diff options
| author | koverstreet <kent.overstreet@gmail.com> | 2024-12-03 22:41:13 -0500 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2024-12-03 22:41:13 -0500 |
| commit | 077677e61cf597c4e29c83296b1c5409cc0947b2 (patch) | |
| tree | 5f8d31b8a2a71495aba229573a58c00d000e1dc1 /c_src/cmd_key.c | |
| parent | a17e2ca95c8698e36068ac09275ce5932e63cef2 (diff) | |
| parent | 45468a9a6f866a81f51782e3f91e24732576f5c9 (diff) | |
Merge pull request #329 from ticpu/set-passphrase
Fix set-passphrase on --no_passphrase FS
Diffstat (limited to 'c_src/cmd_key.c')
| -rw-r--r-- | c_src/cmd_key.c | 26 |
1 files changed, 10 insertions, 16 deletions
diff --git a/c_src/cmd_key.c b/c_src/cmd_key.c index adb0ac8d..ac8a94a8 100644 --- a/c_src/cmd_key.c +++ b/c_src/cmd_key.c @@ -104,24 +104,19 @@ int cmd_set_passphrase(int argc, char *argv[]) if (IS_ERR(c)) die("Error opening %s: %s", argv[1], bch2_err_str(PTR_ERR(c))); - struct bch_sb_field_crypt *crypt = bch2_sb_field_get(c->disk_sb.sb, crypt); + struct bch_sb *sb = c->disk_sb.sb; + struct bch_sb_field_crypt *crypt = bch2_sb_field_get(sb, crypt); if (!crypt) die("Filesystem does not have encryption enabled"); - struct bch_encrypted_key new_key; - new_key.magic = BCH_KEY_MAGIC; - - int ret = bch2_decrypt_sb_key(c, crypt, &new_key.key); + struct bch_key key; + int ret = bch2_decrypt_sb_key(c, crypt, &key); if (ret) die("Error getting current key"); char *new_passphrase = read_passphrase_twice("Enter new passphrase: "); - struct bch_key passphrase_key = derive_passphrase(crypt, new_passphrase); - if (bch2_chacha_encrypt_key(&passphrase_key, __bch2_sb_key_nonce(c->disk_sb.sb), - &new_key, sizeof(new_key))) - die("error encrypting key"); - crypt->key = new_key; + bch_crypt_update_passphrase(sb, crypt, &key, new_passphrase); bch2_revoke_key(c->disk_sb.sb); bch2_write_super(c); @@ -142,18 +137,17 @@ int cmd_remove_passphrase(int argc, char *argv[]) if (IS_ERR(c)) die("Error opening %s: %s", argv[1], bch2_err_str(PTR_ERR(c))); - struct bch_sb_field_crypt *crypt = bch2_sb_field_get(c->disk_sb.sb, crypt); + struct bch_sb *sb = c->disk_sb.sb; + struct bch_sb_field_crypt *crypt = bch2_sb_field_get(sb, crypt); if (!crypt) die("Filesystem does not have encryption enabled"); - struct bch_encrypted_key new_key; - new_key.magic = BCH_KEY_MAGIC; - - int ret = bch2_decrypt_sb_key(c, crypt, &new_key.key); + struct bch_key key; + int ret = bch2_decrypt_sb_key(c, crypt, &key); if (ret) die("Error getting current key"); - crypt->key = new_key; + bch_crypt_update_passphrase(sb, crypt, &key, NULL); bch2_write_super(c); bch2_fs_stop(c); |