From 53a3d869b871e3b015d5dee0b1dc8692fcc32501 Mon Sep 17 00:00:00 2001 From: reppep Date: Sun, 5 Oct 2014 23:17:48 -0400 Subject: [PATCH 1/4] Add ScrollZ. --- server.org | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/server.org b/server.org index 1d7024d..89f181c 100644 --- a/server.org +++ b/server.org @@ -16,5 +16,4 @@ - sudo yum install ImageMagick - sudo yum --enablerepo=epel install -y mosh - sudo yum install mailman - - +- sudo yum install ScrollZ From ea467e2e6dd77b6c45facb5066a205d5306a819c Mon Sep 17 00:00:00 2001 From: Jason Levine Date: Mon, 6 Oct 2014 14:54:49 -0400 Subject: [PATCH 2/4] add explicit installation of Net::SSLeay --- server.org | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/server.org b/server.org index 89f181c..64ddcb1 100644 --- a/server.org +++ b/server.org @@ -2,7 +2,7 @@ * Base machine - A standard unix server -- Webmin (people complain but webmin is great) +- Webmin (people complain but webmin is great) + Net:SSLeay (see below) * Add these repos - sudo yum update @@ -17,3 +17,4 @@ - sudo yum --enablerepo=epel install -y mosh - sudo yum install mailman - sudo yum install ScrollZ +- sudo yum install libnet-ssleay-perl (so that webmin uses HTTPS rather than HTTP) From ce8b88f11f56aedee19c2b307b555a1f1bee4e1b Mon Sep 17 00:00:00 2001 From: reppep Date: Mon, 6 Oct 2014 20:52:33 -0400 Subject: [PATCH 3/4] Add ssh docs. --- docs/ssh.md | 29 +++++++++++++++++++++++++++++ 1 file changed, 29 insertions(+) create mode 100644 docs/ssh.md diff --git a/docs/ssh.md b/docs/ssh.md new file mode 100644 index 0000000..ff64627 --- /dev/null +++ b/docs/ssh.md @@ -0,0 +1,29 @@ +[http://tilde.club](tilde.club) uses `ssh` public-key authentication. + +If you want access to [tilde.club](http://tilde.club), create a new key pair with an encrypted key and send the **public** key to the admins. + +##Mac + +1. Open **Terminal** (in /Applications/Utilities). +1. In the **Terminal** window, paste the following: +{{{ +mkdir -p ~/.ssh # Create your .ssh directory +ssh-keygen -f ~/.ssh/tilde.club # Create your keys +}}} +1. The `ssh-keygen` program will generate two new keys (private and public), and prompt you for a password. Please set a good password (at least 9 characters, and not just letters or numbers). Make a note of it somewhere safe. +1. `open ~/.ssh # Open your .ssh directory` +1. Email ford@ (our friendly host) and attach `tilde.club.pub` to the email (it should be visible in the Finder. **Do not** attach `tilde.club` -- that is your *private* key, which you should never share. + +##Linux + +If you're on Linux you can use the same commands to generate a `tilde.club` keypair, but attaching `tilde.club.pub` is left as an exercise for the reader. + +##Windows + +We need instructions for using `PuTTYgen` to create a key in OpenSSH compatible format. + +##Why? + +`ssh` keys are more secure than classic UNIX passwords. Someone who takes over the server (`sshd` program) can capture the UNIX passwords of everyone who uses them to login -- [this has happened](http://www.apache.org/info/20010519-hack.html). + +Additionally, if you use an `ssh` agent, you can login without entering a password every time. On OS X the Apple Keychain provides this functionality. On Linux it's `ssh-agent` and possibly [keychain](http://www.funtoo.org/Keychain). On Windows `pageant` provides this capability for [PuTTY](http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html). From 72a7b45bdbeadda390d5a6a2284c5bc03856dd9c Mon Sep 17 00:00:00 2001 From: reppep Date: Mon, 6 Oct 2014 20:55:15 -0400 Subject: [PATCH 4/4] Fix PRE. --- docs/ssh.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/ssh.md b/docs/ssh.md index ff64627..dba8930 100644 --- a/docs/ssh.md +++ b/docs/ssh.md @@ -6,10 +6,10 @@ If you want access to [tilde.club](http://tilde.club), create a new key pair wit 1. Open **Terminal** (in /Applications/Utilities). 1. In the **Terminal** window, paste the following: -{{{ +
 mkdir -p ~/.ssh                 # Create your .ssh directory
 ssh-keygen -f ~/.ssh/tilde.club # Create your keys
-}}}
+
1. The `ssh-keygen` program will generate two new keys (private and public), and prompt you for a password. Please set a good password (at least 9 characters, and not just letters or numbers). Make a note of it somewhere safe. 1. `open ~/.ssh # Open your .ssh directory` 1. Email ford@ (our friendly host) and attach `tilde.club.pub` to the email (it should be visible in the Finder. **Do not** attach `tilde.club` -- that is your *private* key, which you should never share.