Commit Graph

11 Commits

Author SHA1 Message Date
Pawel Jakub Dawidek
ba196edbd2 By default backup geli metadata to a file. It is quite critical 512 bytes,
once it is lost, all data is gone.

Option '-B none' can by used to prevent backup. Option '-B path' can be
used to backup metadata to a different file than the default, which is
/var/backups/<prov>.eli.

The 'geli init' command also prints backup file location and gives short
procedure how to restore metadata.

The 'geli setkey' command now warns that even after passphrase change or keys
update there could be version of the master key encrypted with old
keys/passphrase in the backup file.

Add regression tests to verify that new functionality works as expected.

Update other regression tests so they don't create backup files.

Reviewed by:	keramida, rink
Dedicated to:	a friend who lost 400GB of his live by accidentally overwritting geli metadata
MFC after:	2 weeks
2008-08-29 18:10:18 +00:00
Pawel Jakub Dawidek
53c0785606 Hide geli warnings about sector size beeing bigger than the page size when
doing regression testing.
2007-10-26 08:31:11 +00:00
Pawel Jakub Dawidek
864cba9669 Add support for Camellia encryption algorithm.
PR:		kern/113790
Submitted by:	Yoshisato YANAGISAWA <yanagisawa@csg.is.titech.ac.jp>
Approved by:	re (bmah)
2007-09-01 06:33:02 +00:00
Pawel Jakub Dawidek
b58ab5f02a Move readonly.t regression tests file to where it belongs.
I accidentally added it to a wrong directory.
2006-09-19 11:28:06 +00:00
Pawel Jakub Dawidek
0608d9863a Add regression tests for 'geli configure' subcommand.
MFC after:	1 week
2006-09-16 10:44:33 +00:00
Pawel Jakub Dawidek
8091e0f54b Add regression tests for geli(8) authentication feature.
Supported by:	Wheel Sp. z o.o. (http://www.wheel.pl)
2006-06-06 06:46:51 +00:00
Pawel Jakub Dawidek
43b48559c5 - Update regression tests after recent changes.
- Verify various sector sizes.
2006-06-06 06:44:19 +00:00
Pawel Jakub Dawidek
16bde23e84 For some time now, -i and -P options are mutually exclusive, there's even
a regression test init-i-P.t which asserts this, but it looks I forgot to
update nokey.t regression test.

MFC after:	1 day
2006-05-01 09:12:52 +00:00
Pawel Jakub Dawidek
49fa8b70c6 Add regression test which verifies that options -P and -i cannot be used
together.

MFC after:	3 days
2006-02-12 02:07:56 +00:00
Pawel Jakub Dawidek
2867c5c8b0 Add regression tests which will verify that giving no key components for
init/attach/setkey subcommands is really impossible.

MFC after:	3 days
2006-02-01 15:17:45 +00:00
Pawel Jakub Dawidek
229e613662 Add regression tests (121 in total) for GEOM_ELI class.
To use them, run:

	# prove /usr/src/tools/regression/geom_eli

Sponsored by:	Wheel Sp. z o.o.
		http://www.wheel.pl
MFC after:	1 week
2005-07-27 22:27:30 +00:00