Michal Virgovic
f901cb7b25
Output correction of integritysetup status.
2017-10-17 09:50:50 +02:00
Ondrej Kozina
1d9d248456
man: fix two typos in integrity parameters
...
--integrity-no-wipe
--integrity-no-journal options
2017-10-16 16:43:19 +02:00
Milan Broz
86ef5475b9
Enable OpenSSL backend in FIPS mode.
...
Note that this is just for testing, primary FIPS backend is gcrypt.
2017-10-14 21:37:10 +02:00
Michal Virgovic
087c314154
Integritysetup: add tests for journal encryption.
...
[modified by gmazyland@gmail.com ]
2017-10-14 20:54:37 +02:00
Michal Virgovic
956ea10f56
Integritysetup manual correction (key size).
...
Also mention key size in header struct doc.
2017-10-14 19:46:37 +02:00
Milan Broz
4a4faa5d46
Fix warning for major() macro.
2017-10-12 12:29:41 +02:00
Milan Broz
7e2a3fda4d
Update gettext version.
2017-10-12 11:48:42 +02:00
Milan Broz
786e51ecd1
Do not run configure automatically after running autogen.sh.
2017-10-12 11:48:38 +02:00
Milan Broz
d77bbe93c1
Use non-recursive automake.
...
This change also causes that now binaries and libraries are placed in
build root directory.
Now we can use subdir-objects for automake.
2017-10-12 11:48:17 +02:00
Milan Broz
892b80ffa4
Do not depend in test on loop code from library sources.
...
This patch duplicates part of the code because following
switch to non-recursive automake is not easily fixable without this change.
(Automake cannot use top_srcdir anymore in this context.)
2017-10-12 11:46:26 +02:00
Milan Broz
1c2cc9f35c
Do not print error output from older "which" command in tests.
2017-10-11 08:04:02 +02:00
Milan Broz
12908709bb
Resize loop device after fallocate.
...
On old systems we have a loop mapped so the loop must be resized as well.
2017-10-10 19:48:29 +02:00
Milan Broz
b42d183b08
Create LUKS header file in luksFormat if it does not exist.
2017-10-10 13:52:50 +02:00
Milan Broz
e1ed664adc
Print error if device name is invalid (in use by other target).
2017-10-09 14:36:43 +02:00
Milan Broz
de2f07b82f
Do not try to load LUKS2 header if backup_file is LUKS1.
...
Also do not allow header restore if a different version is requested.
2017-10-06 12:28:59 +02:00
Milan Broz
cc5c91158d
Do not allow resize if device size is not aligned to sector size.
2017-10-04 15:26:00 +02:00
Milan Broz
8dc35a7906
Enable to use system libargon2.
...
Rename --disable-argon2 to --disable-internal-argon2 option
and add --enable-libargon2 flag to allow system libarhgon2.
2017-10-04 15:24:26 +02:00
Milan Broz
7e53c87f5c
Add parameter for progress update without in separate lines.
...
Useful for reencryption or integrity format.
2017-10-04 15:22:32 +02:00
Milan Broz
59e6b33c6f
Update README.md.
2017-09-29 10:08:01 +02:00
Milan Broz
9843014dce
Add API changes list to release notes.
v2.0.0-rc0
2017-09-29 09:15:02 +02:00
Milan Broz
728a454919
Update version.
2017-09-29 01:25:25 +02:00
Milan Broz
dff09b7e65
Add RC0 release notes.
2017-09-29 01:22:58 +02:00
Ondrej Kozina
bb40433960
add keyring notes
2017-09-28 11:25:17 +02:00
Milan Broz
6cd770e501
Add temporary description of LUKS2 on-disk format.
2017-09-28 11:23:33 +02:00
Milan Broz
0f347b9c5c
SLighly reformat locking doc.
2017-09-28 11:23:03 +02:00
Ondrej Kozina
c3b3d7b022
fix api-test for builds without keyring support
2017-09-27 11:03:11 +02:00
Milan Broz
948006561a
Yet another fix for header strings.
2017-09-27 10:54:03 +02:00
Milan Broz
3ccbb8fe84
Fix some problems found by Coverity analysis.
2017-09-27 10:18:38 +02:00
Milan Broz
c1c541642e
Add a note about locking to man page.
2017-09-27 08:12:09 +02:00
Ondrej Kozina
b4782809d4
luks2: allow masking of requirements internaly
...
before this patch any LUKS2 requirement defined in header
would stop a restricted operation from proceeding further.
This patch adds ability to mask requirements (internal only).
2017-09-27 07:48:53 +02:00
Ondrej Kozina
b3feae5474
luks2: unify naming for requirements flags
2017-09-27 07:47:41 +02:00
Ondrej Kozina
c015aeca4e
luks2: move pre-activation requirements check lower
2017-09-27 07:47:13 +02:00
Milan Broz
9bbc13f256
Add LUKS2 examples.
...
Signed-off-by: Milan Broz <gmazyland@gmail.com >
2017-09-27 07:46:41 +02:00
Milan Broz
38d53db6e9
Reformat and fix libcryptsetup.h / Doxygen doc.
...
No functional change in this patch.
2017-09-26 16:35:20 +02:00
Ondrej Kozina
0f4d83960f
add remainders to fix some longstanding issues
2017-09-24 19:50:34 +02:00
Milan Broz
19a1852e4b
Support sector size option even for plain devices.
2017-09-24 19:50:28 +02:00
Milan Broz
c6d4ebd80c
Add libLUKS2 tests.
2017-09-24 19:50:17 +02:00
Milan Broz
9f2727bb77
Add libLUKS2.
2017-09-24 19:50:12 +02:00
Milan Broz
00b103c85c
Allow wip-luks2 build in Travis.
2017-09-24 19:50:05 +02:00
Milan Broz
a0d2d4c0b1
Add uint64_to_str helper.
2017-09-24 19:50:01 +02:00
Milan Broz
64e91951b2
Add generic LUKS format define.
...
It means "load any LUKS version".
2017-09-24 19:49:56 +02:00
Milan Broz
e7de19fe1d
Split utils from API test.
2017-09-24 19:49:51 +02:00
Milan Broz
5536b3a58d
Add implementation of device/file locking for metadata.
...
To be used later.
2017-09-24 19:49:46 +02:00
Milan Broz
a8347d2820
Add integrity intefrace test stub.
2017-09-24 19:49:40 +02:00
Milan Broz
c56bdee177
Add backend support for new device-mapper kernel options.
...
This patch adds support for using keyring for volume key
and support for new integrity fields for dm-crypt.
Also helpers for searching disk by id.
To be used later.
2017-09-24 19:49:35 +02:00
Milan Broz
894e7b9357
Add base64 implementation.
...
To be used later. Copy from gnulib.
2017-09-24 19:49:30 +02:00
Milan Broz
2aee1426de
Speed up tests by avoiding PBKDF benchmarks in many cases.
2017-09-24 19:49:25 +02:00
Milan Broz
66db5b39bb
Change PBKDF insterface to allow forced iterations (time cost) count.
...
Also move functions to separate utils_pbkdf.c file.
PBKDF can be now set for any context.
TODO: new setting is not covered by tests.
2017-09-24 19:49:21 +02:00
Milan Broz
a73bb733ff
Fix list of files for translation.
2017-09-24 10:09:48 +02:00
Michal Virgovic
3d57f5fcbb
Add tests for integritysetup error detection.
2017-09-23 23:49:25 +02:00