Re: GBDE - Destroy command not working

From: Dany Nativel (dany_list_at_natzo.com)
Date: 02/20/04

  • Next message: Tony Frank: "Re: Boot loop in FreeBSD 5.2-RELEASE after install"
    Date: Thu, 19 Feb 2004 22:00:39 -0500
    To: freebsd-questions@freebsd.org
    
    

    It didn't work but after several other attempts. I've been able to run
    it using a specific combination.

    So to summarize, in my case, I can only run "destroy" :
    - using external lock files (-l parameter mandatory)
    - with the current key only (no -n -1 parameter to say destroy them all)
    - using /dev/xxx (xxx only doesn't work)

    First, what's not working :
    --> Without detached lockfile
    # kldload geom_bde
    # gbde init /dev/da0 -i
    # gbde attach da0
    # gbde detach da0
    # gbde destroy da0
    Enter passphrase:
    gbde: read: Inappropriate ioctl for device

    and also

    # gbde destroy /dev/da0
    Enter passphrase:
    gbde: No -L option and no space in sector 0 for lockfile

    --> With detached lockfile
    # gbde destroy da0 -l /etc/mykey
    Enter passphrase:
    gbde: Error 22 decrypting lock

    and then

    # gbde destroy /dev/da0 -l /etc/mykey
    Enter passphrase:
    Wrote key 0 at 5371894

    And it worked for the current key.

    I also tried to use the -n x, --n x parameter (with x= -1, 1) but it
    never worked!

    At one point I even received a
    Fatal trap 12: page fault while in kernel mode (many of them in fact)

    Dany Nativel wrote:

    > I've been playing around with GBDE under 5.2RC2-1. It's a fantastic
    > encrypted FS.
    > Following the man page, I've tried to use the destroy command but
    > without success.
    >
    > Here is what I did to create the encrypted FS (for this test I didn't
    > use the /dev/random to fill-up the disc).
    >
    > # kldload geom_bde
    > # gbde init /dev/da0 -i
    > # gbde setkey /dev/da0 -n 2
    > # gbde attach /dev/da0 # newfs /dev/da0.bde
    > # mount /dev/da0.bde /mnt/usbkey
    > --> use the FS, works fine
    > # umount /mnt/usbkey
    > # gbde detach da0
    >
    > Then according to the man page I should use :
    > #gbde destroy da0 -n -1 to purge all keys but I get :
    > gbde: illegal option -- n
    >
    > so I changed to :
    > #gbde destroy da0 --n -1 and got :
    > gbde: read: Innapropriate ioctl for device
    >
    > so I changed to :
    > #gbde destroy /dev/da0 --n -1 and this time I get the password prompt
    > but it fails to destroy anything :
    > Enter passphrase:
    > Opened with key 0
    > gbde: No -L option and no space in sector 0 for lockfile
    >
    > Maybe I didn't understand the purpose of the this command. I thought
    > it was going to replace each lock key with some random data.
    > Can somebody explain me how to use the "destroy" command ?
    >
    > Thanks
    > Dany
    > _______________________________________________
    > freebsd-questions@freebsd.org mailing list
    > http://lists.freebsd.org/mailman/listinfo/freebsd-questions
    > To unsubscribe, send any mail to
    > "freebsd-questions-unsubscribe@freebsd.org"

    _______________________________________________
    freebsd-questions@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-questions
    To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"


  • Next message: Tony Frank: "Re: Boot loop in FreeBSD 5.2-RELEASE after install"

    Relevant Pages

    • GBDE - howto 2 factor auth?
      ... I've found a few placed where Poul-Henning Kamp mentions that gbde ... usb key and a text passphrase to ... information and run it through md5 to create a single text string that ... could be used on the command line with gbde and the -P/-p switches. ...
      (freebsd-questions)
    • gbde misconfiguration ?
      ... enter passphrase for Disk Encryption, ... Configuring Disk Encryption for NO. ... Attach Failed: attempt 1 of 3. ... I dont recall if I enabled gbde. ...
      (freebsd-questions)
    • GBDE - Destroy command not working
      ... I've been playing around with GBDE under 5.2RC2-1. ... but it fails to destroy anything: ... Maybe I didn't understand the purpose of the this command. ... was going to replace each lock key with some random data. ...
      (freebsd-questions)