Fedora

ecryptfs-utile-68 can't wrap long passphrase

Bug #316425 reported by sense
2
Affects Status Importance Assigned to Milestone
eCryptfs
Fix Released
High
Dustin Kirkland 
Fedora
Fix Released
Medium

Bug Description

I try to complie the ecryptfs-utile-68 in ubunt 8.10 x86_64. Every thing in configure and make seems to be ok, except it said "Nothing to be done for `all-am'." after make.
When I finished "make install", I figure out ecryptfs-wrap-passphrase, ecryptfs-rewrap-passphrase and ecryptfs-unwrap-passphrase can't handle the long passphrase (Some thing like ecryptfs-setup-private auto created).
In /var/log/syslog I finded some logged txt like:

Jan 12 23:44:44 ubuntu ecryptfs-wrap-passphrase: ecryptfs_wrap_passphrase: PK11_CipherOp() error; SECFailure = [-1]; PORT_GetError() = [-8191]
Jan 12 23:45:46 ubuntu ecryptfs-wrap-passphrase: Error attempting to parse .ecryptfsrc file; rc = [-5]

And I try the short passphrase wrap (some like "abcd"), it's ok.

See original description
Revision history for this message
In , Sachin (sachin-redhat-bugs) wrote :

Description of problem:

While executing the ecryptfs-setup-private I receive following error.

ecryptfs-insert-wrapped-passphrase-into-keyring ecryptfs-setup-private ecryptfs-wrap-passphrase
[sachin@fedora-rawhide ~]$ ecryptfs-setup-private
Enter your login passphrase:
Enter your mount passphrase [leave blank to generate one]:

************************************************************************
YOU SHOULD RECORD THIS MOUNT PASSPHRASE AND STORE IN A SAFE LOCATION:
5f815da4d2fe55f618f3b708703f6c2f
THIS WILL BE REQUIRED IF YOU NEED TO RECOVER YOUR DATA AT A LATER TIME.
************************************************************************

Warning: Using default salt value (undefined in ~/.ecryptfsrc)
Error: Wrapping passphrase failed [-5]
Info: Check the system log for more information from libecryptfs
ERROR: Could not wrap passphrase

from /var/log/messages
----------------------

Jan 12 15:54:05 localhost ecryptfs-wrap-passphrase: Error attempting to parse .ecryptfsrc file; rc = [-5]
Jan 12 15:54:06 localhost ecryptfs-wrap-passphrase: ecryptfs_wrap_passphrase: PK11_CipherOp() error; SECFailure = [-1]; PORT_GetError() = [-8191]

Version-Release number of selected component (if applicable):

ecryptfs-utils-68-0.fc11.i386

How reproducible:

Steps to Reproduce:
1.
2.
3.

Actual results:

Expected results:

Additional info:

sense (opaperjam)
description: updated
Revision history for this message
In , Michal (michal-redhat-bugs) wrote :

Created attachment 330461
fix nss passphrase (un)wrapping problems

you'll need to apply werror1 patch if you want to apply this cleanly with fuzz=0

Revision history for this message
In , Michal (michal-redhat-bugs) wrote :

Created attachment 330462
make most of the code compatible with -Werror

this also fixes some minor problems or potential bugs

Revision history for this message
Dustin Kirkland  (kirkland) wrote :

Fixes committed to upstream source repository. Will be in the -70 release.

:-Dustin

Changed in ecryptfs:
importance: Undecided → High
status: New → Fix Committed
Revision history for this message
Dustin Kirkland  (kirkland) wrote :

Fixed in ecryptfs-utils-70.

:-Dustin

Changed in ecryptfs:
assignee: nobody → kirkland
status: Fix Committed → Fix Released
Revision history for this message
In , Michal (michal-redhat-bugs) wrote :

fixed since ecryptfs-utils-70-1

Bug Watch Updater (bug-watch-updater)
Changed in fedora:
importance: Unknown → Medium
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.