search for: keysource

...ice_1/base slice_1/base/fsys_1_1 ... slice_1/base/fsys_1_last ... etc. The intermediate "base" file systems are there only to set attributes to be inherited by all other file systems in the same pool. They were created with encryption on, forcing all others to be encrypted. The keysource for slice_?/base was set to "passphrase,prompt" while creating the file systems. Then I stored the keys (one key per pool) in files in a subdirectory of home/user1, and set keysource for slice_0/base to "passphrase,file:///export/home/user1/keys/key_0" (Similarly for the...

http://defect.opensolaris.org/bz/show_bug.cgi?id=752 Summary: zfs set keysource no longer works on existing pools Classification: Development Product: zfs-crypto Version: unspecified Platform: Other OS/Version: Solaris Status: NEW Severity: blocker Priority: P1 Component: other Assigne...

http://defect.opensolaris.org/bz/show_bug.cgi?id=759 Summary: ''zpool create -o keysource=,'' hanged Classification: Development Product: zfs-crypto Version: unspecified Platform: i86pc/i386 OS/Version: Solaris Status: NEW Severity: minor Priority: P3 Component: other AssignedTo: darrenm...

http://defect.opensolaris.org/bz/show_bug.cgi?id=1053 Summary: ''zfs create'' core dumped with keysource=hex,prompt and unmatched entered in Classification: Development Product: zfs-crypto Version: unspecified Platform: Other OS/Version: Solaris Status: NEW Severity: normal Priority: P3 Component:...

http://defect.opensolaris.org/bz/show_bug.cgi?id=701 Summary: ''zpool create -o keysource='' fails on sparc - invalid argument Classification: Development Product: zfs-crypto Version: unspecified Platform: SPARC/sun4u OS/Version: Solaris Status: NEW Severity: minor Priority: P2...

http://defect.opensolaris.org/bz/show_bug.cgi?id=782 Summary: zfs keysource=raw fails with keyscope=dataset when file doesn''t exist Classification: Development Product: zfs-crypto Version: unspecified Platform: Other OS/Version: Solaris Status: NEW Severity: minor Prior...

http://defect.opensolaris.org/bz/show_bug.cgi?id=871 Summary: ''zpool key -l'' core dumped with keysource=hex,prompt and unmatched entered in Classification: Development Product: zfs-crypto Version: unspecified Platform: Other OS/Version: Windows Status: NEW Severity: minor Priority: P2 Component: o...

...g the key, trying to reload the key fails.. Below is all the debug info.. The salt and key are the same during creation and load time.. An error that looks odd to me is the first kernel warning saying that keylength of 32 was invalid.. it should be 32.. bash-3.2# zfs create -o encryption=on -o keysource=passphrase,prompt -o keyscop e=dataset tank/enc DEBUG: crypt = 0 DEBUG: keyscope = 0 DEBUG: keysource="passphrase,prompt" Enter passphrase for ''tank/enc'': Enter again: salt==0 salt==3731736994759854399 outkey (1081232)=b0d7586016db505e3ae4be3dc32f3f270a22f4ce17ef8d4433...

...7 blen = 0; ------------------------------------------------------------------ usr/src/lib/libzfs/common/libzfs_crypto.c.html get_passphrase() DEA-6: typos for Retrieve and restrictions: 1105 /* Retreive the source value for the current keyscope */ 1353 * keysource changes have no restictions. DEA-7: hexadecimal is misspelled twice in this function (this is user-visible, not a comment): 176 gettext("Enter new hexadecmial key for"), 180 gettext("Enter hexadecmial key for"), zc->zc_...

...home/zfscrypto-tests/proto/suites/securi ty/zfs-crypto/lib/zfs_create.exp /usr/sbin/z fs pool_21582 fs on hex,prompt 9adf6ac44655ccc414a5e9197a34c52731f5fe08d9191a7c d3811ab6f69f1078 stdout| 21582| spawn /usr/sbin/zfs create -o encryption=on -o keyscope=dataset -o keysource=hex,prompt pool_21582/fs^M stdout| Enter hexadecmial key for ''pool_21582/fs'': ^M^M stdout| Enter again: ^M^M stdout| 21582| /usr/sbin/zfs allow zfsc keychange pool_21582/fs stdout| 21582| /bin/su zfsc -c "/usr/sbin/zfs key -c -o keysource=hex,file:///e xport/home/zfscrypto-te...

http://defect.opensolaris.org/bz/show_bug.cgi?id=2116 Summary: zfs_create_005: ''zfs create'' coredump if keysourcea is a blank passphrase file Classification: Development Product: zfs-crypto Version: unspecified Platform: Other OS/Version: Solaris Status: NEW Severity: major Priority: P3 Component: other...

...r Priority: P4 Component: other AssignedTo: darrenm at opensolaris.org ReportedBy: darrenm at opensolaris.org QAContact: hua.tang at sun.com CC: zfs-crypto-discuss at opensolaris.org Estimated Hours: 0.0 If a pool is created without a keysource value at ''zpool create'' time the first ''zpool key -l'' after for keysource=passphrase will fail to correctly setup the key. This is because the salt doesn''t get properly passed down. I''m making the fix a little more generic so that we reduce t...

...QAContact: hua.tang at sun.com CC: zfs-crypto-discuss at opensolaris.org Estimated Hours: 0.0 build: zfs-crypto-gate-2008-05-15-12:38 It hangs on encrypted datasets with keyscope=dataset as well as keyscope=pool. # zpool create -f test /export/home/testfile_2 # zfs create -o keysource=raw,file:///export/home/raw_key_file -o encryption=on -o keyscope=dataset test/fs # zfs destroy test/fs # zpool create -f test /export/home/testfile_2 # zpool set keysource=passphrase,prompt test # zpool key -l test Enter passphrase for ''test'': Enter again: # zfs create -o encr...

...pensolaris.org> Repository: /hg/zfs-crypto/gate Latest revision: 4c9597e1e4e9b6cbd6c20be06f0cdf9c409d3629 Total changesets: 1 Log message: 885 dataset creation panics if pool keystatus not ''available''. 360 check for key on creation should be in dmu_objset_create_check() 782 zfs keysource=raw fails with keyscope=dataset when file doesn''t exist Files: update: usr/src/lib/libzfs/common/libzfs_crypto.c update: usr/src/lib/libzfs/common/libzfs_dataset.c update: usr/src/uts/common/fs/zfs/dmu_objset.c update: usr/src/uts/common/fs/zfs/sys/zio_crypt.h update: usr/src/uts/com...

...If we allow reading of keys from a pipe, the abstraction allows the two things to remain seperate. Please let me know your thoughts on the patch and/or the idea in general. Thanks, Rob -------------- next part -------------- An embedded and charset-unspecified text was scrubbed... Name: openssh-keysource.patch Url: http://lists.mindrot.org/pipermail/openssh-unix-dev/attachments/20060517/805c1e6f/attachment.ksh

...nedTo: darrenm at opensolaris.org ReportedBy: hua.tang at sun.com QAContact: hua.tang at sun.com CC: zfs-crypto-discuss at opensolaris.org Estimated Hours: 0.0 build: zfs-crypto-gate-2008-05-23-18:05 # zpool create -f test /export/home/testfile # zfs create -o keysource=raw,file:///no_file -o keyscope=dataset -o encryption=on test/fs panic info: panic[cpu0]/thread=2a100a67ca0: assertion failed: 0 == dsl_crypto_key_gen(ds, zct, cr, tx), file: ../../common/fs/zfs/dmu_objset.c, line: 628 000002a100a675a0 genunix:assfail+78 (7b3036a0, 7b3031a8, 274, 1853800, 136100...