Date: Sun, 8 May 2011 09:17:56 +0000 (UTC) From: Pawel Jakub Dawidek <pjd@FreeBSD.org> To: cvs-src-old@freebsd.org Subject: cvs commit: src/sys/geom/eli g_eli.c g_eli.h g_eli_integrity.c Message-ID: <201105080918.p489IEUX074598@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
pjd 2011-05-08 09:17:56 UTC
FreeBSD src repository
Modified files:
sys/geom/eli g_eli.c g_eli.h g_eli_integrity.c
Log:
SVN rev 221628 on 2011-05-08 09:17:56Z by pjd
When support for multiple encryption keys was committed, GELI integrity mode
was not updated to pass CRD_F_KEY_EXPLICIT flag to opencrypto. This resulted in
always using first key.
We need to support providers created with this bug, so set special
G_ELI_FLAG_FIRST_KEY flag for GELI provider in integrity mode with version
smaller than 6 and pass the CRD_F_KEY_EXPLICIT flag to opencrypto only if
G_ELI_FLAG_FIRST_KEY doesn't exist.
Reported by: Anton Yuzhaninov <citrin@citrin.ru>
MFC after: 1 week
Revision Changes Path
1.65 +11 -1 src/sys/geom/eli/g_eli.c
1.25 +13 -2 src/sys/geom/eli/g_eli.h
1.12 +2 -0 src/sys/geom/eli/g_eli_integrity.c
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201105080918.p489IEUX074598>