From owner-freebsd-geom@FreeBSD.ORG  Tue Mar  7 04:27:45 2006
Return-Path: <owner-freebsd-geom@FreeBSD.ORG>
X-Original-To: freebsd-geom@freebsd.org
Delivered-To: freebsd-geom@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 7181016A420
	for <freebsd-geom@freebsd.org>; Tue,  7 Mar 2006 04:27:45 +0000 (GMT)
	(envelope-from gcubfg-freebsd-geom@m.gmane.org)
Received: from ciao.gmane.org (main.gmane.org [80.91.229.2])
	by mx1.FreeBSD.org (Postfix) with ESMTP id F0FCA43D45
	for <freebsd-geom@freebsd.org>; Tue,  7 Mar 2006 04:27:44 +0000 (GMT)
	(envelope-from gcubfg-freebsd-geom@m.gmane.org)
Received: from list by ciao.gmane.org with local (Exim 4.43)
	id 1FGTnK-00014f-VE
	for freebsd-geom@freebsd.org; Tue, 07 Mar 2006 05:27:35 +0100
Received: from p508c266a.dip0.t-ipconnect.de ([80.140.38.106])
	by main.gmane.org with esmtp (Gmexim 0.1 (Debian))
	id 1AlnuQ-0007hv-00
	for <freebsd-geom@freebsd.org>; Tue, 07 Mar 2006 05:27:34 +0100
Received: from christian.baer by p508c266a.dip0.t-ipconnect.de with local
	(Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00
	for <freebsd-geom@freebsd.org>; Tue, 07 Mar 2006 05:27:34 +0100
X-Injected-Via-Gmane: http://gmane.org/
To: freebsd-geom@freebsd.org
From: Christian Baer <christian.baer@informatik.uni-dortmund.de>
Date: Mon, 6 Mar 2006 20:51:15 +0100 (CET)
Organization: Convenimus Projekt
Lines: 16
Message-ID: <dui3rj$1270$1@nermal.rz1.convenimus.net>
References: <duh4l6$uv8$3@nermal.rz1.convenimus.net>
	<20060306113000.GC53437@garage.freebsd.pl>
	<duh85k$uv8$5@nermal.rz1.convenimus.net>
	<20060306121125.GG53437@garage.freebsd.pl>
X-Complaints-To: usenet@sea.gmane.org
X-Gmane-NNTP-Posting-Host: p508c266a.dip0.t-ipconnect.de
User-Agent: slrn/0.9.8.1 (FreeBSD)
Sender: news <news@sea.gmane.org>
Subject: Re: Changing geli-providers from passphrase to keyfile
X-BeenThere: freebsd-geom@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: GEOM-specific discussions and implementations
	<freebsd-geom.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-geom>,
	<mailto:freebsd-geom-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-geom>
List-Post: <mailto:freebsd-geom@freebsd.org>
List-Help: <mailto:freebsd-geom-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-geom>,
	<mailto:freebsd-geom-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 07 Mar 2006 04:27:45 -0000

On Mon, 6 Mar 2006 13:11:25 +0100 Pawel Jakub Dawidek wrote:

> So what you basically want is to change your passphrase to a keyfile?
>
> 	# echo piped-passphrase | geli setkey -P -K - ad0s1d
> 	Enter passphrase:
> 	# echo piped-passphrase | geli attach -p -k - ad0s1d

Yup, that was it! :-) Thanks for the help!

Does this in any way affect the strength of the security or does it have
other drawbacks? Can I still save the metadata with 'backup'?

Regards
Chris