Looking for feedback

[hdholm]

Because I use it, I've created a plugin to manage and monitor a Tang daemon.  It seems to be working for me. I don't know if there is interest in making it more widely available and how I would go about that - submit a pull request?  Any comments or constructive criticism are gratefully accepted.  The plugin itself is pretty straightforward, the existing FreeBSD ports do the hard lifting. Code is at https://github.com/hdholm/plugins/tree/tang/security/tang The plugin depends on llhttp, jose, and tang which are all available from FreeBSD ports. I keep everything on an internal server to which I point the FW firmware update, but I could make it public if there was interest.

If you're not familiar with Tang, it is part of a two part system used primarily on Linux. If you encrypt your hard drives and specifically your root drive it means you can't boot after an automated restart without someone typing in the key - unless you have tang server. Asa simplified explanation, the other part of the system (clevus) lives on the encrypted system and reaches out to the tang portion when booting to unlock the encryption.  If the tang server is available (which is usually only true on your local network) then the encryption is unlocked, otherwise the disks remain secure. Having this on an internal (or even gateway in simple cases) firewall, is an obvious choice for where this lives since if the firewall is down, you probably need local intervention for things beyond typing in the encryption key.