[Monotone-devel] Curious about ikiwiki integration

2007-02-26 Thread Richard Levitte - VMS Whacker
I've seen talk about adapting ikiwiki to monotone. Is there some code somewhere I could look at and test? Cheers, Richard - Please consider sponsoring my work on free software. See http://www.free.lp.se/sponsoring.html for details. -- Richard Levitte [EMAIL PROTECTE

[Monotone-devel] Monotone sync to SourceForge via Subversion or CVS

2007-02-26 Thread Henry Nestler
Hello, I'm use Monotone for colinux and would sync the source tree to sourceforge, to use the compile farm. What is an usable plan for this? Convert Monotone to Subversion with Tailor and than sync with Subversion? I followed the other thread "Monotone CVS sync" http://article.gmane.org/gma

Re: [Monotone-devel] [PATCH] Make --execute default

2007-02-26 Thread Markus Schiltknecht
Hi, William Uther wrote: I've just finished a patch to make --execute the default. Cool. Actually, it entirely removes the --execute option, and adds a new option --bookkeep-only which is approximately the inverse of -e. This also adds some checks to the drop implementation so that if y

Re: [Monotone-devel] [PATCH] Make --execute default

2007-02-26 Thread Markus Schiltknecht
Hi, Markus Schiltknecht wrote: Do we want to call that argument '--bookkeep-only'? That seems ugly to me. And I don't recall naming what monotone does 'bookkeeping', anywhere else. As usual, I've just stumbled across the following error message: mtn: warning: ignored bookkeeping path '_MTN'

[Monotone-devel] Re: Policy branches - first steps

2007-02-26 Thread Steven E. Harris
Paul Crowley <[EMAIL PROTECTED]> writes: > Monotone has a flag day coming up in any case, because of the move > away from SHA-1. To what are you/we moving? -- Steven E. Harris ___ Monotone-devel mailing list Monotone-devel@nongnu.org http://lists.n

[Monotone-devel] Crypto and SHA-1, was Policy branches - first steps

2007-02-26 Thread Paul Crowley
Steven E. Harris wrote: Monotone has a flag day coming up in any case, because of the move away from SHA-1. To what are you/we moving? SHA-256, I think, until NIST name its successor in about five years. See: http://venge.net/mtn-wiki/FutureCryptography -- __ \/ o\ Paul Crowley, [EMAIL PR

Re: [Monotone-devel] Re: Policy branches - first steps

2007-02-26 Thread Justin Patrin
On 2/26/07, Steven E. Harris <[EMAIL PROTECTED]> wrote: Paul Crowley <[EMAIL PROTECTED]> writes: > Monotone has a flag day coming up in any case, because of the move > away from SHA-1. To what are you/we moving? I'll summarize what I remember from the summit about our security/encryption. 1

Re: [Monotone-devel] Re: Policy branches - first steps

2007-02-26 Thread Jack Lloyd
On Mon, Feb 26, 2007 at 01:17:24PM -0800, Justin Patrin wrote: > 3) DSA can only sign less than 256 bits (140?) so moving to SHA-256 > and DSA will be problematic. DSA, algorithmically, can sign arbitrary size hashes, as long as you choose a large enough q parameter. Until recently the standardize

[Monotone-devel] Roster-related crash (somewhat of an abuse?)

2007-02-26 Thread Ethan Blanton
Hi all, Monotone does not seem to deal with extant but unreferenced rosters which are regenerated by a new commit gracefully. Viz: mtn -d test.mtn db init mkdir test cd test echo "Test to crash monotone" > test.txt mtn -d ../test.mtn setup -b org.example.monotone.test mtn add test.txt mtn ci -m

Re: [Monotone-devel] Re: Policy branches - first steps

2007-02-26 Thread Justin Patrin
On 2/26/07, Jack Lloyd <[EMAIL PROTECTED]> wrote: On Mon, Feb 26, 2007 at 01:17:24PM -0800, Justin Patrin wrote: > 3) DSA can only sign less than 256 bits (140?) so moving to SHA-256 > and DSA will be problematic. DSA, algorithmically, can sign arbitrary size hashes, as long as you choose a larg

Re: [Monotone-devel] [PATCH] Make --execute default

2007-02-26 Thread William Uther
On 26/02/2007, at 9:51 PM, Markus Schiltknecht wrote: Actually, it entirely removes the --execute option, and adds a new option --bookkeep-only which is approximately the inverse of -e. This also adds some checks to the drop implementation so that if you try to drop a changed file (or a d

[Monotone-devel] Re: Flag day

2007-02-26 Thread William Uther
On 26/02/2007, at 6:54 PM, Paul Crowley wrote: Monotone has a flag day coming up in any case, because of the move away from SHA-1. Graydon (rightly) wants to change the certificate format; since that's also a flag day event that should probably be done on the same day. We should move tow

Re: [Monotone-devel] Re: Policy branches - first steps

2007-02-26 Thread Paul Crowley
Jack Lloyd wrote: On Mon, Feb 26, 2007 at 01:17:24PM -0800, Justin Patrin wrote: 3) DSA can only sign less than 256 bits (140?) so moving to SHA-256 and DSA will be problematic. DSA, algorithmically, can sign arbitrary size hashes, as long as you choose a large enough q parameter. Until recent

[Monotone-devel] Re: Flag day

2007-02-26 Thread Paul Crowley
William Uther wrote: I've got some netsync changes I'd like to make: - treat unkown keys as anonymous connections - auto fallback from 'sync' to just 'pull' if that's all you have perms for Is this the sort of thing to go in the flag day too? Or is a netsync change much less of an issue?

[Monotone-devel] Re: Flag day

2007-02-26 Thread Timothy Brownawell
On Tue, 2007-02-27 at 09:36 +1100, William Uther wrote: > On 26/02/2007, at 6:54 PM, Paul Crowley wrote: > > > Monotone has a flag day coming up in any case, because of the move > > away from SHA-1. Graydon (rightly) wants to change the certificate > > format; since that's also a flag day eve

Re: [Monotone-devel] Curious about ikiwiki integration

2007-02-26 Thread Brian May
> "Richard" == Richard Levitte <- VMS Whacker <[EMAIL PROTECTED]>> writes: Richard> I've seen talk about adapting ikiwiki to monotone. Is Richard> there some code somewhere I could look at and test? No. I started at one point, but got bogged down in the details. Securely running an

Re: [Monotone-devel] Re: Policy branches - first steps

2007-02-26 Thread Brian May
> "Paul" == Paul Crowley <[EMAIL PROTECTED]> writes: Paul> The question is how attached we are to ssh-agent. It's very Paul> cool but it's limiting in this regard. If we want to go Paul> with it, it's a question of whether we can persuade it to Paul> accept 256-bit q. I came

Re: [Monotone-devel] Curious about ikiwiki integration

2007-02-26 Thread Nathaniel Smith
On Tue, Feb 27, 2007 at 11:57:48AM +1100, Brian May wrote: > No. I started at one point, but got bogged down in the details. > > Securely running an external command in Perl without invoking the > shell and grabbing the commands STDOUT is not easy... > > Probably the best way would be to create a

Re: [Monotone-devel] Curious about ikiwiki integration

2007-02-26 Thread Daniel Carosone
On Tue, Feb 27, 2007 at 11:57:48AM +1100, Brian May wrote: > > "Richard" == Richard Levitte <- VMS Whacker <[EMAIL PROTECTED]>> writes: > > Richard> I've seen talk about adapting ikiwiki to monotone. Is > Richard> there some code somewhere I could look at and test? > > No. I started

Re: [Monotone-devel] [PATCH] Make --execute default

2007-02-26 Thread William Uther
On 26/02/2007, at 9:51 PM, Markus Schiltknecht wrote: Why don't you simply get a monotone key? Send the public key to Nathaniel, he will happily give you push access to venge.net... I did. He did. Scary. I just pushed n.v.m.default-execute with the version of monotone that executes by d

[Monotone-devel] Merging nvm.ssh-agent to mainline

2007-02-26 Thread Justin Patrin
net.venge.monotone.ssh-agent is ready to be merged to mainline I think. It has one strange test failure in the first set of tests which I haven't been able to track down. If someone could help me track that down I'd be grateful. key... unknown location(0): fatal error in "signature_round_trip": s

Re: [Monotone-devel] Curious about ikiwiki integration

2007-02-26 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Tue, 27 Feb 2007 11:57:48 +1100, Brian May <[EMAIL PROTECTED]> said: bam> > "Richard" == Richard Levitte <- VMS Whacker <[EMAIL PROTECTED]>> writes: bam> bam> Richard> I've seen talk about adapting ikiwiki to monotone. Is bam> Richard> there some c

Re: [Monotone-devel] [PATCH] Make --execute default

2007-02-26 Thread Markus Schiltknecht
Hi, William Uther wrote: mtn drop ${STH}: - file ${STH} exists File exists and is under version control and is unchanged: deleted with message about dropping from manifest (as currently - maybe should change?) No, that's fine, IMO. File exists and is under version control and is change

[Monotone-devel] Re: Crypto and SHA-1, was Policy branches - first steps

2007-02-26 Thread Lapo Luchini
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Paul Crowley wrote: > SHA-256, I think, until NIST name its successor in about five years. See: > http://venge.net/mtn-wiki/FutureCryptography I could be nice if the policy could define one (or more!) "hash change horizon" before of which the less se

[Monotone-devel] Re: Policy branches - first steps

2007-02-26 Thread Lapo Luchini
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Paul Crowley wrote: > Jack Lloyd wrote: >> DSA, algorithmically, can sign arbitrary size hashes, as long as you >> choose a large enough q parameter. Until recently the standardized max >> for q was 160 bits, FIPS 186-3 (currently in draft) allows long

Re: [Monotone-devel] [PATCH] Make --execute default

2007-02-26 Thread Zack Weinberg
On 2/26/07, William Uther <[EMAIL PROTECTED]> wrote: > mtn drop ${STH}: > - file ${STH} exists File exists and is under version control and is unchanged: deleted with message about dropping from manifest (as currently - maybe should change?) File exists and is under version control and is c

Re: [Monotone-devel] Merging nvm.ssh-agent to mainline

2007-02-26 Thread Nathaniel Smith
On Mon, Feb 26, 2007 at 08:14:27PM -0800, Justin Patrin wrote: > net.venge.monotone.ssh-agent is ready to be merged to mainline I > think. It has one strange test failure in the first set of tests which > I haven't been able to track down. If someone could help me track that > down I'd be grateful.