Key server with email and key validation.
Why?
All available keyservers allow to upload any public key without any validation/confirmaion.
This keyserver sends encrypted email with confirmation link to public key owner. Public key will be added to database only if owner retrieve this email, decrypt it, and open confirmaion link in the browser.
How?
Installation
To install in debian based GNU/Linux:
$ sudo apt-get install python3-pip libgpgme11-dev $ sudo pip3 install keyserver-ng
Configuration
Self documented configuration file can be found in /etc/keyserver-ng.ini
Running
Upstart script:
$ sudo cp /etc/keyserver-ng/upstart.conf /etc/init/keyserver-ng.conf $ sudo service keyserver-ng start
Run in foreground:
$ sudo keyserver-ng /etc/keyserver-ng/config.ini
Current status
Implemented
Upload key/Confirm key
Fetch key
Not implemented yet
Search key
Update key
Sendmail mailer
Dump DB/Load DB
1 maintainer
Metadata
1 maintainer
Release files for keyserver-ng 0.1.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| keyserver-ng-0.1.0.tar.gz | 7.3 kB | Without provenance | Details |
Release files / keyserver-ng-0.1.0.tar.gz
| Download URL | keyserver-ng-0.1.0.tar.gz |
|---|---|
| Size | 7.3 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
dbd8f07431799fd528971475396ac7888aaea42cb0175ef9d118ea5ca2ee3ab9
|
|
BLAKE2b-256 checksum How to use checksums |
61e19537597887112225c0ec10cd62dbddb2c202c00bc62c72d6f487a95d56ac
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
Security for keyserver-ng 0.1.0
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.
