Changelog for cryptsetup-1.0.7-18.1.x86_64.rpm :
Wed Jun 2 14:00:00 2010 cdenglerAATTnovell.com
- add the default keymap to the initrd if boot.crypto is used

Wed Oct 7 14:00:00 2009 lnusselAATTsuse.de
- boot.crypto:

* /lib/udev/vol_id no longer exists, use blkid instead

* add space at end of password prompt in initrd

* fix autodetetection of root on LVM on LUKS (bnc#528474)

Tue Oct 6 14:00:00 2009 lnusselAATTsuse.de
- boot.crypto: more changes as agreed with the Debian maintainer:

* rename keyscript variable CRYPTTAB_DEVICE to CRYPTTAB_SOURCE

* export list of options in CRYPTTAB_OPTIONS

Tue Sep 29 14:00:00 2009 lnusselAATTsuse.de
- replace patch that quits on EOF with upstream version

Fri Sep 25 14:00:00 2009 lnusselAATTsuse.de
- actually hash=plain can be used to get raw keyscript output so
remove keyscript_raw again

Thu Sep 24 14:00:00 2009 lnusselAATTsuse.de
- boot.crypto:

* don\'t use hashalot if keyfile is specified

* to comply with Debian, keyscripts must only output the password.
In order to allow keyscript to use different methods to retrieve
a key, add a keyscript_rawkey option.
- cryptsetup:

* When reading no single byte for the key abort.

Mon Sep 21 14:00:00 2009 lnusselAATTsuse.de
- boot.crypto:

* fix test for keyfile (bnc#540363)

Wed Sep 16 14:00:00 2009 lnusselAATTsuse.de
- boot.crypto:

* 2.6.31 requires the cryptomgr module in the initrd (bnc#535013)

Tue Sep 15 14:00:00 2009 lnusselAATTsuse.de
- boot.crypto:

* uppercase variables exported to keyscript in anticipation of
Debian adopting the implementation

Fri Sep 4 14:00:00 2009 lnusselAATTsuse.de
- boot.crypto:

* fix setting options without parameter

* infinite retries in initrd

* tries=0 means infinite tries

* implement retries in the script to make it work with keyscripts and non-luks volumes

* keyscript support (fate#302628)

* remove the option to fsck the fs as it actually never worked

* fix initrd option parsing

Thu Aug 27 14:00:00 2009 lnusselAATTsuse.de
- new cryptsetup version 1.0.7

* Allow removal of last slot in luksRemoveKey and luksKillSlot.

* Reject unsupported --offset and --skip options for luksFormat and update man page.

* Various man page fixes.

* Set UUID in device-mapper for LUKS devices.

* Retain readahead of underlying device.

* Display device name when asking for password.

* Check device size when loading LUKS header. Remove misleading error message later.

* Add error hint if dm-crypt mapping failed.

* Use better error messages if device doesn\'t exist or is already used by other mapping.

* Fix make distcheck.

* Check if all slots are full during luksAddKey.

* Fix segfault in set_error.

* Code cleanups, remove precompiled pot files, remove unnecessary files from po directory

* Fix uninitialized return value variable in setup.c.

* Code cleanups. (thanks to Ivan Stankovic)

* Fix wrong output for remaining key at key deletion.

* Allow deletion of key slot while other keys have the same key information.

* Add missing AM_PROG_CC_C_O to configure.in

* Remove duplicate sentence in man page.

* Wipe start of device (possible fs signature) before LUKS-formatting.

* Do not process configure.in in hidden directories.

* Return more descriptive error in case of IO or header format error.

* Use remapping to error target instead of calling udevsettle for temporary crypt device.

* Check device mapper communication and warn user if device-mapper support missing in kernel.

* Fix signal handler to properly close device.

* write_lseek_blockwise: declare innerCount outside the if block.

* add -Wall to the default CFLAGS. fix some signedness issues.

* Error handling improvement.

* Add non-exclusive override to interface definition.

* Refactor key slot selection into keyslot_from_option.

Wed Aug 19 14:00:00 2009 lnusselAATTsuse.de
- boot.crypto:

* set infinite timeout during 2nd stage (bnc#456004)

Mon Jul 13 14:00:00 2009 lnusselAATTsuse.de
- boot.crypto:

* wait for device before calling luksOpen (bnc#521446)

Wed Jun 17 14:00:00 2009 cooloAATTnovell.com
- fix link order

Thu Jun 11 14:00:00 2009 cooloAATTnovell.com
- fix compile with glibc 2.10

Thu Apr 2 14:00:00 2009 lnusselAATTsuse.de
- boot.crypto:

* resolve symlinks when searching for loop devices (bnc#490170)

* add extra man page tags to avoid FIXME output of docbook

* don\'t pipe password if there\'s only one device to open

* update copyright information

* fix spelling and actually stop in pre_stop_hook

* introduce initrd option in crypttab (bnc#465711)

Fri Mar 6 13:00:00 2009 lnusselAATTsuse.de
- boot.crypto:

* print dm name instead of physdev (bnc#456664)

* make prompt work with infinite timeout (bnc#466405)

* implement pre-stop hook (bnc#481870)

* remove hardcoded loop device number limit (bnc#481872)

* Warn if using a non-absolute path for physdev in crypttab
- hashalot: compute hash of empty passphrase if not interactive
(bnc#475135)

Tue Mar 3 13:00:00 2009 lnusselAATTsuse.de
- fix boot.crypto doesn\'t care on tries flag in crypttab (bnc#480741)
- mkinitrd scripts now included in boot.crypto git

Thu Feb 26 13:00:00 2009 mhopfAATTsuse.de
- Fix segfault with oversized hashes (bnc #476290).

Wed Feb 25 13:00:00 2009 jsmeixAATTsuse.de
- Fixed initrd LUKS password annoyance in mkinitrd-boot.sh and
mkinitrd-setup.sh when the same password is used for all
partitions. In this case the password is now only asked
once (bnc#465711).

Sun Dec 14 13:00:00 2008 bwalleAATTsuse.de
- Fix LUKS root partition residing on a soft raid (bnc#358341)

Mon Nov 3 13:00:00 2008 mkoenigAATTsuse.de
- boot.crypto-early: explicitly start before boot.localfs

Fri Sep 12 14:00:00 2008 mkoenigAATTsuse.de
- branch off shlib to subpackage libcryptsetup0
- rename cryptsetup-devel to libcryptsetup-devel

Wed Sep 3 14:00:00 2008 hareAATTsuse.de
- Call mkinitrd_setup during %post and %postun (bnc#413709)

Wed Aug 20 14:00:00 2008 mkoenigAATTsuse.de
- enable SELinux support (fate#303662)

Wed Aug 13 14:00:00 2008 mkoenigAATTsuse.de
- boot.crypto:

* Fix init script tags

Fri Aug 8 14:00:00 2008 mkoenigAATTsuse.de
- boot.crypto:

* Provide some reasonable exit status (bnc#409502)

Wed Jul 23 14:00:00 2008 hareAATTsuse.de
- Include mkinitrd scriptlets.

Wed Jul 23 14:00:00 2008 mkoenigAATTsuse.de
- use /sbin/udevadm settle instead of /sbin/udevsettle (bnc#404875)

Tue May 6 14:00:00 2008 mkoenigAATTsuse.de
- load loop module in boot.crypto-early as it might be needed.
It is previously initially loaded by boot.localfs.

Wed Apr 9 14:00:00 2008 mkoenigAATTsuse.de
- add support for boot.crypto-early (bnc#355824)
needed to encrypt block devices for usage with LVM or MD
adds a new option \'noearly\' for crypttab, which will skip
the device in boot.crypto-early.

Wed Feb 27 13:00:00 2008 mkoenigAATTsuse.de
- update to svn revision 46:

* fix out of bound for key index in delKey (bnc#360041)

* Add typo fixes to the cryptsetup.8 manpage

* Add key-slot patch

* Remove O_EXCL requirement for certain LUKS operations

* mention luksKillSlot in the manpage

Mon Feb 4 13:00:00 2008 lnusselAATTsuse.de
- boot.crypto:

* check for columns of terminal (bnc#337614)

* enhance crypttab manpage (bnc#351061)

* check for fs_passno (bnc#345339)

Wed Jan 9 13:00:00 2008 lnusselAATTsuse.de
- upgrade to svn revision 42 which includes previous patches
- boot.crypto:

* don\'t mount read-only as safety check (bnc#345338)

* implement precheck scripts

* allow restarting of single volumes (bnc#345605)

* status query of individual devices (bnc#345605)

* add vol_id check script

* maintain boot.crypto stuff in revision control and use tarball
snapshots of it

Thu Nov 29 13:00:00 2007 lnusselAATTsuse.de
- upgrade to svn revision 38

Wed Nov 7 13:00:00 2007 mkoenigAATTsuse.de
- add %fillup_prereq and %insserv_prereq to PreReq

Tue Oct 16 14:00:00 2007 lnusselAATTsuse.de
- upgrade to svn revision 31

* Rename luksDelKey into luksKillSlot

* Add luksRemoveKey that queries a given key before removal

* Fix segfault in luksOpen.

* Add LUKS_device_ready check for most LUKS calls, so that
cryptsetup dies before password querying in case a blockdev is
unavailable

* For LUKS key material access require exclusive access to the
underlying device. This will prevent multiple mappings onto a
single LUKS device. dm
*crypt doesn\'t feature any syncing
capabilities, hence there is no real application for this as it
will likely lead to disk corruption.

* Add signal handler to keyencryption to free the temporary
mapping in case the user hits ctrl-c.

Mon Aug 27 14:00:00 2007 lnusselAATTsuse.de
- remove /var/run/keymap from previous boot to make /etc/init.d/kbd
work (#296409)

Mon Aug 27 14:00:00 2007 lnusselAATTsuse.de
- run fsck with progressbar (#304750)

Thu Jun 21 14:00:00 2007 mkoenigAATTsuse.de
- run udevsettle to avoid problems with busy temporary
device mapper devices [#285478]

Mon Jun 11 14:00:00 2007 lnusselAATTsuse.de
- rephrase error message (#279169)

Fri Jun 1 14:00:00 2007 lnusselAATTsuse.de
- rename util-linux-crypto to cryptsetup
- remove dmconvert
- replace svn snapshot with official 1.0.5 release
- don\'t enable boot.crypto by default

Tue May 29 14:00:00 2007 lnusselAATTsuse.de
- fix segfault when trying to open a non existing device
- fix gcc warnings
- add Short-Description to boot.crypto
- use %find_lang

Wed May 9 14:00:00 2007 lnusselAATTsuse.de
- boot.crypto: implement \'status\'
- boot.crypto: accept argument to start/stop single devices

Wed May 9 14:00:00 2007 lnusselAATTsuse.de
- hashalot: add timeout option

Wed May 9 14:00:00 2007 lnusselAATTsuse.de
- fix build

Tue May 8 14:00:00 2007 lnusselAATTsuse.de
- boot.crypto: switch off splash screen only when needed
- boot.crypto: report status for individual volumes instead of using one global
exit status
- hashalot: exit unsucessfully on empty passphrase

Tue May 8 14:00:00 2007 lnusselAATTsuse.de
- boot.crypto: sleep a bit longer before overwriting the prompt
- boot.crypto: add support for pseed and itercountk options
- boot.crypto: skip entries with unsupported/unknown options
- hashalot: add support for itercountk

Fri May 4 14:00:00 2007 lnusselAATTsuse.de
- upgrade cryptsetup to current svn revision 30 which includes
previous patches.
- fix background prompt process not getting killed on ctrl-d in
boot.crypto

Fri Apr 27 14:00:00 2007 lnusselAATTsuse.de
- upgrade cryptsetup to current svn revision 26. Does no longer hang
when a file is specified instead of a device.
- remove obsolete cryptsetup.sh script
- boot.crypto:

* drop support for cryptoloop, use cryptsetup also for cryptotab

* refactor code and create reusable components for use in cryptotab
and crypttab code path

* run sulogin only during boot if fsck failed

* support crypttab\'s \'tries\' option
- add crypttab manpage based on Debian one

Tue Apr 24 14:00:00 2007 lnusselAATTsuse.de
- add boot.crypto (#257884)
- add crypttab and cryptotab as %ghost to filelist

Tue Mar 27 14:00:00 2007 mkoenigAATTsuse.de
- move devel .so link to %{libdir}
- run ldconfig, since we have now a shared lib installed

Fri Mar 23 13:00:00 2007 dmuellerAATTsuse.de
- cryptsetup can now link shared since libpopt is
no longer under /usr

Fri Mar 9 13:00:00 2007 lnusselAATTsuse.de
- add patch to support old loop_fish2 key hash method

Thu Dec 7 13:00:00 2006 mkoenigAATTsuse.de
- update cryptsetup to version 1.0.4:

* added terminal timeout rewrite

* allow user selection of key slot

* reading binary keys from stdin using the \"-\" as key file

* fix 64 bit compiler warning issues.

* fix getline problem for 64-bit archs.

Fri Oct 13 14:00:00 2006 mkoenigAATTsuse.de
- fix build failure due to missing pthreads

Wed Sep 13 14:00:00 2006 hvogelAATTsuse.de
- use the LUKS version of cryptsetup
- split -devel subpackage for libcryptsetup
- remove patches because they are in the new cryptsetup

* cryptsetup-0.1-static.patch

* cryptsetup-0.1-retval.patch

* cryptsetup-0.1-dmi.exists.patch

* cryptsetup-0.1-timeout.patch
- use man page from the new cryptsetup