From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1O9aC5-0000jg-F8 for garchives@archives.gentoo.org; Wed, 05 May 2010 08:43:01 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 749A7E079C; Wed, 5 May 2010 08:42:30 +0000 (UTC) Received: from zion.lichtfels.com (zion.lichtfels.com [88.198.33.170]) by pigeon.gentoo.org (Postfix) with ESMTP id 291FBE079C for ; Wed, 5 May 2010 08:42:30 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by zion.lichtfels.com (Postfix) with ESMTP id E5C44184001; Wed, 5 May 2010 10:42:28 +0200 (CEST) Received: from zion.lichtfels.com ([127.0.0.1]) by localhost (zion [127.0.0.1]) (amavisd-maia, port 10024) with LMTP id 12694-05; Wed, 5 May 2010 10:42:27 +0200 (CEST) Received: from [172.32.99.12] (mail.oops.co.at [213.129.238.225]) by zion.lichtfels.com (Postfix) with ESMTPA id 5B9B4184003; Wed, 5 May 2010 10:42:27 +0200 (CEST) Message-ID: <4BE12F73.2080708@xunil.at> Date: Wed, 05 May 2010 10:42:27 +0200 From: "Stefan G. Weichinger" Organization: oops! User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.1.9) Gecko/20100410 Lightning/1.0b2pre Thunderbird/3.0.4 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 To: gentoo-user@lists.gentoo.org CC: Daniel Troeder Subject: Re: [gentoo-user] Re: Kernel upgrade and now LUKS failure. References: <4BDFF195.9070404@xunil.at> <4BE05BA3.1000509@xunil.at> <4BE07570.7020305@xunil.at> <4BE090A5.9080804@admin-box.com> <4BE0F71D.7080907@xunil.at> <4BE125AB.1030105@admin-box.com> In-Reply-To: <4BE125AB.1030105@admin-box.com> X-Enigmail-Version: 1.0.1 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-Virus-Scanned: amavisd-maia at lichtfels.com X-Archives-Salt: b3f7a199-934e-4b04-b3ad-7dcc028b5d6c X-Archives-Hash: 02664bd66ad52ca9f29f11697f4041a5 Am 05.05.2010 10:00, schrieb Daniel Troeder: > That is a message from cryptsetup. As you are using openssl to get > the key, I think the problem might be there. ok .... > lvcreate -n crypttest -L 100M vg0 KEY=`tr -cd [:graph:] < > /dev/urandom | head -c 79` echo $KEY | openssl aes-256-ecb > > verysekrit.key openssl aes-256-ecb -d -in verysekrit.key # (aha :) > openssl aes-256-ecb -d -in verysekrit.key | cryptsetup -v --cipher > aes-cbc-plain --key-size 256 luksFormat /dev/vg0/crypttest openssl > aes-256-ecb -d -in verysekrit.key | cryptsetup luksOpen > /dev/vg0/crypttest decryptedtest cryptsetup luksClose crypttest # (i > couldn't close it... don't know why...) > > The key that cryptsetup is given to decrypt the partition is created > by openssl from the file. Please check the output of $ openssl > aes-256-ecb -d -in verysekrit.key under both kernel - it should be > identical. At first, thank you for your time and work! Tried that. I have to admit that I don't know the decryption password ... but as far as I understand it should be the same as the unix-password of the user sgw. pam_mount.so should read it when I log in, correct? With this password I get a "bad decrypt" so this explains why it fails. Please let me repeat/point out that it is the same for 3 kernels (2.6.32-r1, 2.6.33-r[12] ... ), so I should change the subject to stay correct ... > BTW: You'll get your error message if you run: $ echo > notmykey | cryptsetup luksOpen /dev/vg0/crypttest decryptedtes Yes, correct. - I really wonder what the reason is ... should I downgrade openssl? Thanks Stefan