Konfidi - User contributions [en]

Server Setup Instructions

2006-08-12T22:23:56Z

Schamp: Update apache configuration instructions

Dave, since I'm doing this on windows, I thought I'd put it in for now as I went. Can you think of anything I've forgotten? Can you write up Linux installation instructions?

== Windows ==
=== Apache ===

# Download and install the latest version of the Apache HTTP Server for Windows (currently 2.0.54): http://httpd.apache.org/download.cgi

=== Python ===

# Download and install the latest version of Python for Windows (currently 2.4.1): http://www.python.org/

=== mod_python ===

# Download and install the latest version of mod_python for Windows (currently 3.1.3) that works with the versions of Apache and Python you have installed: http://httpd.apache.org/modules/python-download.cgi
# Configure Apache:
## Add the line 'LoadModule python_module modules/mod_python.so' to the Apache configuration file (httpd.conf).
## Make sure the directive 'AllowOverride' is set to 'All' in the default root directories (something like: '<Directory "C:/Program Files/Apache Group/Apache2/htdocs"> and '<Directory />') or somewhere in the hierarchy above the folder that will contain the Konfidi application.
## Fix the AccessFileName for windows:
### Change the directive "AccessFileName" from ".htaccess" to "ht.acl"
### Copy <code>htaccess-dist</code> to <code>ht.acl</code>
### Change the directive <code><FilesMatch "^\.ht">...</code> to <code><FilesMatch "^ht"></code>
## Set up the directory for the Konfidi frontend:
### Add an alias to the directory, something like this:
###* <code>Alias/konfidi/ "D:/Konfidi/frontend/trunk"</code>
### Set up the <code>Directory</code> directive for <code>"D:/Konfidi/frontend/trunk"</code>, something like:
###* <code><Directory "D:/Konfidi/frontend/trunk"></code>
###* <code> Order allow,deny</code>
###* <code> Allow from all</code>
###* <code></Directory></code>
# Restart Apache

=== Wotsap ===

# Download and install the latest version of wotsap (currently 0.6): http://www.lysator.liu.se/~jc/wotsap/
# Schedule a daily download of [http://www.lysator.liu.se/~jc/wotsap/wots2/latest.wot the generated wot file].

=== rdfLib ===

# Download and install the latest version of RDFLib (currently 2.0.6) for Python: http://rdflib.net/

=== pyme ===

# Download and install the latest version of pyme (currently 0.7): http://pyme.sourceforge.net/

== Linux ==
=== Apache ===
Probably have to do this in windows, too. You need to set GNUPGHOME as an env var for the apache user, if the default ($HOME/.gnupg) isn't usable (e.g. the apache user doesn't have a home dir).

If you don't, you'll get errors like
FOAFServerError: 'No PGP signature found'
or
GPGMEError: GPGME: End of file (7,16383)

==== All Distros ====
mkdir /var/www/apache-gnupg
cd /var/www/apache-gnupg
chmod 700 .
echo 'keyserver-options auto-key-retrieve
keyserver x-hkp://random.sks.keyserver.penguin.de' >> gpg.conf
chmod 600 gpg.conf
chown -R apache:apache .

==== Gentoo ====
For Gentoo, you need apache 2.0.54-r12 or better (still ~x86 as of 8/6/5 and a very complex upgrade unfortunately), then
* in /etc/conf.d/apache2 set:
KEEPENV="PATH GNUPGHOME"
export GNUPGHOME=/var/www/apache-gnupg

=== Wotsap ===
A sample crontab entry for daily updates:
# 2am daily
0 2 * * * cd /var/lib/konfidi/wotsap; echo "Starting at `date`">>wotsap.log; mv latest.wot yesterday.wot 2>>wotsap.log; wget -nv http://www.lysator.liu.se/~jc/wotsap/wots2/latest.wot 2>>wotsap.log

Konfidi Client Logic

2006-03-03T14:57:47Z

Schamp:

The following is the logic that the email cli-filter currently uses. Most clients will work in a similar manner, depending on their context.

* Options
** process arguments
** guess source fingerprint, from GnuPG private keyring
** load config file
* Parse email
* Initial headers
** strip all existing konfidi & pgp headers
** add header "X-Konfidi-Client: cli-filter 0.1"
* Get content and signature
* Validate signature
* Validate that 'From: ' address is one listed on the key used to sign
* Add PGP headers
** X-PGP-Signature
*** "none"
*** "public key not available"
*** "from mismatch"
*** "valid"
*** "invalid" ...
** X-PGP-Fingerprint
*** long fingerprint
* Query konfidi server
* Add konfidi headers
** X-Trust-Email-Rating
*** result from konfidi server
** X-Trust-Email-Level
*** round(rating*10) x '*'

Issue Use Redland

2005-08-13T16:53:25Z

Schamp:

Create an installation procedure, when we're ready. Maybe use autopackage[http://www.autopackage.org/], because it looks pretty hott.

[[Category:Issue_Status_Open]]

[[Category:Issue_Project_Konfidi]]

Issue Use Redland

2005-08-13T16:49:55Z

Schamp:

Update the TrustServer's update listener to use the Redland RDF processing library, because it r0x0r.

And we can make a "Redland" updating strategy and a "rdflib" one, if they have different licensing schemes, so that people can pick and choose. or something.

Except that "rdflib" doesn't seem to work on Windows. So either make that an option at configuration, or do away with it altogether.

[[Category:Issue_Status_Open]]

[[Category:Issue_Assignee_Schamp]]

[[Category:Issue_Project_TrustServer]]

Issue Use Redland

2005-06-20T04:25:23Z

Schamp:

Update the TrustServer's update listener to use the Redland RDF processing library, because it r0x0r.

And we can make a "Redland" updating strategy and a "rdflib" one, if they have different licensing schemes, so that people can pick and choose. or something.

[[Category:Issue_Status_Open]]

[[Category:Issue_Assignee_Schamp]]

[[Category:Issue_Project_TrustServer]]

Issue Mutual Exclusion

2005-06-20T04:23:28Z

Schamp:

Find a way to make mutual exclusion work for all strategies. Maybe [Issue_Condense_TrustServer] will help make that possible.
That's done, but it still needs to be tested.

[[Category:Issue_Status_Open]]

[[Category:Issue_Assignee_Schamp]]

[[Category:Issue_Project_TrustServer]]

Issue Startup Scripts

2005-06-14T19:59:52Z

Schamp:

[[Category:Issue_Status_Open]]
[[Category:Issue_Assignee_Schamp]]
[[Category:Issue_Assignee_DaveBrondsema]]
[[Category:Issue_Project_TrustServer]]

Update the TrustServer so that the startup scripts are platform-independent, or so that platform-specific ones are provided.

Dave, I'll work on this but I'll need your help to try it out in Linux.

Server Setup Instructions

2005-06-14T19:57:54Z

Schamp:

Server Setup Instructions

2005-06-14T19:22:34Z

Schamp:

Server Setup Instructions

2005-06-14T19:19:35Z

Schamp: /* mod_python */

Server Setup Instructions

2005-06-14T16:59:21Z

Schamp: I dont know why the lists don't work the way they ought to...

Server Setup Instructions

2005-06-14T16:07:43Z

Schamp:

Main Page

2005-06-14T15:56:38Z

Schamp:

Konfidi is a system that uses PGP signatures to determine authenticity and topical trust values to compute an inferred trust value. The first (and motivating) application is be to filter email. You'll be able to set your client to accept all email from trusted senders and rigorously filter anything else.

[[Image:Network-both.gif]]

If Dave recieves an email from Clara, it will have a fairly high computed trust value. An email from the spammer will not. Now imagine this network with everyone using it!

----

If anyone is interested in helping to develop this, or just want to find out more, please join our mailing list and start asking questions. Also see the [[Konfidi System Design]]. We have a decent start on development (code in SVN), but there's still lots to be done:
* Synchronization between FOAFServers
* Find and improve PGP plugins for MUAs
* Konfidi clients as MUA plugins
* Trust-o-matic: a Java/wxWidgets desktop app to create RDF files, PGP sign them, and save them to the FOAFServer
* Psychological research on trust inferences

----

[[:Category:Issue]] (tasks, bugs, etc)

[[PGP Mail Clients]]

[[PGP Desktop Clients]]

[[Konfidi Client Logic]]

[[Konfidi System Design]]

[[Application Ideas]]

[[System Requirements]]

[http://developer.berlios.de/projects/konfidi Berlios Project Page]

XML Namespace Files:
* http://www.konfidi.org/ns/trust/1.2/trust.owl
* http://www.konfidi.org/ns/trust/1.1/trust.owl
* http://www.konfidi.org/ns/trust/1.0/trust.owl

[http://www.konfidi.org/presentations/ Presentations]

[[Konfidi:License]]

Hosted by: [http://developer.berlios.de http://developer.berlios.de/bslogo.php?group_id=3538&.jpg]

[http://www.konfidi.org/usage Webalizer stats] (private)

Issue requirements

2005-06-14T14:19:16Z

Schamp:

[[Category:Issue_Status_Open]]
[[Category:Issue_Project_WIKI]]

Make a download information page, and a system requirements page, so people who want to try it out know what they need.

Issue Trust Network Graph Visualizer

2005-05-10T20:13:50Z

Schamp:

Modify the DotGraphTPF Strategy to handle nice options, and then put a place in the frontend to view it by (maybe a nice form).

[[Category:Issue_Status_Open]]

[[Category:Issue_Assignee_Schamp]]

[[Category:Issue_Project_TrustServer]]

[[Category:Issue_Project_Frontend]]

Issue Mutual Exclusion

2005-05-10T20:13:18Z

Schamp:

Find a way to make mutual exclusion work for all strategies. Maybe [Issue_Condense_TrustServer] will help make that possible.
[[Category:Issue_Status_Open]]

[[Category:Issue_Assignee_Schamp]]

[[Category:Issue_Project_TrustServer]]

Issue Condense TrustServer

2005-05-10T20:12:24Z

Schamp:

Roll the UpdateListener into an updating strategy

[[Category:Issue_Status_Open]]

[[Category:Issue_Assignee_Schamp]]

[[Category:Issue_Project_TrustServer]]

Issue Trust Network Graph Visualizer

2005-05-10T20:10:45Z

Schamp:

Category:Issue Project TrustServer

2005-04-29T03:08:13Z

Schamp:

[[Category:Issue_Project]]

Category:Issue Assignee Schamp

2005-04-29T03:07:49Z

Schamp:

[[Category:Issue_Assignee]]

Issue Use Redland

2005-04-29T03:07:10Z

Schamp:

Update the TrustServer's update listener to use the Redland RDF processing library, because it r0x0r.

[[Category:Issue_Status_Open]]

[[Category:Issue_Assignee_Schamp]]

[[Category:Issue_Project_TrustServer]]

Issue Use Redland

2005-04-29T03:06:26Z

Schamp:

Update the TrustServer's update listener to use the Redland RDF processing library, because it r0x0r.

[Category:Issue_Status_Open]

[Category:Issue_Assignee_Schamp]

[Category:Issue_Topic_TrustServer]

Issue Use Redland

2005-04-29T03:06:10Z

Schamp:

Update the TrustServer's update listener to use the Redland RDF processing library, because it r0x0r.

[:Category:Issue_Status_Open]

[:Category:Issue_Assignee_Schamp]

[:Category:Issue_Topic_TrustServer]