mandos general protection error ...

[Teddy Hogeborn]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Dick Middleton <dick at fouter.net> writes:

> Teddy Hogeborn wrote:
>
>> So did the key generation complete?  Did you type in a passphrase?
>
> Yes.  No errors.  Yes "that took a long time".
>> 
>> Did the key generation really take 2½ hours?
>
> Yes.  Not much happens on the system I'm using.

I am quite astounded; as I said, it took a mere eight minutes here, on
an otherwise idle system.  Perhaps we should print a warning or
something.

> I did what you asked except I aborted and restarted the keygen
> process and installed missing dependencies python-gobject and fping.

I'm sorry; I forgot about fping.  I didn't think about the run-time
dependencies, I only listed the build dependencies.

You are also also quite correct in pointing out that we depend on
python-gobject.  (We do depend on python-avahi, but that only does
"Recommends: python-gobject".)  Another bug found (and fixed)!  Thank
you!

[...lots of excellent debugging output...]

Thank you for the debugging output; this is exactly the sort of stuff
that I want (and need) to see.

> Loco(root):~/mandos-trunk# ll keydir/
> total 12
> drwxr-xr-x 2 root root   40 Jan 26 19:23 .
> drwxr-xr-x 8 root root 4096 Jan 26 19:33 ..
> -rw------- 1 root root 2299 Jan 26 19:23 pubkey.txt
> -rw------- 1 root root 2411 Jan 26 19:23 seckey.txt
>
> Loco(root):~/mandos-trunk# more keydir/pubkey.txt

You are running the commands as root; this enables mandos-client to
switch to a non-privileged user before reading the key files.  And the
key files are not readable by anybody else.  Try running the command
"chmod +r keydir/*.txt", which would enable the keyfiles to be read.

(I'm sorry, I should have thought of that before claiming that running
everything as root was OK.)

> I had to install python-gobject at some point - was missing on other
> system too.  (Might be worth mentioning in the install guide).  I
> can't remember exactly at which point I had to do that.  Before
> keygen I think.

> If you're unahppy with what happened I'm willing to uninstall and
> repeat.

What you have is fine, just fix the permissions on the keyfile/* files
and try the make run-* commands again.

/Teddy Hogeborn

- -- 
The Mandos Project
http://www.fukt.bsnet.se/mandos
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFJfkwGOWBmT5XqI90RAnQhAJ0ZXEFmoriqW3XmXEBXyAhub9txtACeKIwU
MTrAmgThEuL4UHPawF72Zyo=
=66Bp
-----END PGP SIGNATURE-----