Network UPS Tools User Manual

Network UPS Tools User Manual 37 / 84
8.5 Other type of devices
As mentioned in the introduction, some other devices can be considered and managed like PDUs. This is the case in most blade
systems, where the blade chassis offers power management services.
This way, you can control remotely each blade server as if it were a PDU outlet.
This category of devices is generally called Remote Power Controls - RPC in NUT.
9 Notes on securing NUT
The NUT Team is very interested in providing the highest security level to its users.
Many internal and external mechanisms exist to secure NUT. And several steps are needed to ensure that your NUT setup meets
your security requirements.
This chapter will present you these mechanisms, by increasing order of security level. This means that the more security you
need, the more mechanisms you will have to apply.
Note
you may want to have a look at NUT Quality Assurance, since some topics are related to NUT security and reliability.
9.1 How to verify the NUT source code signature
In order to verify the NUT source code signature for releases, perform the following steps:
• Retrieve the NUT source code (nut-X.Y.Z.tar.gz) and the matching signature (nut-X.Y.Z.tar.gz.sig)
• Retrieve the NUT maintainer’s signature:
$ gpg --fetch-keys http://www.networkupstools.org/source/nut-key.gpg
Note
As of NUT 2.7.3, a new release key is used. In order to verify previous release, please use NUT old maintainer’s signature
• Launch the GPG checking using the following command:
$ gpg --verify nut-X.Y.Z.tar.gz.sig
• You should see a message mentioning a "Good signature", like:
gpg: Signature made Wed Apr 15 15:55:30 2015 CEST using RSA key ID 55CA5976
gpg: Good signature from "Arnaud Quette ..."
...
Note
the previously used maintainer’s signature would output:
+ gpg: Signature made Thu Jul 5 16:15:05 2007 CEST using DSA key ID 204DDF1B gpg: Good signature from "Arnaud Quette
. . . " . . .