- Introduce option `--background` for `daemon start` to send the new
process into the background.
- Implement a `ProcessDescr` which identifies a Husk process. This pays
attention to the possibility of a rollover of the process ids.
- Implement `daemon status`.
- Implement `daemon stop` which sends `SIG_INT` to a running Husk
process.
- If the signing key is replaced too fast (within the same second) the
resolution of OpenPGP timestamps is not good enough to identify the
sequence of certifications - which might to the selection of the wrong
signing key.
- Husk now not only encrypts outgoing emails (if possible) but also adds
a signature.
- Rework the internal handling of the signing key.
- Integrate the signing into the workflow of the daemon.
- Add a configuration option for a subject replacement.
- 'signkey set' sets a new signing key (disables an old one if
existing).
- 'signkey show' prints the fingerprint.
- 'signkey dump' prints the certificate of the signing key.
- Add a scheme on how to discover Husk signing keys. Siging keys mut be
certified by the `local trust root` with a signature having a notation
with a name equal to `signing_keys@husk-projet.org`.
- Fetch the key from the keystore.
- Expand `authenticate()` so that notation can be added to the
signature.
- Add a test to create a signing key and fetch it from the keystore.
- Add a list of introduced domains to the output.
- Fix `regex_domain_unescape()` to return an error if the regular
expression differs from a regex for a domain.
- Move the content of what was stored in log4rs.yml into the main config
file, so that there is just one file to parse to get the complete
configuration.
- Create the global switch `--home` to pass/overload the value for
SEQUOIA_HOME in the configuration file.
- Add `husk locals list` to list all certificates which would be used by
husk, but are not introduced by another certificate. These
certificates are added 'locally'.
- Refcator the code so that `local` -> `locals`.
- Introducers can now be created by specifying a file. The certificate
gets imported and declared as an introducer for the passed domains.
- Add some checks, so that the imported certificate can actually be used
as an introducer (certificate is alive, not revoked, has certification
capabilities)
Malte Meiboom