coffer/TODO.org

* General
** TODO Add a license
** TODO Better communication protocol
** TODO Add tests
** TODO Readme
* Coffer Server
** TODO Add secrets on-the-fly
** TODO Store secrets in secure memory
   - Not persisted
   - Nulled out
   - Optional encrypted
* Coffer Client
** DONE Set environment variables
   CLOSED: [2019-11-27 Wed 22:51]
** TODO Send key requests encrypted/signed
* Coffer Companion
** TODO Add Subcommands
   - [X] Generate master key
   - [ ] Generate client key
   - [X] Encrypt secrets with master key
   - [ ] Decrypt secrets with master key
   - [ ] Encrypt key request with client key
   - [ ] Decrypt key request with client key
   - [ ] Generate trampolin sh from dockerfile
[client] Set up environment, spawn subprocess - Coffer client sets up the environment from the keys and secrets read - Coffer client spawns a subprocess and reaps itself Signed-off-by: Armin Friedl <dev@friedl.net> 2019-11-27 22:00:18 +00:00			`* General`
			`** TODO Add a license`
			`** TODO Better communication protocol`
[companion] Introduce subcommands Subcommands for `generate`-ing keys and `encrypt`-ing secrets. Generated artifacts can be consumed by `coffer-server`. Signed-off-by: Armin Friedl <dev@friedl.net> 2019-11-28 22:49:19 +00:00			`** TODO Add tests`
[companion] Remove old code Signed-off-by: Armin Friedl <dev@friedl.net> 2019-11-29 18:05:35 +00:00			`** TODO Readme`
[client] Set up environment, spawn subprocess - Coffer client sets up the environment from the keys and secrets read - Coffer client spawns a subprocess and reaps itself Signed-off-by: Armin Friedl <dev@friedl.net> 2019-11-27 22:00:18 +00:00			`* Coffer Server`
[companion] Introduce subcommands Subcommands for `generate`-ing keys and `encrypt`-ing secrets. Generated artifacts can be consumed by `coffer-server`. Signed-off-by: Armin Friedl <dev@friedl.net> 2019-11-28 22:49:19 +00:00			`** TODO Add secrets on-the-fly`
			`** TODO Store secrets in secure memory`
			`- Not persisted`
			`- Nulled out`
			`- Optional encrypted`
[client] Set up environment, spawn subprocess - Coffer client sets up the environment from the keys and secrets read - Coffer client spawns a subprocess and reaps itself Signed-off-by: Armin Friedl <dev@friedl.net> 2019-11-27 22:00:18 +00:00			`* Coffer Client`
			`** DONE Set environment variables`
			`CLOSED: [2019-11-27 Wed 22:51]`
			`** TODO Send key requests encrypted/signed`
			`* Coffer Companion`
			`** TODO Add Subcommands`
[companion] Remove old code Signed-off-by: Armin Friedl <dev@friedl.net> 2019-11-29 18:05:35 +00:00			`- [X] Generate master key`
[client] Set up environment, spawn subprocess - Coffer client sets up the environment from the keys and secrets read - Coffer client spawns a subprocess and reaps itself Signed-off-by: Armin Friedl <dev@friedl.net> 2019-11-27 22:00:18 +00:00			`- [ ] Generate client key`
[companion] Remove old code Signed-off-by: Armin Friedl <dev@friedl.net> 2019-11-29 18:05:35 +00:00			`- [X] Encrypt secrets with master key`
			`- [ ] Decrypt secrets with master key`
			`- [ ] Encrypt key request with client key`
			`- [ ] Decrypt key request with client key`
[client] Set up environment, spawn subprocess - Coffer client sets up the environment from the keys and secrets read - Coffer client spawns a subprocess and reaps itself Signed-off-by: Armin Friedl <dev@friedl.net> 2019-11-27 22:00:18 +00:00			`- [ ] Generate trampolin sh from dockerfile`