Milan Broz
f7dadfb646
Fix some benign compiler warnings.
2017-10-28 14:12:25 +02:00
Milan Broz
4e31595c7a
Enable build of cryptsetup-reencrypt by default.
2017-10-28 14:08:26 +02:00
Milan Broz
31779c0763
Fix memory leak in LUKS2 requirements handling for restore context.
2017-10-28 12:01:02 +02:00
Milan Broz
6e3622e0f1
Fix some warning and leaks in api test code.
2017-10-28 11:59:06 +02:00
Milan Broz
b78bd4ccce
Add new valgrind tests.
2017-10-27 22:39:50 +02:00
Milan Broz
a10059d531
Fix memory leak in verity device destructor.
2017-10-27 21:45:54 +02:00
Milan Broz
1f2ce01c08
Fix a memory leak of key description for integrity device.
2017-10-27 15:58:33 +02:00
Milan Broz
fb5a70a663
Fix memory leak in integrity device query processing.
2017-10-27 15:18:10 +02:00
Milan Broz
d62d0ed076
Add configure option to disable build of cryptsetup tool.
...
You can use --disable-cryptsetup to not build cryptsetup binary.
2017-10-25 11:47:45 +02:00
Michal Virgovic
a4b9ce13ee
Enable valgrind in veritysetup tests.
2017-10-20 10:45:11 +02:00
Michal Virgovic
43ee152eb4
Enable valgrind in integritysetup tests.
2017-10-20 08:56:21 +02:00
Michal Virgovic
fee909deee
Add tests for integritysetup journal parameters.
2017-10-19 09:00:13 +02:00
Milan Broz
702bcb8684
Fail if integrity option is used with LUKS1 format.
2017-10-17 10:37:17 +02:00
Ondrej Kozina
961e65424e
crypt_deactivate: fail earlier when holders detected
...
crypt_deactivate_* fail earlier without noisy dm retries
when other device holders detected. The early detection
works if:
a) other device-mapper device has a hold reference on the
device
- or -
b) mounted fs is detected on the device
Any deactivation flag CRYPT_DEACTIVATE_FORCE or
CRYPT_DEACTIVATE_DEFERRED will disable this detection
2017-10-17 10:03:17 +02:00
Michal Virgovic
f901cb7b25
Output correction of integritysetup status.
2017-10-17 09:50:50 +02:00
Ondrej Kozina
1d9d248456
man: fix two typos in integrity parameters
...
--integrity-no-wipe
--integrity-no-journal options
2017-10-16 16:43:19 +02:00
Milan Broz
86ef5475b9
Enable OpenSSL backend in FIPS mode.
...
Note that this is just for testing, primary FIPS backend is gcrypt.
2017-10-14 21:37:10 +02:00
Michal Virgovic
087c314154
Integritysetup: add tests for journal encryption.
...
[modified by gmazyland@gmail.com ]
2017-10-14 20:54:37 +02:00
Michal Virgovic
956ea10f56
Integritysetup manual correction (key size).
...
Also mention key size in header struct doc.
2017-10-14 19:46:37 +02:00
Milan Broz
4a4faa5d46
Fix warning for major() macro.
2017-10-12 12:29:41 +02:00
Milan Broz
7e2a3fda4d
Update gettext version.
2017-10-12 11:48:42 +02:00
Milan Broz
786e51ecd1
Do not run configure automatically after running autogen.sh.
2017-10-12 11:48:38 +02:00
Milan Broz
d77bbe93c1
Use non-recursive automake.
...
This change also causes that now binaries and libraries are placed in
build root directory.
Now we can use subdir-objects for automake.
2017-10-12 11:48:17 +02:00
Milan Broz
892b80ffa4
Do not depend in test on loop code from library sources.
...
This patch duplicates part of the code because following
switch to non-recursive automake is not easily fixable without this change.
(Automake cannot use top_srcdir anymore in this context.)
2017-10-12 11:46:26 +02:00
Milan Broz
1c2cc9f35c
Do not print error output from older "which" command in tests.
2017-10-11 08:04:02 +02:00
Milan Broz
12908709bb
Resize loop device after fallocate.
...
On old systems we have a loop mapped so the loop must be resized as well.
2017-10-10 19:48:29 +02:00
Milan Broz
b42d183b08
Create LUKS header file in luksFormat if it does not exist.
2017-10-10 13:52:50 +02:00
Milan Broz
e1ed664adc
Print error if device name is invalid (in use by other target).
2017-10-09 14:36:43 +02:00
Milan Broz
de2f07b82f
Do not try to load LUKS2 header if backup_file is LUKS1.
...
Also do not allow header restore if a different version is requested.
2017-10-06 12:28:59 +02:00
Milan Broz
cc5c91158d
Do not allow resize if device size is not aligned to sector size.
2017-10-04 15:26:00 +02:00
Milan Broz
8dc35a7906
Enable to use system libargon2.
...
Rename --disable-argon2 to --disable-internal-argon2 option
and add --enable-libargon2 flag to allow system libarhgon2.
2017-10-04 15:24:26 +02:00
Milan Broz
7e53c87f5c
Add parameter for progress update without in separate lines.
...
Useful for reencryption or integrity format.
2017-10-04 15:22:32 +02:00
Milan Broz
59e6b33c6f
Update README.md.
2017-09-29 10:08:01 +02:00
Milan Broz
9843014dce
Add API changes list to release notes.
v2.0.0-rc0
2017-09-29 09:15:02 +02:00
Milan Broz
728a454919
Update version.
2017-09-29 01:25:25 +02:00
Milan Broz
dff09b7e65
Add RC0 release notes.
2017-09-29 01:22:58 +02:00
Ondrej Kozina
bb40433960
add keyring notes
2017-09-28 11:25:17 +02:00
Milan Broz
6cd770e501
Add temporary description of LUKS2 on-disk format.
2017-09-28 11:23:33 +02:00
Milan Broz
0f347b9c5c
SLighly reformat locking doc.
2017-09-28 11:23:03 +02:00
Ondrej Kozina
c3b3d7b022
fix api-test for builds without keyring support
2017-09-27 11:03:11 +02:00
Milan Broz
948006561a
Yet another fix for header strings.
2017-09-27 10:54:03 +02:00
Milan Broz
3ccbb8fe84
Fix some problems found by Coverity analysis.
2017-09-27 10:18:38 +02:00
Milan Broz
c1c541642e
Add a note about locking to man page.
2017-09-27 08:12:09 +02:00
Ondrej Kozina
b4782809d4
luks2: allow masking of requirements internaly
...
before this patch any LUKS2 requirement defined in header
would stop a restricted operation from proceeding further.
This patch adds ability to mask requirements (internal only).
2017-09-27 07:48:53 +02:00
Ondrej Kozina
b3feae5474
luks2: unify naming for requirements flags
2017-09-27 07:47:41 +02:00
Ondrej Kozina
c015aeca4e
luks2: move pre-activation requirements check lower
2017-09-27 07:47:13 +02:00
Milan Broz
9bbc13f256
Add LUKS2 examples.
...
Signed-off-by: Milan Broz <gmazyland@gmail.com >
2017-09-27 07:46:41 +02:00
Milan Broz
38d53db6e9
Reformat and fix libcryptsetup.h / Doxygen doc.
...
No functional change in this patch.
2017-09-26 16:35:20 +02:00
Ondrej Kozina
0f4d83960f
add remainders to fix some longstanding issues
2017-09-24 19:50:34 +02:00
Milan Broz
19a1852e4b
Support sector size option even for plain devices.
2017-09-24 19:50:28 +02:00