From f351e21bf807af3ed59fea6d0e6fae1ca925e220 Mon Sep 17 00:00:00 2001 From: David Anderson Date: Fri, 17 Feb 2006 22:01:22 +0000 Subject: [PATCH] show posts svn path=/trunk/boinc/; revision=9500 --- checkin_notes | 11 +++++++++++ doc/acct_mgt.php | 22 +++++++++------------- doc/code_signing.php | 10 ++++------ doc/key_setup.php | 6 +++++- html/inc/profile.inc | 14 ++++++-------- html/inc/user.inc | 21 ++++++++++++--------- html/user/delete_profile.php | 21 +++++++++------------ 7 files changed, 56 insertions(+), 49 deletions(-) diff --git a/checkin_notes b/checkin_notes index 06219b5e8d..845531d4ce 100755 --- a/checkin_notes +++ b/checkin_notes @@ -2034,3 +2034,14 @@ Rom 17 Feb 2006 ViewProjects.cpp ViewTransfers.cpp +David 17 Feb 2006 + - user web: restore posts link on public user page + (not sure how it got deleted) + - minor code cleanup + + html/ + inc/ + profile.inc + user.inc + user/ + delete_profile.php diff --git a/doc/acct_mgt.php b/doc/acct_mgt.php index 645ea9cd5f..4b7241dbf3 100644 --- a/doc/acct_mgt.php +++ b/doc/acct_mgt.php @@ -68,8 +68,6 @@ If hackers break into an account manager server, they could potentially cause the account manager to instruct all its clients to attach to malicious a BOINC project that runs a malicious application. - -

To prevent this type of attack, the URLs distributed by an account manager are digitally signed. Each AM has its own signing key pair. @@ -79,19 +77,17 @@ The private key should be stored only on a physically secure, non-connected host that is used to sign URLs.

-To sign URLs, download the BOINC software on a Linux machine, -and compile the program that generates keys and signs things (lib/crypt_prog). -Then generate a key pair and generate signatures for your URLs. +To sign URLs, compile crypt_prog, +BOINC's encryption utility program. +(Instructions for downloading and compiling code +are here.) +Generate a key pair and generate signatures for your URLs. At some point you'll need to commit to a permanent key pair, at which point you should move the private key to -the signing machine (disconnected) and make sure there are -no copies of it elsewhere. -Make a copy or two on CD-ROM also, or just print it out on paper. - -

-Instructions for downloading/compiling code are here. -

-Instructions for using the crypto program are here +the signing machine (disconnected). +Make a copy or two on CD-ROM also, and/or print it out on paper; +keep these in a safe place. +Delete all other copies of the private key.

Farm managers

diff --git a/doc/code_signing.php b/doc/code_signing.php index 022999d880..1e474dc68d 100644 --- a/doc/code_signing.php +++ b/doc/code_signing.php @@ -20,8 +20,7 @@ and possibly the end of all BOINC projects.