kaya-rekey(1)

1kaya-rekey(1)               Kaya program reference               kaya-rekey(1)
2
3
4

NAME

6       kaya-rekey - Binary key regeneration for kaya web applications
7

SYNOPSIS

9       kaya-rekey FILE1 [FILE2 [...]]
10

DESCRIPTION

12       kaya-rekey  gives all Kaya binaries specified on the command line a new
13       application secret key
14
15       The application secret key makes webapps and CGI  programs  secure,  by
16       encrypting  the  state transfers. If you receive a webapp or CGI binary
17       from someone else, or you believe someone untrusted has had read access
18       to  your  binary,  you can use the kaya-rekey application to generate a
19       new application secret key without needing a recompile.
20
21       Binary distributors of Kaya applications are  strongly  recommended  to
22       use 'kaya-rekey' as part of the installation process.
23
24       Prior to Kaya 0.3.0 this utility was called rekey
25
26

OBTAINING

28       The   latest   release  of  Kaya  can  be  obtained  from  <http://kay‐
29       alang.org/download>
30
31       Development versions can be obtained using darcs(1)  from  <http://kay‐
32       alang.org/darcs/>
33
34

SECURITY

36       kaya-rekey will use /dev/random to generate the new key if possible. If
37       /dev/random is unavailable (Windows without MinGW,  for  example),  the
38       new  key  will be generated pseudo-randomly. This may allow an attacker
39       to easily guess the new key. In environments where security is  a  con‐
40       cern, therefore, we strongly recommend recompiling with kayac(1) rather
41       than using kaya-rekey if /dev/random is unavailable.
42
43       kaya-rekey will give a warning when rekeying if /dev/random is unavail‐
44       able.
45
46

BUGS

48       Please report bugs in kaya-rekey to <kaya@kayalang.org>
49
50       kaya-rekey  cannot  rekey Kaya binaries generated with a compiler older
51       than the switch to AES256 encryption (i.e. older than 0.2.0 final  ver‐
52       sion)
53
54       In  rare cases, kaya-rekey may not be able to successfully rekey a file
55       and will print an error instead. You must recompile in this case to get
56       a new application key.
57
58

LICENSE

60       kaya-rekey  is  free software; you can redistribute it and/or modify it
61       under the terms of the GNU General Public License  (version  2  or  any
62       later version) as published by the Free Software Foundation.
63
64