Milan Broz
8da37ce4b0
Update test (removal of get_last_error).
2015-11-20 09:18:58 +01:00
Milan Broz
4aea3b81ee
Remove password callback interface.
...
This was a design mistake and should not be handled inside libcryptsetup code.
2015-11-20 09:18:31 +01:00
Milan Broz
4384e50578
Decrease iteration time for compat tests.
2015-10-29 12:44:15 +01:00
Milan Broz
5a8b045bdd
Properly support stdin "-" handling for luksAddKey.
2015-08-26 12:41:20 +02:00
Milan Broz
8a4db1ad7b
Ingore Whirlpool test instead of failing.
2015-08-26 10:35:38 +02:00
Milan Broz
1aba9ab444
Cryptsetup resize will try resize also underlying device.
...
If encrypted device is file-backed, resize should try to resize
underlying loop device as well.
2015-08-19 14:16:42 +02:00
Milan Broz
0dc245401f
Allow to enter empty password through stdin pipe.
...
Also always use empty passsword when using null cipher in tests.
2015-07-02 08:18:12 +02:00
Milan Broz
a57f1b1b64
Silence repeated device removal in verity test.
2015-07-02 08:13:42 +02:00
Milan Broz
1f2d8de95f
Support VeraCrypt devices (TrueCrypt extension).
...
Add CRYPT_TCRYPT_VERA_MODES libcryptswtup flag and
--veracrypt option.
Fixes issue#245.
2015-02-24 22:04:15 +01:00
Milan Broz
4f7b413638
Add low-level performance options for dmcrypt tuning.
...
The patch adds the two options
--perf-same_cpu_crypt
--perf-submit_from_crypt_cpus
that set the same named options inside dmcrypt
(available in Linux kernel 3.20 and later).
2015-02-20 16:46:34 +01:00
Milan Broz
e4355c2973
Wait for udev scan before removing device in reencrypt test.
2015-02-20 13:02:27 +01:00
Milan Broz
31a4d552a2
Support keyfile offset and keyfile size option even for plain volumes.
...
For historic reasons, in the plain mode the hashing is not used
if keyfile is used (with exception of --key-file=-).
Print warning if the parameters are ignored.
For other cases, uses keyfile offset, keyfile size and hash
as psecified on commandline.
Partially fixes issue#243
2015-02-20 12:55:21 +01:00
Milan Broz
6d51e8ab69
Support permanent device decryption using cryptsetup-reencrypt --decrypt.
2015-01-27 14:20:34 +01:00
Milan Broz
8157e47ad4
Support keyfile for luksAddKey if the master key is specified.
...
If AddKey was called with master key argument, the code always asked
for a passphrase ignoring the keyfile argument.
Now it is properly processed as the same as if no master key is specified.
2015-01-26 14:42:46 +01:00
Milan Broz
62b0138dad
Allow to use --header option in all LUKS commands.
...
The --header always takes precedence over positional device argument.
Also allow specify UUID= for luksSuspend and luksResume if used with
detached header.
2015-01-26 13:31:37 +01:00
Milan Broz
49335b600f
Allow luksSuspend without explicitly specify detached header.
...
If LUKS device was configured to use detached header, suspend operation
required --header option. For now it is enough that active device in-kernel
UUID type is set properly.
FIxes issue#229.
2015-01-15 10:40:17 +01:00
Ondrej Kozina
ce30d5f1fd
add vfat test image
2014-09-23 21:31:18 +02:00
Ondrej Kozina
6e0f0408a0
reencrypt-compat-test: test log I/Os on various fs
2014-09-23 21:31:10 +02:00
Milan Broz
c36a7968f4
Add test for tmpfs / O_DIRECT etc.
2014-08-08 14:09:37 +02:00
Milan Broz
872becdbbd
Handle also missing support for tcrypt test in kernel properly.
2014-07-27 19:39:53 +02:00
Milan Broz
c9694437d2
Fix tcrypt test for unsupported combinations.
2014-07-27 18:40:21 +02:00
Milan Broz
64ad90f73c
Ignore wrong parameters fail in LUKS images tests if whirlpool hash is used.
2014-07-27 17:02:51 +02:00
Milan Broz
166d23a813
Fix tests for GNU grep syntax.
2014-07-27 16:31:46 +02:00
Milan Broz
d9678325a2
Update LUKS1 test images.
2014-07-12 21:16:19 +02:00
Milan Broz
d63163e46c
Add notes about Whirlpool hash fail to tests.
2014-06-26 14:47:02 +02:00
Ondrej Kozina
4e4d933d7b
fix reencryption tests failure with older grep
2014-06-18 08:56:23 +02:00
Milan Broz
0614ab6b07
Allow simple status of crypt device without providing metadata header.
...
If device is activated, we can provide some information from
active kernel parameters instead of header.
2014-06-14 17:42:57 +02:00
Milan Broz
6d4c2db3b1
Fix mode test for nonexisting table.
2014-06-01 20:57:45 +02:00
Milan Broz
6225c901fe
Use proper images with mentioned hashes in luks test.
2014-04-13 19:34:06 +02:00
Milan Broz
1fc441f091
Include images in tarball ans use xz format.
2014-04-13 16:29:21 +02:00
Milan Broz
22849ccd11
Add luks1 compat image testing.
...
This test use long keyfile to test proper KDF functionality.
2014-04-13 16:21:11 +02:00
Milan Broz
cf534f3759
Implement erase command.
2014-02-05 17:17:12 +01:00
Milan Broz
e364041b40
Add --keep-key to cryptsetup-reencrypt.
...
This allows change of LUKS header hash (and iteration count) without
the need to reencrypt the whole data area.
2014-01-19 15:29:12 +01:00
Milan Broz
5206543902
Fix api test keyfile write.
2014-01-12 13:39:15 +01:00
Milan Broz
2d755335de
Fix previous commit.
2013-12-08 18:15:00 +01:00
Milan Broz
d7762c09dd
Add new test images to automake file list.
2013-12-08 18:02:58 +01:00
Milan Broz
957201e758
Fix reencryption tool to work with 4k devices.
...
See https://bugzilla.redhat.com/show_bug.cgi?id=1029032#c7
Thanks to Ondra Kozina to figure this out.
2013-12-08 17:50:25 +01:00
Milan Broz
004dc271a4
Fix wrong block size if used on 4k block fs through loop device.
...
Always use page size if running through loop device.
2013-12-08 16:09:25 +01:00
Ondrej Kozina
0d47e5eb76
Enable reencryption tests using last keyslot
2013-11-21 19:48:17 +01:00
Ondrej Kozina
f30bbbffe7
Fix minimal size expectations failure for backup header file
...
- backup header file must be page size aligned
- fix for https://bugzilla.redhat.com/show_bug.cgi?id=1030288
- add regression test to api-tests
2013-11-21 19:48:12 +01:00
Ondrej Kozina
6b88461553
modify fips detection also in api-test
2013-11-21 19:48:03 +01:00
Milan Broz
700b558fb6
Fix api test to use proper key size.
...
LUKS format now reuires correct kernel parameters always,
so validation test must use different but still correct key size.
2013-11-20 22:20:15 +01:00
Ondrej Kozina
77a345d4cb
Add tests to reencryption-compat-test
...
- test --keyslot modification (commit: 5736b0a114https://bugzilla.redhat.com/show_bug.cgi?id=1030288 )
[gmayland: removed some tests & added -i 1 to save test time]
2013-11-17 21:01:19 +01:00
Milan Broz
ce23225e46
Check if provided cipher and mode is usable before writing LUKS header to disk.
...
If user provided unusable cipher-mode string, LUKS header was written and
keyslot creation failed later.
Better check early (by creating fake dmcrypt device) if cipher is usable
and fail early (without writing LUKS header to device).
Fixes Issue#176
2013-11-10 22:11:00 +01:00
Milan Broz
09c229fe6c
Support limitation for "plain" hash (no hash).
...
This can be used for mapping problematic cryptosystems which
wipes some key (losetup sometimes set last byte to zero).
2013-11-10 19:31:02 +01:00
Milan Broz
db56125708
Fix hash limiting if parameter is not a number.
...
If hash lenght specification was not a number, the whole key was set
to zero instead of command failure.
Resolves
https://bugzilla.redhat.com/show_bug.cgi?id=1028362
2013-11-10 19:08:01 +01:00
Ondrej Kozina
a21c0503f8
make FIPS checks compliant with new guidance
...
(gmazyland: Simplified this NIST nonsense, should be still exactly
equivalent to former patch)
2013-11-10 18:10:39 +01:00
Milan Broz
53607a0274
Add CBC TCRYPT VFAT id test images and run it by default.
2013-10-26 22:48:05 +02:00
Milan Broz
b2283f045a
Version 1.6.2.
2013-08-04 19:01:55 +02:00
Cristian Rodríguez
1349efa34d
Fix buildsytem to always include config.h.
...
- config.h must always be the first file to be included
- Use AM_CFLAGS and AM_LDFLAGS consistently and properly.
(Modified to disable build without largefile support etc
by Milan Broz <gmazyland@gmail.com >)
2013-06-23 17:14:33 +02:00
