Himitsuのソースを表示

[[Category:セキュリティ]]
[https://himitsustore.org/ Himitsu] is a secure secret storage system for Unix-like systems.
It is extensible and suitable for storing passwords, private keys, logins, etc.

Himitsu secrets are stored in a arbitrary key/value store, accessible via a [[daemon]].
Himitsu also provides a command-line interface and query language for the store.

== Installation ==

[[Install]] the {{AUR|himitsu}} package.

You will also need a Himitsu prompter: {{AUR|hiprompt-gtk-py}}.

== Configuration ==

The {{man|7|himitsu|url=https://himitsustore.org/docs/himitsu.7.html}} man page is worth reading.
The following is a guide specific to an Arch Linux installation of {{AUR|himitsu}}.

Firstly, you will need a himitsu secstore (secrets store) and some basic configuration.
Initialize these with {{man|1|himitsu-init|url=https://himitsustore.org/docs/himitsu-init.1.html}}.

 $ himitsu-init

You will then need to configure Himitsu to use your prompter of choice.
Edit the {{man|5|himitsu.ini|url=https://himitsustore.org/docs/himitsu.ini.5.html}} config file. For example, for
{{AUR|hiprompt-gtk-py}}:

{{hc|~/.config/himitsu/config.ini|<nowiki>
[himitsud]
prompter=hiprompt-gtk
</nowiki>}}

The Himitsu [[daemon]] {{man|1|himitsud|url=https://himitsustore.org/docs/himitsud.1.html}} can now be run.
The Himitsu package comes with a systemd [[user unit]], {{ic|himitsud.service}}.
[[Starting/enabling]] it runs {{ic|himitsud}} in the background.

== Usage ==

Use the {{man|1|hiq|url=https://himitsustore.org/docs/hiq.1.html}} command to query and manage the keystore.

== Integrations ==

Himitsu has integrations for various software.

=== SSH ===

The {{AUR|himitsu-ssh}} package provides an [[SSH agent]] and utilities for using and storing [[SSH keys]] in the Himitsu keystore.

For ''ssh'' to use the Himitsu SSH agent, it is required that:

* The agent is running ([[enable/start]] the included {{ic|hissh-agent.service}} [[user unit]]).
* The {{ic|$SSH_AUTH_SOCK}} [[environment variable]] is set to the Himitsu SSH agent's socket (i.e. {{ic|$XDG_RUNTIME_DIR/hissh-agent}}).

See {{man|1|hissh-agent|url=}}.

With that, ''ssh'' will consult the Himitsu keystore for SSH key data.

=== Firefox ===

The {{AUR|himitsu-firefox}} package provides the backend (a native messaging component) for the official [https://addons.mozilla.org/firefox/addon/himitsu-integration/ Firefox Himitsu Add-on].
Once both installed, Firefox can consult the Himitsu keystore for logins/passwords, from keystore entries with the {{ic|1=proto=web}} key-value pair.
The add-on implements the "web" protocol.