[Bug 283043] gptboot fails to read the encrypted rootfs if geli authentication (geli -a) is used

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=283043

John Baldwin <jhb@FreeBSD.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |allanjude@FreeBSD.org

--- Comment #3 from John Baldwin <jhb@FreeBSD.org> ---
BTW, we don't perform any MAC on data read from a GELI volume, this patch would
just ensure we get the right key to decrypt the data.  This is not fully ideal
but is "ok" for a read-only boot loader.  However, GELI has gained write
support in the boot loader at some point and we need to reject writes on a
volume with auth support unless we implement proper auth support in geliboot.

-- 
You are receiving this mail because:
You are the assignee for the bug.