Ondrej Kozina
f30bbbffe7
Fix minimal size expectations failure for backup header file
...
- backup header file must be page size aligned
- fix for https://bugzilla.redhat.com/show_bug.cgi?id=1030288
- add regression test to api-tests
2013-11-21 19:48:12 +01:00
Ondrej Kozina
6b88461553
modify fips detection also in api-test
2013-11-21 19:48:03 +01:00
Milan Broz
700b558fb6
Fix api test to use proper key size.
...
LUKS format now reuires correct kernel parameters always,
so validation test must use different but still correct key size.
2013-11-20 22:20:15 +01:00
Ondrej Kozina
77a345d4cb
Add tests to reencryption-compat-test
...
- test --keyslot modification (commit: 5736b0a114https://bugzilla.redhat.com/show_bug.cgi?id=1030288 )
[gmayland: removed some tests & added -i 1 to save test time]
2013-11-17 21:01:19 +01:00
Milan Broz
ce23225e46
Check if provided cipher and mode is usable before writing LUKS header to disk.
...
If user provided unusable cipher-mode string, LUKS header was written and
keyslot creation failed later.
Better check early (by creating fake dmcrypt device) if cipher is usable
and fail early (without writing LUKS header to device).
Fixes Issue#176
2013-11-10 22:11:00 +01:00
Milan Broz
09c229fe6c
Support limitation for "plain" hash (no hash).
...
This can be used for mapping problematic cryptosystems which
wipes some key (losetup sometimes set last byte to zero).
2013-11-10 19:31:02 +01:00
Milan Broz
db56125708
Fix hash limiting if parameter is not a number.
...
If hash lenght specification was not a number, the whole key was set
to zero instead of command failure.
Resolves
https://bugzilla.redhat.com/show_bug.cgi?id=1028362
2013-11-10 19:08:01 +01:00
Ondrej Kozina
a21c0503f8
make FIPS checks compliant with new guidance
...
(gmazyland: Simplified this NIST nonsense, should be still exactly
equivalent to former patch)
2013-11-10 18:10:39 +01:00
Milan Broz
53607a0274
Add CBC TCRYPT VFAT id test images and run it by default.
2013-10-26 22:48:05 +02:00
Milan Broz
b2283f045a
Version 1.6.2.
2013-08-04 19:01:55 +02:00
Cristian Rodríguez
1349efa34d
Fix buildsytem to always include config.h.
...
- config.h must always be the first file to be included
- Use AM_CFLAGS and AM_LDFLAGS consistently and properly.
(Modified to disable build without largefile support etc
by Milan Broz <gmazyland@gmail.com >)
2013-06-23 17:14:33 +02:00
Milan Broz
ae9c9cf369
Disallow explicit small payload offset for detached header.
...
LUKS detached header has some limitations, one of them
is that you cannot run some explicit check for data offsets
without providing also data device.
Because luksDump and all key handle commands takes only
metadata device (LUKS heaer device), it not easy to properly
support data payload offset validation.
So if detached header is present for luksFormat, code now
allows data payload 0 (IOW whole data device is used)
and explicit offset larger than header+keyslots
(the same as the header is on data device - so some space is wasted).
N.B. with detached header the option --align-payload is used
directly without any round up caculations.
Fixes Issue#155.
2013-05-11 10:59:02 +02:00
Milan Broz
6127b6959f
Update copyright year on changed files.
2013-03-24 09:05:33 +01:00
Milan Broz
f2521889c2
Deactivate whole device TCRYPT tree if context is NULL
...
API (unfortunately) supports NULL argument for crypt_deactivate,
with new chained TCRYPT devices it must deactivate all
chained devices as well.
Fixes issue#147.
2013-03-17 19:20:42 +01:00
Milan Broz
2780ccdd62
Properly cleanup on interrupt in api-test.
2013-01-16 15:28:12 +01:00
Milan Broz
fdcabdfd28
Support test run in kernel FIPS mode.
2013-01-15 14:53:19 +01:00
Milan Broz
6a1f49c244
Fix tcrypt test header.
2013-01-13 23:53:35 +01:00
Milan Broz
8613651f18
Use tabs in script.
2013-01-13 20:45:55 +01:00
Milan Broz
20149281a4
Fix tests to work with pwquality compiled in.
2013-01-10 15:34:11 +01:00
Milan Broz
36eb33bc86
Skip test for kernel wihtout autoclear flag.
2013-01-08 18:44:02 +01:00
Milan Broz
df8fb84723
Workaround api-test compilation on some very old systems.
2013-01-08 17:41:06 +01:00
Milan Broz
4de648a77a
Properly specify cipher in tests.
2013-01-08 14:45:39 +01:00
Milan Broz
929dc47be4
Fix displaying of error messages for mising kernel features.
2013-01-08 14:19:31 +01:00
Milan Broz
37d52bf01b
Require lsblk for tcrypt test.
2012-12-30 12:35:35 +01:00
Milan Broz
0946c704bf
Fix status of device if path argument is used. Fix double path prefix for non-existent device path.
2012-12-30 11:48:30 +01:00
Milan Broz
05da2ed2c2
Skip TCRYPT KDF if hash is not available.
2012-12-29 20:23:52 +01:00
Milan Broz
29f21208a0
Change License from GPLv2 only to GPLv2+ ("or any later").
...
Agreed by all copyright authors.
2012-12-29 11:33:54 +01:00
Milan Broz
e4c4049741
Add basic support for system TCRYPT device.
...
Rename option hidden to tcrypt-hidden.
2012-12-22 22:34:09 +01:00
Milan Broz
83f02e6682
Add copyright line for files I have written or modified.
2012-12-21 16:40:33 +01:00
Milan Broz
069ba220d2
Add crypt_keyslot_change_by_passphrase() api test.
2012-12-21 16:27:55 +01:00
Milan Broz
9ae7b7d1be
Fix regression in header backup (1.5.1).
...
Access to backup file must handle write to regular files too.
2012-12-19 13:19:05 +01:00
Milan Broz
d05f020d5a
Add keyfiles tcrypt test.
2012-12-01 13:43:59 +01:00
Milan Broz
dde57477fc
And skip tcrypt api test if there is no af_alf kernel interface.
2012-11-30 18:53:32 +01:00
Milan Broz
ffb6ecc488
Add TCRYPT api test, fix some minor problems found.
2012-11-30 18:41:10 +01:00
Milan Broz
0461d9e822
Better tcrypt test options.
2012-11-30 15:03:01 +01:00
Milan Broz
f35f34b909
Fix po files.
2012-11-27 19:18:05 +01:00
Milan Broz
34a2176689
TCRYPT: add simple test and image archive.
2012-11-27 19:08:10 +01:00
Milan Broz
1b191e14d0
Remove test dir during cleanup.
2012-11-25 23:43:14 +01:00
Milan Broz
29e4414c35
Fix luksHeaderBackup for v1.0 (very old) headers and add some basic test.
2012-08-30 15:39:30 +02:00
Milan Broz
c2e12440d2
Add some offset/keyslot offset checks.
2012-08-30 14:08:34 +02:00
Milan Broz
15442c1747
Modprobe kernel modules early in api-test.
2012-08-14 15:54:31 +02:00
Milan Broz
49b018c765
Create hash image if doesn't exist in veritysetup format.
2012-08-12 23:42:41 +02:00
Milan Broz
99643a82ae
Be sure verity module is loaded in test.
2012-07-23 15:00:28 +02:00
Milan Broz
8b8e206c07
Skip multikey if not supported (e.g. FIPS mode - md5 for IV not available).
2012-07-12 12:53:26 +02:00
Milan Broz
a47ebccf9a
Add module load to test.
2012-07-10 10:15:40 +02:00
Milan Broz
5f7309bfa0
Add some verity api test.
...
Fix set_data_device bug it uncovered.
Fix api-test for nonFIPS hash.
2012-07-09 18:09:51 +02:00
Milan Broz
b684fffdaf
Switch to use unit suffix for --reduce-device-size option.
2012-06-25 16:06:43 +02:00
Milan Broz
be5473f242
Fix verity test.
...
(Writing just one byte from urandom means, that there is still
high probability the byte will be the same and it will cause
no data corruption :-)
2012-06-19 18:40:38 +02:00
Milan Broz
527c0fe4f9
Rename without_activation to test_passphrase.
2012-06-19 17:37:31 +02:00
Milan Broz
0ec4d4c9cf
Add directio to reenc test.
2012-06-19 16:04:20 +02:00
