1
1
mirror of https://github.com/systemd/systemd-stable.git synced 2025-01-07 17:17:44 +03:00
systemd-stable/src/cryptsetup
Peter Cai b6d1be1642 cryptsetup-fido2: Try all FIDO2 key slots when opening LUKS volume
After #25268, it is now possible to check whether a credential
is present on a FIDO2 token without actually attempting to retrieve said
credential. However, when cryptsetup plugins are not enabled, the
fallback unlock routines are not able to make multiple attempts with
multiple different FIDO2 key slots.

Instead of looking for one FIDO2 key slot when trying to unlock, we now
attempt to use all key slots applicable.

Fixes #19208.

(cherry picked from commit e6319a102e)
(cherry picked from commit 892cb01c2b)
2023-01-27 09:46:47 +00:00
..
cryptsetup-tokens cryptsetup: fix build with -Db_ndebug=true 2022-11-08 00:09:18 +01:00
cryptsetup-fido2.c cryptsetup-fido2: Try all FIDO2 key slots when opening LUKS volume 2023-01-27 09:46:47 +00:00
cryptsetup-fido2.h cryptsetup-fido2: Try all FIDO2 key slots when opening LUKS volume 2023-01-27 09:46:47 +00:00
cryptsetup-generator.c Revert "cryptsetup: support keyfile-timeout for using a device as the key file" 2022-12-22 17:30:53 +01:00
cryptsetup-keyfile.c strv: make iterator in STRV_FOREACH() declaread in the loop 2022-03-19 08:33:33 +09:00
cryptsetup-keyfile.h cryptsetup: modify keyfile search logic to use read_file_full() too 2020-12-01 14:27:01 +01:00
cryptsetup-pkcs11.c cryptsetup: handle more gracefully if "keyslots" LUKS2 JSON header field is invalid 2021-09-28 16:47:08 +02:00
cryptsetup-pkcs11.h cryptsetup: add 'headless' parameter to skip password/pin query 2021-05-07 21:36:27 +01:00
cryptsetup-tpm2.c cryptsetup: add support for TPM2 pin 2022-03-15 21:17:00 +01:00
cryptsetup-tpm2.h cryptsetup: add support for TPM2 pin 2022-03-15 21:17:00 +01:00
cryptsetup.c cryptsetup-fido2: Try all FIDO2 key slots when opening LUKS volume 2023-01-27 09:46:47 +00:00
meson.build meson: move source file list for systemd-cryptsetup 2021-01-19 07:06:32 +09:00