may
> > connect to one address (e.g., a UNIX socket on localhost) and transparently
> > have a connection established to another address (e.g., a UNIX socket on a
> > different system).  This is similar to 'ssh -L' functionality, but does not
> > use SSH and requires a pre-shared symmetric key.
> >
> > spipe (pronounced "ess-pipe") is a utility which acts as an spiped protocol
> > client (i.e., connects to an spiped daemon), taking input from the standard
> > input and writing data read back to the standard output.
> 
> Sounds similar to socat, which can connect endpoints (including SSL ones).
> 
> stunnel is similar too.

Thanks for your comments!

I am familiar with Stunnel (I maintained the FreeBSD port for several
years), and I have indeed examined the Swiss army knife that is socat,
too.  IMHO the advantages of spiped lie in its simplicity, its lean and
mean design for doing just one thing and doing it well (and yes, I am
quite aware that this is pretty much exactly how socat started Way Back
When :)) and its speed.  It does not attempt to start a full-blown
OpenSSL session, it uses just symmetric cryptography with a preshared
key (and an optional, on by default, Diffie-Hellman session key
exchange) for robust, high-load client-server connections (as witnessed
by its origin in the Tarsnap project).

I personally think that it would be a useful alternative to have in
Debian; of course, if people's opinion leans the other way, I would be
prepared to withdraw the ITP.

G'luck,
Peter


-- 
Peter Pentchev  r...@ringlet.net r...@freebsd.org pe...@packetscale.com
PGP key:http://people.FreeBSD.org/~roam/roam.key.asc
Key fingerprint 2EE7 A7A5 17FC 124C F115  C354 651E EFB0 2527 DF13
If you think this sentence is confusing, then change one pig.


signature.asc
Description: Digital signature


Bug#693310: ITP: spiped -- create secure pipes between socket addresses

2012-11-15 Thread Paul Wise
On Thu, Nov 15, 2012 at 8:18 PM, Peter Pentchev wrote:

>   Description : create secure pipes between socket addresses
>
> spiped (pronounced "ess-pipe-dee") is a utility for creating symmetrically
> encrypted and authenticated pipes between socket addresses, so that one may
> connect to one address (e.g., a UNIX socket on localhost) and transparently
> have a connection established to another address (e.g., a UNIX socket on a
> different system).  This is similar to 'ssh -L' functionality, but does not
> use SSH and requires a pre-shared symmetric key.
>
> spipe (pronounced "ess-pipe") is a utility which acts as an spiped protocol
> client (i.e., connects to an spiped daemon), taking input from the standard
> input and writing data read back to the standard output.

Sounds similar to socat, which can connect endpoints (including SSL ones).

stunnel is similar too.

-- 
bye,
pabs

http://wiki.debian.org/PaulWise


-- 
To UNSUBSCRIBE, email to debian-wnpp-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/CAKTje6Enq=ahcivhm+uc3_5uvnvlyjmmr_swjtvst9obbtm...@mail.gmail.com



Bug#693310: ITP: spiped -- create secure pipes between socket addresses

2012-11-15 Thread Peter Pentchev
Package: wnpp
Severity: wishlist
Owner: Peter Pentchev 

* Package name: spiped
  Version : 1.2.2
  Upstream Author : Colin Percival 
* URL : http://www.tarsnap.com/spiped.html
* License : BSD-2
  Programming Lang: C
  Description : create secure pipes between socket addresses

spiped (pronounced "ess-pipe-dee") is a utility for creating symmetrically
encrypted and authenticated pipes between socket addresses, so that one may
connect to one address (e.g., a UNIX socket on localhost) and transparently
have a connection established to another address (e.g., a UNIX socket on a
different system).  This is similar to 'ssh -L' functionality, but does not
use SSH and requires a pre-shared symmetric key.

spipe (pronounced "ess-pipe") is a utility which acts as an spiped protocol
client (i.e., connects to an spiped daemon), taking input from the standard
input and writing data read back to the standard output.

-- 
Peter Pentchev  r...@ringlet.net r...@freebsd.org pe...@packetscale.com
PGP key:http://people.FreeBSD.org/~roam/roam.key.asc
Key fingerprint 2EE7 A7A5 17FC 124C F115  C354 651E EFB0 2527 DF13
If I were you, who would be reading this sentence?


signature.asc
Description: Digital signature