[Bug 218512] Geli arbitrarily prevents setting passphrases

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Fri Apr 21 20:06:43 UTC 2017


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=218512

--- Comment #11 from Allan Jude <allanjude at FreeBSD.org> ---
(In reply to Frank from comment #10)
We will be working on extended the GELI metadata to be able to support holding
two different numbers of iterations, to properly solve this problem going
forward.

I am not sure what to do in the mean time, if that means blocking a set key
operation with an explicit -i, as there may be an existing key using the
already stored number of iterations, and changing the value in the metadata
will make the existing key unusable. Or if we allow the new key to be set, and
do not store the number of iterations, they key is unusable.

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the freebsd-geom mailing list