Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
Name: cryptctl | Distribution: openSUSE Tumbleweed |
Version: 2.4 | Vendor: openSUSE |
Release: 1.12 | Build date: Mon May 9 18:55:47 2022 |
Group: System/Management | Build host: reproducible |
Size: 8715277 | Source RPM: cryptctl-2.4-1.12.src.rpm |
Packager: https://bugs.opensuse.org | |
Url: https://www.suse.com/products/sles-for-sap | |
Summary: A utility for setting up LUKS-based disk encryption |
A disk encryption utility that helps setting up LUKS-based disk encryption using randomly generated keys, and keep all keys on a dedicated key server.
GPL-3.0-only
* Mon May 09 2022 Peter Varkoly <varkoly@suse.com> - Update to version 2.4: * (bsc#1186226) - (CVE-2019-18906) client side password hashing is equivalent to clear text password storage * Fix authentication on all places. * Fix sysconfig variable name. * First step to use plain text password instead of hashed password. * Move repository into the SUSE github organization * decorate readme with more usage instructions * in RPC server, if client comes from localhost, remember its ipv4 localhost address instead of ipv6 address * Test clear expired commands in TestDB_UpdateSeenFlag * tell a record to clear expired pending commands upon saving a command result; introduce pending commands RPC test case * avoid hard coding 127.0.0.1 in host ID of alive message test; let system administrator mount and unmount disks by issuing these two commands on key server. * Wed Jul 21 2021 Paolo Perego <paolo.perego@suse.com> - Fixed build errors adding a "go mod init" - Binaries are now compiled with PIE support - Also client service is symlinked so to avoid warnings * Wed Aug 19 2020 Dominique Leuenberger <dimstar@opensuse.org> - Use %{_udevrulesdir} instead of abusing %{_libexecdir}. * Mon Feb 03 2020 Dominique Leuenberger <dimstar@opensuse.org> - BuildRequire pkgconfig(systemd|udev) instead of systemd and udev: Allow OBS to shortcut through -mini flavors. - Name the rpmlintrc file according the policy: cryptctl-rpmlintrc. * Thu Nov 23 2017 rbrown@suse.com - Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468) * Mon Oct 23 2017 hguo@suse.com - Add previously missing systemd service cryptctl-client.service into RPM content, continue with bsc#1056082. * Mon Aug 28 2017 hguo@suse.com - Upgrade to upstream release 2.3 that brings a new feature to allow system administrators to issue mount/umount commands to client computers via key server. (bsc#1056082) * Wed Jun 07 2017 hguo@suse.com - Upgrade to upstream release 2.2 that brings important enhancements in effort of implementing fate#322979: * System administrator may now optionally turn off TLS certificate verification on KMIP server. Note that, certificate verification is enforced by default. * Improve handling of boolean answers from interactive command line. * Improve error handling in KMIP client. * Thu Jun 01 2017 hguo@suse.com - Upgrade to upstream release 2.1 that brings important enhancements in effort of implementing fate#322979: * Improve KMIP compatibility with key prefix names and proper serialisation of authentication header. * Fail over KMIP connection using a server list. * Destroy key on KMIP after its tracking record is erased from DB. * Thu May 11 2017 hguo@suse.com - Upgrade to upstream release 2.0 that brings a protocol evolution together with several new features: * Optionally utilise an external KMIP-v1.3 compatible service to store actual encryption key. * Optionally verify client identity before serving its key requests. * Password is hashed before transmitting over TLS-secured channel. * Fix an issue that previously allowed a malicious administrator to craft RPC request to overwrite files outside of key database. Implemented accordint to fate#322979 and fate#322293.
/etc/cryptctl /etc/cryptctl/servertls /usr/lib/systemd/system/cryptctl-auto-unlock@.service /usr/lib/systemd/system/cryptctl-client.service /usr/lib/systemd/system/cryptctl-server.service /usr/lib/udev/rules.d/99-cryptctl-auto-unlock.rules /usr/sbin/cryptctl /usr/sbin/rccryptctl-client /usr/sbin/rccryptctl-server /usr/share/doc/packages/cryptctl /usr/share/doc/packages/cryptctl/LICENSE /usr/share/fillup-templates/sysconfig.cryptctl-client /usr/share/fillup-templates/sysconfig.cryptctl-server /usr/share/man/man8/cryptctl.8.gz /var/lib/cryptctl
Generated by rpm2html 1.8.1
Fabrice Bellet, Sat Mar 15 00:10:20 2025