system/freebsd-src
system/freebsd-src
1
0
Fork 0
mirror of https://github.com/freebsd/freebsd-src synced 2024-07-22 18:56:38 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

geli: Fix geli setkey -J for detached providers

Browse source 
Clear cached_passphrase before generating a new key, otherwise the
operation nonsensically tries to reuse the old passphrase.

PR:		254966
Pull Request:	https://github.com/freebsd/freebsd-src/pull/780
MFC after:	1 week
This commit is contained in:
Arjan de Vet 2023-08-28 10:54:18 -04:00 committed by Mark Johnston
parent f006023b22
commit 88d13bf337
1 changed files with 6 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
lib/geom/eli/geom_eli.c
View file

@ -1421,6 +1421,12 @@ eli_setkey_detached(struct gctl_req *req, const char *prov,
bcopy(mkey, mkeydst, sizeof(mkey));
explicit_bzero(mkey, sizeof(mkey));
/*
* The previous eli_genkey() set cached_passphrase, we do not want to
* use that for the new passphrase so always prompt for it
*/
explicit_bzero(cached_passphrase, sizeof(cached_passphrase));
/* Generate key for Master Key encryption. */
if (eli_genkey_single(req, md, key, true) == NULL) {
explicit_bzero(key, sizeof(key));