From 70abfb55ea369a86c84f332ad9a069de16b52f4c Mon Sep 17 00:00:00 2001 From: xdrm-brackets Date: Thu, 19 Jan 2017 08:25:16 +0100 Subject: [PATCH] Init README.md files --- clone/REAMDE.md | 18 ++++++++++++++++++ clone/clone | 2 ++ ssl/README.md | 38 ++++++++++++++++++++++++++++++++++++++ 3 files changed, 58 insertions(+) create mode 100644 clone/REAMDE.md create mode 100644 ssl/README.md diff --git a/clone/REAMDE.md b/clone/REAMDE.md new file mode 100644 index 0000000..aa9306b --- /dev/null +++ b/clone/REAMDE.md @@ -0,0 +1,18 @@ +CLONING utilities +----------------- + +This folder contains necessary utilities in order to clone and setup new _SATS_ using any micro-SD card. + + +###### 1. Kernel image + +> `image.tar.gz` is the base kernel image to burn to each _SATS_. + +###### 2. Clone script + +> `./clone` is the main script that will : +1. Format the device +2. Extract image into it +3. Generate a pair of ecdsa:521 keys for SSH and append the server's `authorized_keys` file +4. Set up the WiFi configuration +5. Update _SATS_' `authorized_keys` file to create key-only access (for maintenance). diff --git a/clone/clone b/clone/clone index 45d38c9..c9fecd5 100755 --- a/clone/clone +++ b/clone/clone @@ -16,6 +16,8 @@ sudo umount $1; # [2] format to fat sudo mkdosfs -n "SATS"-I $1; +# [3] manage partition layout +....; # [3] Extract files # diff --git a/ssl/README.md b/ssl/README.md new file mode 100644 index 0000000..7a4ae9c --- /dev/null +++ b/ssl/README.md @@ -0,0 +1,38 @@ +SSL utilities +------------- + +This folder contain `/bin/sh` openssl utilities. + +###### 1. key pair generation (ecdsa:521) + +`./keygen` + +> Generates a pair of ecdsa:521 keys. + + +###### 2. file signature generation + +`./sign {file_in} {signature_out}` + +> Generates a signed signature `{signature_out}` of the file `{file_in}` with the private key created by `./keygen`. + + +###### 3. file signature validator + +`./check {file_in} {signature_in}` + +> Checks the file `{file_in}` by the given signature `{signature_in}` with the public key created by `./keygen`. + + +###### 4. file encryption + +`./encrypt {file_in} {encrypted_out}` + +> Encrypts the file `{file_in}` into the file `{decrypted_out}` with **AES-256-CBC** using the typed password. + + +###### 5. file decryption + +`./decrypt {encrypted_in} {decrypted_out}` + +> Decrypts the file `{file_in}` into the file `{decrypted_out}` with **AES-256-CBC** using the typed password.