1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
|
Nickserver
==================================
Nickserver is the opposite of a key server. A key server allows you to lookup
keys, and the UIDs associated with a particular key. A nickserver allows you
to query a particular 'nick' (e.g. username@example.org) and get back relevant
public key information for that nick.
Nickserver has the following properties:
* Written in Ruby, licensed GPLv3
* Lightweight and scalable (high concurrency, reasonable latency)
* Uses asynchronous network IO for both server and client connections (via EventMachine)
* Attempts to reply to queries using four different methods:
* Cached key in CouchDB (coming soon)
* Webfinger (coming soon)
* DNS (maybe?)
* HKP keyserver pool (https://hkps.pool.sks-keyservers.net)
Why Nickserver?
----------------------------------
Why bother writing Nickserver instead of just using the existing HKP keyservers?
* Keyservers are fundamentally different: Nickserver is a registry of 1:1
mapping from nick (uid) to public key. Keyservers are directories of public
keys, which happen to have some uid information in the subkeys, but there is
no way to query for an exact uid.
* Support clients: the goal is to provide clients with a cloud-based method of
rapidly and easily converting nicks to keys. Client code can stay simple by
pushing more of the work to the server.
* Enhancements over keyservers: the goal with Nickserver is to support future
enhancements like webfinger, DNS key lookup, mail-back verification, network
perspective, and fast distribution of short lived keys.
* Scalable: the goal is for a service that can handle many simultaneous
requests very quickly with low memory consumption.
API
==================================
You query the nickserver via HTTP. The API is very minimal at the moment:
curl -X GET hostname:6425/key/<uid>
Returns the OpenPGP public key for uid (ascii encoded).
Installation
==================================
You have three fine options for installing nickserver:
Install the gem:
$ gem install nickserver
Install from source:
$ git clone git://leap.se/nickserver
$ cd nickserver
$ rake build
$ rake install
Install for development:
$ git clone git://leap.se/nickserver
$ cd nickserver
$ bundle
Usage
==================================
Usage: nickserver <command> <options> -- <application options>
* where <command> is one of:
start start an instance of the application
stop stop all instances of the application
restart stop all instances and restart them afterwards
reload send a SIGHUP to all instances of the application
run start the application and stay on top
zap set the application to a stopped state
status show status (PID) of application instances
* and where <options> may contain several of the following:
-t, --ontop Stay on top (does not daemonize)
-f, --force Force operation
-n, --no_wait Do not wait for processes to stop
Common options:
-h, --help Show this message
--version Show version
|
