Bug #329991: Document that users of plain (non-LUKS) volumes from the 1.0 series MUST specify the cipher/keysize/hash, as the defaults have changed for security reasons.

Package-Manager: portage-2.2_rc67/cvs/Linux x86_64

4 files changed, 24 insertions, 16 deletions

diff --git a/sys-fs/cryptsetup/ChangeLog b/sys-fs/cryptsetup/ChangeLog
index 760170f0d8b0..e395aa7e4480 100644
--- a/sys-fs/cryptsetup/ChangeLog
+++ b/sys-fs/cryptsetup/ChangeLog
@@ -1,6 +1,12 @@
 # ChangeLog for sys-fs/cryptsetup
 # Copyright 1999-2010 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sys-fs/cryptsetup/ChangeLog,v 1.88 2010/07/27 18:46:32 pacho Exp $
+# $Header: /var/cvsroot/gentoo-x86/sys-fs/cryptsetup/ChangeLog,v 1.89 2010/07/27 18:52:25 robbat2 Exp $
+
+  27 Jul 2010; Robin H. Johnson <robbat2@gentoo.org>
+  cryptsetup-1.1.2.ebuild, cryptsetup-1.1.3.ebuild:
+  Bug #329991: Document that users of plain (non-LUKS) volumes from the 1.0
+  series MUST specify the cipher/keysize/hash, as the defaults have changed
+  for security reasons.
 
   27 Jul 2010; Pacho Ramos <pacho@gentoo.org> cryptsetup-1.1.2.ebuild:
   amd64 stable, bug 327689
diff --git a/sys-fs/cryptsetup/Manifest b/sys-fs/cryptsetup/Manifest
index b825e9ef57dc..866df26e9211 100644
--- a/sys-fs/cryptsetup/Manifest
+++ b/sys-fs/cryptsetup/Manifest
@@ -1,6 +1,3 @@
------BEGIN PGP SIGNED MESSAGE-----
-Hash: SHA1
-
 AUX 1.0.5-dm-crypt-start.sh 8298 RMD160 858f607fe1a2036430f972dbbc643c178baf96f7 SHA1 00c7380894d30842c01ef18ed3e14114cf1da36b SHA256 8c9f4a502dfb20e1a6c656a9563da539dbe8d1aeeb3517bc34bf14a7d301f201
 AUX 1.0.5-dm-crypt-stop.sh 1022 RMD160 c74d4fffec325378bb008b28c4225b67577c1d1b SHA1 d7b18d4d4845540baecdde373942cc8966c3d5e3 SHA256 42015047c708aa73eae615559ff76c9c8948a5d01fba68f64c5432e30ec799a4
 AUX 1.0.5-dmcrypt.confd 3029 RMD160 c84d92a58923ce88a60ab1e8fcc88910b0689df6 SHA1 b006d7f31773842e7247b2df0fe1735aac87ec59 SHA256 b5ea27a1034dda22b287422097e30e99a0673bd6a3148e38b1c2310bdcc28280
@@ -33,14 +30,7 @@ EBUILD cryptsetup-1.1.0.ebuild 2952 RMD160 4f790c0b7388319bc4935237a301868f443b0
 EBUILD cryptsetup-1.1.1.ebuild 3036 RMD160 5eedec40850803a392daa6c0aac49a63a71b6d16 SHA1 a235c590162ae92d0d66ae0b235cb830d6982d00 SHA256 eff000a0955f4833ee49651ba74b6727c735fb1aa4dd15a4cb34defaee198444
 EBUILD cryptsetup-1.1.1_rc1.ebuild 2982 RMD160 744e8fcac011ecfd11def3149c5bcdd47087dba6 SHA1 89bb9d0376786cf70c5c9a7d5ab2e9174bb935a7 SHA256 eb5b16906624d610acd7daf251b6280f733dfe4e9e2d74e691afbf85520e8d92
 EBUILD cryptsetup-1.1.1_rc2.ebuild 3040 RMD160 e512e3d3980727f682c63db686a59123a937deb1 SHA1 11d24b1493be4087f2b8b1577154106a40072616 SHA256 8400b3ac19c3178b6c55218c51b8e11962a4d97dba070c80da8940a25a696ea9
-EBUILD cryptsetup-1.1.2.ebuild 3032 RMD160 552e769755b86dad1bbc1307a296f6eb0b97be40 SHA1 6271818e8e3d46218a4e601371e1ea0c1d991981 SHA256 567b6617781b9272b27e2dcf9b888568d043775c2a1f28aee125b0a7b75f2cd9
-EBUILD cryptsetup-1.1.3.ebuild 3036 RMD160 ed1144ffb55d9f3e798384500d6dab47fe181390 SHA1 bdcf62e896ea438e450ff8e545e4559d1cb4164b SHA256 9364b7fc4a4f9df360014e0af0e9e92d7b4cade5f4606807daab94768aaeff46
-MISC ChangeLog 12524 RMD160 ac9339eb0e6cb24a697cbb5755ab1455a521a888 SHA1 47f1c93c28a3f5d7d2fb0e50a0854baa6835699b SHA256 3b91b6a707a154cdee09cc96dc90cf4927903b199ecaf175e1adf7aed429d771
+EBUILD cryptsetup-1.1.2.ebuild 3395 RMD160 5d674f7fa1eb079bad17f34edc84caf8a754cd64 SHA1 ba88abe3fde0cbf5a8d1c62822b889d48024b518 SHA256 874ff4f33c6e9843da09098debb879692442de27660746bb10ae0c691860d88e
+EBUILD cryptsetup-1.1.3.ebuild 3397 RMD160 40eab87e9d566cf807d7d7c1d274cb82a3f19812 SHA1 0bcbb75cf10c9221432b8aae34d67993bbe74ea3 SHA256 1270c0f6df14ffb46cb97760863743160ae1520e18c133a2969661e9a3b1d1e4
+MISC ChangeLog 12808 RMD160 144a4824ba618ab6ea53877253fa6c502b830a38 SHA1 88c7951b82645a5659f514f2a767c0f5c4364b95 SHA256 0f5f3d2f011354a346c7ff29484866a79259bfbb1eaf7a23720bd59e13c26d8f
 MISC metadata.xml 239 RMD160 81512c49e64b6e70c7b746ba09d3e6fce4c7bc89 SHA1 c4085a72e46fe6bcea5bdff780007791eae6db4b SHA256 aebd5282fb892100f348eba1ed27edd27e7296356897c6f5314674f8abb4b51a
------BEGIN PGP SIGNATURE-----
-Version: GnuPG v2.0.15 (GNU/Linux)
-
-iEYEARECAAYFAkxPKY4ACgkQCaWpQKGI+9QdeQCdHQbzbdkRyCbX9weW2j/xBbcR
-6DoAnigh4v0sYVOm5hE0MSVlEDzW/ZV5
-=EJWM
------END PGP SIGNATURE-----
diff --git a/sys-fs/cryptsetup/cryptsetup-1.1.2.ebuild b/sys-fs/cryptsetup/cryptsetup-1.1.2.ebuild
index 37571887957b..201defeee80f 100644
--- a/sys-fs/cryptsetup/cryptsetup-1.1.2.ebuild
+++ b/sys-fs/cryptsetup/cryptsetup-1.1.2.ebuild
@@ -1,6 +1,6 @@
 # Copyright 1999-2010 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sys-fs/cryptsetup/cryptsetup-1.1.2.ebuild,v 1.3 2010/07/27 18:46:32 pacho Exp $
+# $Header: /var/cvsroot/gentoo-x86/sys-fs/cryptsetup/cryptsetup-1.1.2.ebuild,v 1.4 2010/07/27 18:52:25 robbat2 Exp $
 
 EAPI=2
 
@@ -91,4 +91,10 @@ pkg_postinst() {
 	elog "after 10 seconds add the following to your bootloader config:"
 	elog "key_timeout=10"
 	elog "A timeout of 0 will mean it will wait indefinitely."
+	elog
+	elog "Users using cryptsetup-1.0.x (dm-crypt plain) volumes must use"
+	elog "a compatibility mode when using cryptsetup-1.1.x. This can be"
+	elog "done by specifying the cipher (-c), key size (-s) and hash (-h)."
+	elog "For more info, see http://code.google.com/p/cryptsetup/wiki/FrequentlyAskedQuestions#6._Issues_with_Specific_Versions_of_cryptsetup"
+
 }
diff --git a/sys-fs/cryptsetup/cryptsetup-1.1.3.ebuild b/sys-fs/cryptsetup/cryptsetup-1.1.3.ebuild
index ee65bb8010bb..1b9870d2f892 100644
--- a/sys-fs/cryptsetup/cryptsetup-1.1.3.ebuild
+++ b/sys-fs/cryptsetup/cryptsetup-1.1.3.ebuild
@@ -1,6 +1,6 @@
 # Copyright 1999-2010 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sys-fs/cryptsetup/cryptsetup-1.1.3.ebuild,v 1.1 2010/07/21 19:31:27 robbat2 Exp $
+# $Header: /var/cvsroot/gentoo-x86/sys-fs/cryptsetup/cryptsetup-1.1.3.ebuild,v 1.2 2010/07/27 18:52:25 robbat2 Exp $
 
 EAPI=2
 
@@ -91,4 +91,10 @@ pkg_postinst() {
 	elog "after 10 seconds add the following to your bootloader config:"
 	elog "key_timeout=10"
 	elog "A timeout of 0 will mean it will wait indefinitely."
+	elog
+	elog "Users using cryptsetup-1.0.x (dm-crypt plain) volumes must use"
+	elog "a compatibility mode when using cryptsetup-1.1.x. This can be"
+	elog "done by specifying the cipher (-c), key size (-s) and hash (-h)."
+	elog "For more info, see http://code.google.com/p/cryptsetup/wiki/FrequentlyAskedQuestions#6._Issues_with_Specific_Versions_of_cryptsetup"
+
 }