File: BUGS

package info (click to toggle)
sks 1.1.6-14
  • links: PTS, VCS
  • area: main
  • in suites: bullseye, buster, sid
  • size: 2,296 kB
  • sloc: ml: 15,228; ansic: 1,069; sh: 358; makefile: 347
file content (66 lines) | stat: -rw-r--r-- 1,920 bytes parent folder | download | duplicates (5)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
* Some keyids don't come up when they should.
  The following link comes up when you look for "minsky", but the link itself
  doesn't work.

    http://sks.dnsalias.net:11371/pks/lookup?op=get&search=0x0D4F313F

---------FIXED-----------------

* GPG querying is broken:

      $ gpg --keyserver sks.dnsalias.net --recv-key 8B4CBC9C
      gpg: requesting key 8B4CBC9C from HKP keyserver sks.dnsalias.net
      gpg: [fd 3]: read error: Connection reset by peer
      gpg: no valid OpenPGP data found.
      gpg: premature eof while reading hashed signature data
      gpg: key 8B4CBC9C: not changed
      gpg: Total number processed: 1
      gpg:              unchanged: 1

---------FIXED-----------------

* Possible DDOS on input socket. Issue is being worked on.
  Workaround: use reverse proxy in Apache or nginx to feed traffic to
  localhost:11371

  sksconf
    hkp_address: 127.0.0.1

  Apache Example from Peter Kornherr:
    <VirtualHost *:11371>
        ServerName <foo>
        ServerAdmin <bar>
        <Proxy *>
                Order deny,allow
                Allow from all
        </Proxy>
        ProxyPass / http://127.0.0.1:11371/
        ProxyPassReverse / http://127.0.0.1:11371/
        SetEnv proxy-nokeepalive 1
    </VirtualHost>

  nginx example from Daniel Kahn Gillmor
    -------------------
    server {
        listen  209.234.253.170:11371;
        listen  80;
        server_name keys.mayfirst.org;
        access_log  off;
        location / {
            proxy_pass http://localhost:11371/;
        }
    }
    server {
        listen  443;
        server_name zimmermann.mayfirst.org;
        ssl on;
        ssl_certificate /etc/ssl/keys-m.o.crt;
        ssl_certificate_key /etc/ssl/private/keys.m.o-key.pem;
        ssl_ciphers HIGH:MEDIUM:!ADH;
        access_log  off;
        location / {
            proxy_pass http://localhost:11371/;
        }
    }
    -------------------