MSVA-QUERY-AGENT(1)

📦
version 0.9.2 · 2 versions
, in debian bookworm, debian trixie, ubuntu jammy, ubuntu noble

💖 MSVA-QUERY-AGENT(1) 💖

okay bestie, welcome to the msva-query-agent manual page — it lives in section 1 of the User Contributed Perl Documentation, and it is literally your new best friend for talking to a Monkeysphere Validation Agent. grab a snack, we're doing this. 🍓

✨ NAME ✨

msva-query-agent — query a Monkeysphere Validation Agent

🌸 SYNOPSIS 🌸

msva-query-agent CONTEXT PEER PKC_TYPE [PEER_TYPE] <
/path/to/public_key_carrier

msva-query-agent CONTEXT PEER PKC_TYPE PEER_TYPE PKC_DATA

msva-query-agent --version

🦋 ABSTRACT 🦋

so basically, msva-query-agent validates certificates for a given use by querying a running Monkeysphere Validation Agent. that's the whole vibe check. 💅

👑 USAGE 👑

msva-query-agent reads a certificate from standard input, and posts it to the running Monkeysphere Validation Agent. the return code is the moment of truth — it tells you the validity (as determined by the agent) of the certificate for the specified purpose. the agent's return message (if there even is one) gets emitted on stdout. periodt.

here's the rundown on the various arguments, bestie:

  • CONTEXT — the context in which the certificate is being validated (e.g. 'https', 'ssh', 'ike')
  • PEER — the name of the intended peer. when you're validating a certificate for a service, supply the host's full DNS name (e.g. 'foo.example.net')
  • PKC_TYPE — the format of public key carrier data provided on standard input (e.g. 'x509der', 'x509pem', 'opensshpubkey', 'rfc4716', 'openpgp4fpr')
  • PEER_TYPE — the type of peer we are inquiring about (e.g. 'client', 'server', 'peer'). this argument is optional and defaults will be used (based on CONTEXT) if it is not supplied. she's flexible like that 💁♀️
  • PKC_DATA — this is the actual public key carrier data itself. if less than five arguments are given, then the PKC_DATA is expected on stdin. if five arguments are given, the fifth argument is interpreted as the PKC_DATA. this is likely only useful for supplying an OpenPGP fingerprint with the 'openpgp4fpr' type.

💀 RETURN CODE 💀

  • if the certificate is valid for the requested peer in the given context, the return code is 0. slay. ✅
  • otherwise, the return code is 1. not slay. 😭

🌈 ENVIRONMENT VARIABLES 🌈

msva-query-agent's behavior is controlled by environment variables, no cap:

  • MONKEYSPHERE_VALIDATION_AGENT_SOCKET — socket over which to query the validation agent. if unset, the default value is 'http://127.0.0.1:8901'.
  • MSVA_LOG_LEVEL — log messages about its operation to stderr. MSVA_LOG_LEVEL controls its verbosity, and should be one of (in increasing verbosity): silent, quiet, fatal, error, info, verbose, debug, debug1, debug2, debug3. default is 'error'.

🧚 COMMUNICATION PROTOCOL DETAILS 🧚

communications with the Monkeysphere Validation Agent are in the form of JSON requests over plain HTTP. responses from the agent are also JSON objects. for details on the structure of the requests and responses, please see http://web.monkeysphere.info/validation-agent/protocol — iykyk. 🔥

🫶 SEE ALSO 🫶

🐛 BUGS AND FEEDBACK 🐛

bugs or feature requests for msva-perl and associated tools should be filed with the Monkeysphere project's bug tracker at https://labs.riseup.net/code/projects/monkeysphere/issues/

don't be shy bestie, they want your bug reports 💜

⭐ AUTHORS AND CONTRIBUTORS ⭐

  • Jameson Graef Rollins <jrollins@finestructure.net<gt>
  • Daniel Kahn Gillmor <dkg@fifthhorseman.net<gt>

The Monkeysphere Team http://web.monkeysphere.info/

Copyright X 2010, Jameson Graef Rollins and others from the Monkeysphere team. msva-query-agent is free software, distributed under the GNU Public License, version 3 or later.

okay that's the whole page, you ate that fr fr 💅✨

this masterpiece was brought to you by perl v5.32.0, dated 2021-01-04 — mwah, sending you a forehead kiss, go query some agents 🫶💖

📦 where this page comes from