Attachment 1511774 Details for Bug 1650246 – proposed enhancement patch for clevis

[patch] proposed enhancement patch for clevis

0001-clevis-encrypt-tang-ensure-key-derivation-key-is-ava.patch (text/plain), 991 bytes, created by Daniel Kopeček on 2018-12-05 15:58:56 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Daniel Kopeček

Created: 2018-12-05 15:58:56 UTC

Size: 991 bytes

patch

obsolete

>From 8b707e8bfcbfd073579ee553b982b4784490f5ea Mon Sep 17 00:00:00 2001
>From: Daniel Kopecek <dkopecek@redhat.com>
>Date: Wed, 5 Dec 2018 13:18:59 +0100
>Subject: [PATCH] clevis-encrypt-tang: ensure key derivation key is available
> before encryption
>
>---
> clevis-11/src/pins/tang/clevis-encrypt-tang | 6 +++++-
> 1 file changed, 5 insertions(+), 1 deletion(-)
>
>diff --git a/clevis-11/src/pins/tang/clevis-encrypt-tang b/clevis-11/src/pins/tang/clevis-encrypt-tang
>index e65a7d1..7fc55ca 100755
>--- a/clevis-11/src/pins/tang/clevis-encrypt-tang
>+++ b/clevis-11/src/pins/tang/clevis-encrypt-tang
>@@ -114,7 +114,11 @@ elif [ "$thp" != "any" ] && \
> fi
> 
> ### Perform encryption
>-enc=`jose jwk use -i- -r -u deriveKey -o- <<< "$jwks"`
>+if ! enc=`jose jwk use -i- -r -u deriveKey -o- <<< "$jwks"`; then
>+    echo "Key derivation key not available!" >&2
>+    exit 1
>+fi
>+
> jose fmt -j "$enc" -Og keys -A || enc="{\"keys\":[$enc]}"
> 
> for jwk in `jose fmt -j- -Og keys -Af- <<< "$enc"`; do
>-- 
>2.13.6
>

Actions: View | Diff

Attachments on bug 1650246: 1511663 | 1511774