Re: Re: Question regarding luksKillSlot/luksRemoveKey and duplicate keys

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Bill Hulbert wrote:

This issue was fixed with r41 in the maintainer's code at
http://code.google.com/p/cryptsetup/.  Not sure if those changes have made it
into the Ubuntu version yet or not though.

What was happening was the code was using the second passphrase to verify any
key-slot and then afterward checking to see if that key-slot was the same
key-slot as originally entered to remove - if it was it would pop out an error,
specifically the one you show above.

The changes basically disabled the key-slot you want to remove before doing the
passphrase verification so that key-slot won't be used for verification, and
then afterward re-enabling it before deleting it, pending a proper verification
of course.

Thanks a lot for this explanation. The new behavior definitely makes more sense and is consistent.

It seems that r41 did not make it into Ubuntu 9.04.

Regards, Peter.

---------------------------------------------------------------------
dm-crypt mailing list - http://www.saout.de/misc/dm-crypt/
To unsubscribe, e-mail: dm-crypt-unsubscribe@xxxxxxxx
For additional commands, e-mail: dm-crypt-help@xxxxxxxx


[Index of Archives]     [Device Mapper Devel]     [Fedora Desktop]     [ATA RAID]     [Fedora Marketing]     [Fedora Packaging]     [Fedora SELinux]     [Yosemite News]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux