Re: [Sks-devel] Are IPv6-only keyservers acceptable in the pool?

2011-04-05 Thread Kim Minh Kaplan
Андрей Коробков writes: > On Tue, 05 Apr 2011 08:23:59 + > Seems that db is totally broken: > On my desktop: > # db4.6_verify ptree > OK > On server: [...] > # db4.6_verify ptree > db4.6_verify: __db.001: unable to find environment > # db4.6_recover -ve Apparently while the DB itself is a

Re: [Sks-devel] Are IPv6-only keyservers acceptable in the pool?

2011-04-05 Thread Christoph Egger
Андрей Коробков writes: > I'm using btrfs on server and reiserfs on desktop. May be, BDB do some > very-low level things?... Is one of them 64 bit and the other 32 bit? If so that'll break. If the server is 32bit you could build it on your desktop using a 32bit chroot environment. > After more

[Sks-devel] liberty.antagonism.org moving to new host

2011-04-05 Thread Patrick R McDonald
All, I rebuilt liberty.antagonism.org on a new host. The host's new IP address is 68.100.150.54. I took the latest key dump from key-server.de (04-01-11) and left my previous peer list. -- | Patrick R. McDonald

Re: [Sks-devel] pool.sks-keyservers.net in seahorse

2011-04-05 Thread John Clizbe
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Kim Minh Kaplan wrote: > Jonathon Weiss writes: > >> John Clizbe writes: >> >>> BTW, check your SKS DB port, it looks to be set to 17311, i.e., >>> -rw-r--r-- 1 sks sks 95304 Apr 1 23:35 diff-18.9.60.141_17311.txt >> >> It is, though that port is

[Sks-devel] pgp.teanfordhouse.com

2011-04-05 Thread Peter Bassill
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Good evening all sks.teanfordhouse.com has now been replaced and will be back up and running in a couple of hours behind it's new static IP 84.45.72.144. Once she is breathing and serving up keys I will re-request peering. Thanks all, and sorry f

Re: [Sks-devel] Are IPv6-only keyservers acceptable in the pool?

2011-04-05 Thread Андрей Коробков
On Tue, 05 Apr 2011 08:23:59 + Seems that db is totally broken: On my desktop: # db4.6_verify ptree OK On server: /var/lib/sks/PTree drwx-- 1 sks sks58 Апр 5 22:14 ./ drwxr-xr-x 1 sks sks40 Апр 5 19:39 ../ -rw--- 1 sks sks 24576 Апр 4 17:11 __db.001 -rw---

Re: [Sks-devel] about ECC and collisions

2011-04-05 Thread Jeff Johnson
On Apr 5, 2011, at 12:46 PM, Daniel Kahn Gillmor wrote: > On 04/05/2011 11:35 AM, Jeff Johnson wrote: >> The current V4 scheme (from memory, see RFC 4880 for specifics) to assign >> a fingerprint to a pubkey (including all of RSA/DSA/ECC) involves running >> a SHA1 digest across conventionally de

Re: [Sks-devel] about ECC and collisions

2011-04-05 Thread Daniel Kahn Gillmor
On 04/05/2011 11:35 AM, Jeff Johnson wrote: > The current V4 scheme (from memory, see RFC 4880 for specifics) to assign > a fingerprint to a pubkey (including all of RSA/DSA/ECC) involves running > a SHA1 digest across conventionally defined plaintext that involves the > alogrithm > parameters and

Re: [Sks-devel] about ECC and collisions

2011-04-05 Thread Jeff Johnson
On Apr 5, 2011, at 11:07 AM, Daniel Kahn Gillmor wrote: > On 04/05/2011 09:33 AM, Jean-Jacques Brucker wrote: >> I didn't know that fingerprint was calculated with a timestamp. Do you have >> any idea of the reason(s) to do that ? > > You should read RFC 4880 (or just skim it and read the parts

Re: [Sks-devel] Backup and Restoration of SKS Server

2011-04-05 Thread Kim Minh Kaplan
Patrick R McDonald writes: > I am looking to move liberty.antagonism.org to different hardware to > provide better service. It will also allow me to offer the server as a > hidden service. I search the web for a backup and restore instruction > for SKS, but was unable to find anything useful. C

Re: [Sks-devel] Backup and Restoration of SKS Server

2011-04-05 Thread Jeff Johnson
On Apr 5, 2011, at 10:57 AM, Patrick R McDonald wrote: > All, > > I am looking to move liberty.antagonism.org to different hardware to > provide better service. It will also allow me to offer the server as a > hidden service. I search the web for a backup and restore instruction > for SKS, but

Re: [Sks-devel] about ECC and collisions

2011-04-05 Thread Daniel Kahn Gillmor
On 04/05/2011 09:33 AM, Jean-Jacques Brucker wrote: > I didn't know that fingerprint was calculated with a timestamp. Do you have > any idea of the reason(s) to do that ? You should read RFC 4880 (or just skim it and read the parts that most interest you): https://tools.ietf.org/html/rfc4880

[Sks-devel] Backup and Restoration of SKS Server

2011-04-05 Thread Patrick R McDonald
All, I am looking to move liberty.antagonism.org to different hardware to provide better service. It will also allow me to offer the server as a hidden service. I search the web for a backup and restore instruction for SKS, but was unable to find anything useful. Could someone please point me i

Re: [Sks-devel] about ECC and collisions

2011-04-05 Thread Jean-Jacques Brucker
Thanks for all. I didn't know that fingerprint was calculated with a timestamp. Do you have any idea of the reason(s) to do that ? (that change lot of things, and I'd also like to know if there is a way to query for specific keys). (thanks for the link but i don't even know the difference betw

[Sks-devel] New Keyserver

2011-04-05 Thread Moritz Rudert
Hi All, I have a new keyserver running and would like to peer with other servers. Please add me to your 'membership' file with the following entry and provide your details in return so I can do the same: gpg.planetcyborg.de 11370 # Moritz Rudert 0x4941485B Thanks Moritz Rudert -- greetings he

Re: [Sks-devel] pool.sks-keyservers.net in seahorse

2011-04-05 Thread Kim Minh Kaplan
Jonathon Weiss writes: > John Clizbe writes: > >> BTW, check your SKS DB port, it looks to be set to 17311, i.e., >> -rw-r--r-- 1 sks sks 95304 Apr 1 23:35 diff-18.9.60.141_17311.txt > > It is, though that port is firewalled. Apache is listening on 11371 and > forwarding requests to 17311. Th

Re: [Sks-devel] Are IPv6-only keyservers acceptable in the pool?

2011-04-05 Thread Kim Minh Kaplan
Андрей Коробков writes: > The only problem is to have such a huge key database being built from dump > on my memory-limited 32-bit home server. When I tried to do the thing on my > 64-bit desktop > and then copy the DB files to server, SKS didn't want to start because of > something like > "__db