a way to specify a specific scsi number at bioctl?

2009-10-19 Thread elias r.
Hi, I've got a small server at my place which is running OpenBSD 4.5 on an eeebox. The box has an internal card reader which is identified as sd0, then i've got /usr, /var and /home on a crypto-softraid device sd1 (bioctl -c C) and also an external backup disk (sd2) which has also an encrypte

bioctl crypto passphrase file?

2009-10-19 Thread elias r.
Is there way to get the passphrase for softraid-crypto out of a file? greetings!

Re: bioctl crypto passphrase file?

2009-10-19 Thread elias r.
Am 10/19/09 5:05 PM, schrieb Jacob Yocom-Piatt: elias r. wrote: Is there way to get the passphrase for softraid-crypto out of a file? greetings! do think about this: it seems to defeat the entire purpose of disk crypto to have the passphrase stored in a file, unless i'm missing some

Re: bioctl crypto passphrase file?

2009-10-19 Thread elias r.
Am 10/19/09 5:05 PM, schrieb Jacob Yocom-Piatt: elias r. wrote: Is there way to get the passphrase for softraid-crypto out of a file? greetings! do think about this: it seems to defeat the entire purpose of disk crypto to have the passphrase stored in a file, unless i'm missing some

Re: a way to specify a specific scsi number at bioctl?

2009-10-21 Thread elias r.
Am 10/20/2009 11:31 AM, schrieb Joachim Schipper: On Mon, Oct 19, 2009 at 02:12:30PM +0200, elias r. wrote: Hi, I've got a small server at my place which is running OpenBSD 4.5 on an eeebox. The box has an internal card reader which is identified as sd0, then i've got /usr, /var and

Re: bioctl crypto passphrase file?

2009-10-21 Thread elias r.
hum, nobody's got an answer? is there maybe a way via the shell pipelining to read the passphrase from a file and write it to stdin? should this work?: bioctl -c C -l /dev/wd0a softraid0 < pass.keyfile greetings! Am 10/19/2009 04:03 PM, schrieb elias r.: Is there way to

Re: bioctl crypto passphrase file?

2009-10-21 Thread elias r.
Am 10/21/2009 03:43 PM, schrieb Alexander Hall: elias r. wrote: hum, nobody's got an answer? is there maybe a way via the shell pipelining to read the passphrase from a file and write it to stdin? should this work?: bioctl -c C -l /dev/wd0a softraid0< pass.keyfile If will by def

Re: bioctl crypto passphrase file?

2009-10-21 Thread elias r.
Am 10/21/2009 03:43 PM, schrieb Alexander Hall: elias r. wrote: hum, nobody's got an answer? is there maybe a way via the shell pipelining to read the passphrase from a file and write it to stdin? should this work?: bioctl -c C -l /dev/wd0a softraid0< pass.keyfile If will by def

Re: bioctl crypto passphrase file?

2009-10-21 Thread elias r.
Am 10/21/2009 04:18 PM, schrieb Joachim Schipper: On Wed, Oct 21, 2009 at 03:55:34PM +0200, elias r. wrote: Am 10/21/2009 03:43 PM, schrieb Alexander Hall: elias r. wrote: hum, nobody's got an answer? is there maybe a way via the shell pipelining to read the passphrase >from a

Re: bioctl crypto passphrase file?

2009-10-21 Thread elias r.
Am 10/21/2009 04:47 PM, schrieb Ted Unangst: You have the source to bioctl On Wed, Oct 21, 2009 at 9:52 AM, elias r. wrote: Am 10/21/2009 03:43 PM, schrieb Alexander Hall: elias r. wrote: hum, nobody's got an answer? is there maybe a way via the shell pipelining to rea

Re: bioctl crypto passphrase file?

2009-10-21 Thread elias r.
Am 10/21/2009 05:11 PM, schrieb Marco Peereboom: I am working on a diff that will do this right. So hang on. On Wed, Oct 21, 2009 at 03:52:47PM +0200, elias r. wrote: Am 10/21/2009 03:43 PM, schrieb Alexander Hall: elias r. wrote: hum, nobody's got an answer? is there maybe a way vi

Re: bioctl crypto passphrase file?

2009-10-21 Thread elias r.
Am 10/21/2009 04:47 PM, schrieb Ted Unangst: You have the source to bioctl On Wed, Oct 21, 2009 at 9:52 AM, elias r. wrote: Am 10/21/2009 03:43 PM, schrieb Alexander Hall: elias r. wrote: hum, nobody's got an answer? is there maybe a way via the shell pipelining to rea

Re: bioctl crypto passphrase file?

2009-10-22 Thread elias r.
thank you :) I'll update it later that day! one question: why did you choose tty over stdin? would using stdin be a security flaw? Am 10/22/09 12:36 AM, schrieb Marco Peereboom: It's in. On Wed, Oct 21, 2009 at 05:24:06PM +0200, elias r. wrote: Am 10/21/2009 05:11 PM, sch

Re: bioctl crypto passphrase file?

2009-10-22 Thread elias r.
Am 10/22/09 9:27 PM, schrieb Ted Unangst: On Thu, Oct 22, 2009 at 3:01 PM, elias r. wrote: thank you :) I'll update it later that day! one question: why did you choose tty over stdin? would using stdin be a security flaw? As you discovered, making it read from tty makes it harder for p

Re: Encrypting /home on OpenBSD Laptops

2009-11-13 Thread elias r.
Am 11/01/2009 09:36 AM, schrieb Joachim Schipper: On Sat, Oct 31, 2009 at 09:52:06AM -0400, Brad Tilley wrote: On Sat, Oct 31, 2009 at 9:30 AM, Joachim Schipper wrote: [My (Joachim's) message, snipped by Brat: Encrypting just /home is dangerous. Do you know where vi(1) keeps its backup files?

Re: Encrypting /home on OpenBSD Laptops

2009-11-13 Thread elias r.
Am 11/13/2009 03:12 PM, schrieb Robert: On Fri, 13 Nov 2009 14:50:40 +0100 "elias r." wrote: Especially because OpenBSD isn't about 90% solutions i still don't understand why nobody seems to be interested in finding a solution for encrypting entire / (except sth like the

openbsd programming resources?

2009-11-13 Thread elias r.
Hey out there! I started thinking about improving my C-programming knowledge, especially towards OpenBSD (and unix in general) -programming as well as secure programming. Does anyone have a hint which resources are worth reading (e.g. which books about the unix api?) Hope this isn't worst q

Re: Encrypting /home on OpenBSD Laptops

2009-11-13 Thread elias r.
Am 11/13/2009 03:09 PM, schrieb Otto Moerbeek: On Fri, Nov 13, 2009 at 02:50:40PM +0100, elias r. wrote: Am 11/01/2009 09:36 AM, schrieb Joachim Schipper: On Sat, Oct 31, 2009 at 09:52:06AM -0400, Brad Tilley wrote: On Sat, Oct 31, 2009 at 9:30 AM, Joachim Schipper wrote: [My (Joachim&#

Re: Encrypting /home on OpenBSD Laptops

2009-11-13 Thread elias r.
Am 11/13/2009 03:07 PM, schrieb Brad Tilley: On Fri, Nov 13, 2009 at 8:50 AM, elias r. wrote: Especially because OpenBSD isn't about 90% solutions i still don't understand why nobody seems to be interested in finding a solution for encrypting entire / If you are only concerned abo

Re: openbsd programming resources?

2009-11-13 Thread elias r.
Am 11/13/2009 03:57 PM, schrieb Josh Grosse: On Fri, 13 Nov 2009 15:35:46 +0100, elias r. wrote ...Does anyone have a hint which resources are worth reading (e.g. which books about the unix api?) Hope this isn't worst question ever (yeah, i know internet searches)... I'd simply

Re: openbsd programming resources?

2009-11-13 Thread elias r.
Am 11/13/2009 04:30 PM, schrieb Darrin Chandler: On Fri, Nov 13, 2009 at 03:35:46PM +0100, elias r. wrote: Hey out there! I started thinking about improving my C-programming knowledge, especially towards OpenBSD (and unix in general) -programming as well as secure programming. Does anyone have

unable to delete bioctl-dev...

2009-11-17 Thread elias r.
Hello! i've still got some problems with the crypto on my external hard-drive. the automatic powermanagement of my external Western Digital Desktop Drive makes some problems in combination with bioctl i think, at least i can't access the bioctl-device after the hd had been in sleep-mode... (e

Re: softraid init at startup

2009-11-17 Thread elias r.
Am 11/17/2009 05:08 PM, schrieb LEVAI Daniel: Hi! I have a crypto softraid device and now I set it up at every boot in rc.local with a bioctl&& fsck&& mount combination. Is there any standard way of setting up softraid0 devices at boot, or everyone use their own implementation (eg. in /etc/rc

Re: unable to delete bioctl-dev...

2009-11-17 Thread elias r.
g. On Nov 17, 2009, at 12:45 PM, "elias r." wrote: Hello! i've still got some problems with the crypto on my external hard-drive. the automatic powermanagement of my external Western Digital Desktop Drive makes some problems in combination with bioctl i think, at least i can&#

Re: unable to delete bioctl-dev...

2009-11-17 Thread elias r.
ah, ok, sorry! Am 11/18/2009 12:38 AM, schrieb Marco Peereboom: no i know about this On Wed, Nov 18, 2009 at 12:10:41AM +0100, elias r. wrote: ok, as i can't find it in the bug tracker, i assume i should file a bug report? Am 11/18/2009 12:00 AM, schrieb Ted Unangst: This is a b