[pkg-cryptsetup-devel] Bug#844050: cryptsetup: /lib/cryptsetup/scripts/decrypt_ssl throws away the key it has just decrypted

g1 g1pi at libero.it
Sat Nov 12 01:06:33 UTC 2016


Package: cryptsetup
Version: 2:1.6.6-5
Severity: normal

In /lib/cryptsetup/scripts/decrypt_ssl the relevant decryption command,
    /usr/bin/openssl enc -aes-256-cbc -d -salt -in $1 >/dev/null 2>&1
redirects output from openssl enc -d to /dev/null, rendering the script
useless except for checking the key can actually be decrypted.  I'm not sure
that was the intent.

Best regards,
	g.

-- System Information:
Debian Release: 8.6
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 3.16.0-4-686-pae (SMP w/1 CPU core)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages cryptsetup depends on:
ii  cryptsetup-bin         2:1.6.6-5
ii  debconf [debconf-2.0]  1.5.56
ii  dmsetup                2:1.02.90-2.2+deb8u1
ii  libc6                  2.19-18+deb8u6

Versions of packages cryptsetup recommends:
pn  busybox | busybox-static                <none>
pn  console-setup                           <none>
ii  initramfs-tools [linux-initramfs-tool]  0.120+deb8u2
ii  kbd                                     1.15.5-2

Versions of packages cryptsetup suggests:
ii  dosfstools              3.0.27-1
pn  keyutils                <none>
ii  liblocale-gettext-perl  1.05-8+b1

-- debconf information excluded



More information about the pkg-cryptsetup-devel mailing list