volume_key

volume_key@lists.stg.fedorahosted.org

10 discussions

【炔】手机流量拷璧渡比耍不可以转赠后会无期
by hz279656 hz279656 11 Dec '21

11 Dec '21

手机流量可不可以转赠 --》点击后面地址进入看午@夜大片: http://cogodw786.aa345.cc/#fedoraproject1212 --》点击后面地址进入看午@夜视频: http://cogodw786.aa345.cc/#fedoraproject1212 手机流量可不可以转赠现在的中国，有几个方面还是比不上其它的国家，就拿教学方面来说吧！虽然说中国的教学方式已经有些变化了。但是还改不了用考试选人这一关，为什么呢？当人们思念自己的故乡时，只需上网搜索电子地图，用卫星来看自己的故乡。在电子地图中，可以看见故乡的风土人情，可以看见故乡的大好河山，甚至可以看到身在异处的亲人此刻正在做的事。十分便利，不必再对月空想。【炔】手机流量拷璧渡比耍不可以转赠后会无期最近，太多太多的感动令我们泪如雨下，最美司机吴斌，最美教师张莉莉，最美妈妈吴菊萍，最美大学生徐建龙，他们的英雄事迹都定格在千万人心中，而在我心中，最美的人就是我家对门的修车师傅。手机流量可不可以转赠

1 0

【净】糖果电影天下无敌,无删减完整马踏飞燕
by al279687 al279687 11 Dec '21

11 Dec '21

糖果电影无删减完整 --》点击后面地址进入看午@夜大片: http://arstum764.aa234.cc/#fedoraproject1212 --》点击后面地址进入看午@夜视频: http://arstum764.aa234.cc/#fedoraproject1212 糖果电影无删减完整睡美人说：幸福就是在黑暗中沉睡时得到甜蜜的一吻；如果有人说，世界上还有哪一种爱是无私的话，那就是母亲对子女的爱；如果有人说，世界上还有哪一种爱可以让我们泪流满面，那就是母亲对子女的爱；如果说世界上还有哪一种爱可以让我们放弃一切，那就是母亲对子女的爱。母亲对子女的爱，是永远不会改变的。没有一个母亲是不爱自己的子女的。母亲是温暖我们心里的一缕阳光，母亲的温暖，无时无刻的藏在我们心里。母亲也是不许我们不让我们沉浸在挫折和悲伤里的天使。鼓励着我们前进，就算失败了，也不要轻易放弃的天使。【净】糖果电影天下无敌,无删减完整马踏飞燕母爱对我们来说，是什么？从小，我们就得到了母爱，但我们却认为这是大人们应尽的责任，母爱对我们来说是什么？我们却一直无视它，母爱是什么？我们到现在还不明白吗？在这个世界上有一种非常珍贵的东西叫母爱，母爱就像春天的雨露一样，轻轻悄悄滋润了我们的心田，母爱就像一叶扁舟，载着我们越过一切的困难阻碍，母爱就像灯塔，为我们指引光芒，母爱就像阳光，为我们带来一缕缕温暖的阳光。糖果电影无删减完整

1 0

【丈】哪个软件可惊涛骇浪,以免费看电影镜花水月
by hz279656 hz279656 11 Dec '21

11 Dec '21

哪个软件可以免费看电影 --》点击后面地址进入看午@夜大片: http://seadsa210.aa234.cc/#fedoraproject1211 --》点击后面地址进入看午@夜视频: http://seadsa210.aa234.cc/#fedoraproject1211 哪个软件可以免费看电影贫穷却拥有一个幸福的家庭，老人拥有一个安乐的晚年，青年拥有激情如火的青春，中年拥有成熟稳重的个性，孩子拥有天真无邪的笑容。医生拥有救死扶伤的能力；老师拥有一个全天下最灿烂的职业；清洁工人拥有路旁行人的尊重。这时，菲儿和殷殷走出了家门，菲儿问殷殷这几天为什么不来上课，殷殷哭泣地说：“妈妈在注册的前几天问过我对这次的中考有多少成的把握？而我说只有六成左右的时候，妈妈有些伤心，妈妈随后对我说了几句话，是希望我能转学，换个环境。因为只有这样，我才能鹤立鸡群！”菲儿奇怪地问：“那么……那么你真的舍得离开我们吗？你真的舍得我们之间的友谊吗？”当菲儿刚问完问题时，她的泪水可以“淹没”整个乡村。她泣不成句地说：“妈妈为了……我，做了……做了这么多的事，我……我……我此能让她伤心难过呢？”……【丈】哪个软件可惊涛骇浪,以免费看电影镜花水月怀着对孙中山先生的敬仰之情，我们来到了中山陵。下车后第一眼看去就是一座牌坊，上书“博爱”。走过牌坊便看见一条长长的墓道，墓道两旁种满了各种松树，让人不禁有一种肃穆的感觉。再向里走就会看见许多台阶通向纪念堂，台阶共有392级。从台阶最低处向上看只见台阶不见平台，代表着革命的道路艰难坎坷；而从最高处低头看却只见平台不见台阶，代表伟人视野之开阔。哪个软件可以免费看电影

1 0

volume_key-0.3.7 released
by Miloslav Trmač 24 Aug '11

24 Aug '11

Hello, volume_key 0.3.7 is now available at https://fedorahosted.org/volume_key/ . Changes in version 0.3.7: - Made some error messages translatable. - Updated translations. - Fixed a man page typo. Mirek

1 0

volume_key-0.3.5 released
by Miloslav Trmač 24 Nov '10

24 Nov '10

Hello, volume_key 0.3.5 is now available at https://fedorahosted.org/volume_key/ Changes in version 0.3.5: - Fix password-encrypted packet handling with gpgme 1.2. - Allow aborting password prompts in volume_key(1). - Various minor usability enhancements. - E-mail scripts contributed by Marko Myllynen <myllynen(a)redhat.com>. - Documentation clarifications. - Update translations. Mirek

1 0

volume_key escrow packet transit / receiver scripts
by Marko Myllynen 20 Oct '10

20 Oct '10

Hi, I've written two scripts which, when used together with volume_key, allow organizations and administrators to have backup passphrases for their users' LUKS encrypted disks making recovery possible when a user forgets their actual passphrase. By leveraging volume_key features only those very few administrators who know the needed passphrase to decrypt the encrypted escrow packets will be able to unlock users' encrypted disks when needed. The scripts are attached, one to allow users sending backup passphrase escrow packets and another to receive and store those deliveries. The sender script is able to send a previously generated packet or creating a new one on the fly. These work over e-mail and I've written very quick "howto" below - I think it'd be nice to include these in volume_key package but perhaps in the doc / contrib directory as they need to be customized a bit for each organization using them (at least setting sane defaults). Also, adding something like delivery support over FTP or integrating with a %post script in Anaconda would be rather easy to do but those methods are currently not implemented. To use the attached scripts, on the server: # cp escrow-receive /usr/local/sbin/escrow-receive # vi /usr/local/sbin/escrow-receive # ln -s /usr/local/sbin/escrow-receive /etc/smrsh/escrow-receive # echo 'escrow: "|/usr/local/sbin/escrow-receive"' >> /etc/aliases # newaliases And then creating the log file and directory for escrow packets and making sure their owner/permissions are sane. On the client one needs to acquire the certificate to encrypt the escrow packet and then just use the organization specific escrow-transit: # ./escrow-transit -c ./cert.pem -v or if using a previously generated escrow (e.g., by Anaconda): # ./escrow-transit -f ./existing-escrow -v After a successful delivery the user receives a confirmation e-mail. Cheers, -- Marko Myllynen #!/usr/bin/env python # # A simple utility to receive volume_key escrow packets via e-mail # # Copyright (C) 2010 Marko Myllynen <myllynen(a)redhat.com> # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License # as published by the Free Software Foundation; either version 2 # of the License, or (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, see <http://www.gnu.org/licenses/>. import datetime import smtplib import hashlib import base64 import email import sys import os from email.MIMEText import MIMEText MAX_EMAIL_SIZE = 4096 SMTP_SERVER = "localhost" ADMIN_EMAIL = "root(a)localhost.localdomain" ESCROW_DIR = "/var/local/escrows" LOG = "/var/log/escrow.log" checksum = escrow = sender = None log = open(LOG, 'a') now = datetime.datetime.now().strftime("%Y-%m-%d %H:%M:%S") # Read in and process the received email escrow packet log.write("INFO: Starting to process an email escrow packet on " + now + "\n") msg = email.message_from_string(sys.stdin.read(MAX_EMAIL_SIZE)) if msg.is_multipart(): for part in msg.walk(): # Parse packet source information from the message body if not part.get('Content-Disposition'): for line in str(part.get_payload()).split('\n'): if "MD5 checksum: " in line: checksum = line.split("MD5 checksum: ")[-1] if "packet from: " in line: sender = line.split("packet from: ")[-1] # Save the escrow packet else: if not sender: continue escrow = ESCROW_DIR + "/" + sender.replace("/", "_") + "-" + now.replace(" ", "-") os.umask(0266) f = open(escrow, 'wb') f.write(base64.b64decode(part.get_payload())) f.close() if checksum is None or escrow is None or sender is None: log.write("ERROR: Malformed email escrow packet received.\n") now = datetime.datetime.now().strftime("%Y-%m-%d %H:%M:%S") log.write("INFO: Processing completed on " + now + "\n") log.close() sys.exit(1) # Verify packet checksum checksum_ok = checksum == hashlib.md5(file(escrow).read()).hexdigest() if checksum_ok: reply = "Your backup passphrase has been successfully received.\n" reply = reply + "\nYou should now remove the escrow packet file from your computer.\n" status = "-VALID-PACKET" log.write("INFO: Received valid escrow packet from " + sender + "\n") else: reply = "Error receiving your backup passphrase packet!\n" status = "-CHECKSUM-ERROR" log.write("WARNING: Received invalid email escrow packet from " + sender + "\n") log.write("WARNING: Marking escrow packet invalid: " + escrow + "\n") # Inform the sender msg = MIMEText(reply) msg['Subject'] = reply.split('\n')[0] msg['From'] = ADMIN_EMAIL msg['To'] = sender s = smtplib.SMTP(SMTP_SERVER) try: s.sendmail(ADMIN_EMAIL, sender, msg.as_string()) if checksum_ok: log.write("INFO: Marking escrow packet valid: " + escrow + "\n") except smtplib.SMTPRecipientsRefused: log.write("WARNING: Invalid escrow packet sender: " + sender + "\n") log.write("WARNING: Marking escrow packet invalid: " + escrow + "\n") status = status + "-UNKNOWN-SENDER" s.quit() os.rename(escrow, escrow + status) now = datetime.datetime.now().strftime("%Y-%m-%d %H:%M:%S") log.write("INFO: Processing completed on " + now + "\n") log.close() #!/usr/bin/env python # # A simple utility to tranfer volume_key escrow packets to a server # # Copyright (C) 2010 Marko Myllynen <myllynen(a)redhat.com> # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License # as published by the Free Software Foundation; either version 2 # of the License, or (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, see <http://www.gnu.org/licenses/>. import subprocess import optparse import smtplib import hashlib import string import random import base64 import shlex import sys import os from email import Encoders from email.MIMEBase import MIMEBase from email.MIMEText import MIMEText from email.MIMEMultipart import MIMEMultipart # Script version VERSION = "0.1" # Configuration MAIL_RECIP = "escrow(a)localhost.localdomain" SMTP_SERVER = "localhost" ESCROW_DIR = "/root" # Rudimentary intranet connectivity check against a host, None to disable TEST_HOST_CONN = "intra.example.com" #TEST_HOST_CONN = None # Command line parser def parse_cmd_line(): """Parse command line arguments""" usage = "%prog <-c CERT|-f PACKET> [options]" parser = optparse.OptionParser(usage) parser.disable_interspersed_args() parser.description = "A simple utility to tranfer volume_key escrow packets to a server" parser.add_option("-V", "--version", dest="version", action="store_const", const=1, default=0, help="show program's version number and exit") parser.add_option("-v", "--verbose", dest="verbose", action="store_const", const=1, default=0, help="verbose execution") parser.add_option("-c", "--public-cert", dest="cert", help="public certificate file to create a new packet") parser.add_option("-f", "--use-file", dest="file", help="use an existing escrow packet file") parser.add_option("-r", "--mail-recipient", dest="recip", action="store", type="string", default=MAIL_RECIP, help="mail recipient, default: " + MAIL_RECIP) parser.add_option("-s", "--mail-sender", dest="sender", help="e-mail sender") parser.add_option("-x", "--remove-files", dest="remove", action="store_const", const=1, default=0, help="remove all used files after successful execution") parser.add_option("-y", "--assume-yes", dest="all_yes", action="store_const", const=1, default=0, help="non-interactive mode, no confirmations asked") return parser.parse_args() # Check connectivity to a host def host_conn_check(host): import socket try: socket.getaddrinfo(host, 80, 0, 0, socket.SOL_TCP) return True except: return False # Get and verify an email address def get_verify_email(default, suggestion=None, id=None, all_yes=False, verbose=False): if id: id = " " + id + " " else: id = " " email = None if default and not suggestion: email = default while not email: if suggestion: email = suggestion suggestion = None else: email = raw_input("Please enter" + id + "e-mail address:\n") if not all_yes: accept = raw_input("Using" + id + "address '" + email + "' - is this ok? (y/n) ") if accept != "y": email = None s = smtplib.SMTP(SMTP_SERVER) s.putcmd("vrfy", email) reply = s.getreply()[0] s.quit() if not (reply == 250 or reply == 251 or reply == 252): print >> sys.stderr, email + ": verification failed - address unknown." return None if verbose: print "Tentatively verified" + id + "address " + email + "." return email # Get the LUKS partition def get_luks_partition(): luks_parts = [] for part in open('/proc/partitions', 'r').readlines(): if not part.strip() or "#blocks" in part: continue dev = "/dev/" + part.strip().split()[-1] if not os.access(dev, os.R_OK|os.W_OK): print >> sys.stderr, "Only root can add new backup passphrases." sys.exit(2) cmd = "cryptsetup isLuks " + dev r = subprocess.call(shlex.split(cmd), stdout=open('/dev/null', 'w'), stderr=subprocess.STDOUT) if r == 0: luks_parts.append(dev) if len(luks_parts) == 0: print >> sys.stderr, "No LUKS partitions detected." sys.exit(2) if len(luks_parts) > 1: print >> sys.stderr, "Multiple LUKS partitions detected." if opts.verbose: print "Create the escrow packet(s) manually " \ "with volume_key(1) and use the -f option." sys.exit(2) return luks_parts[0] # Main def main(): """A simple utility to tranfer volume_key escrow packets to a server""" (opts, args) = parse_cmd_line() if opts.version: print os.path.basename(sys.argv[0]) + " " + VERSION sys.exit(0) if len(args) > 0 or \ (opts.file and opts.cert) or \ (not opts.file and not opts.cert): print >> sys.stderr, os.path.basename(sys.argv[0]) + ": use -h for help" sys.exit(1) # Test intranet connectivity against the defined host if TEST_HOST_CONN is not None: if opts.verbose: print "Testing intranet connectivity against " + TEST_HOST_CONN + "... ", sys.stdout.flush() if not host_conn_check(TEST_HOST_CONN): if opts.verbose: print "failed." print "You must be connected to intranet in order to use this tool." sys.exit(1) if opts.verbose: print "ok." # Set sender email address sender = None while not sender: sender = get_verify_email(sender, opts.sender, "sender", opts.all_yes, opts.verbose) # Set recipient address recipient = None while not recipient: recipient = get_verify_email(MAIL_RECIP, opts.recip, "recipient", opts.all_yes, opts.verbose) escrow = None # Use the specified escrow file if opts.file: open(opts.file, 'rb').close() escrow = opts.file else: # Create a new backup passphrase escrow file part = get_luks_partition() escrow = ESCROW_DIR + "/escrow" + part.replace("/", "-") + "-backup-passphrase" escrow = escrow + "-" + "".join(random.sample(string.letters+string.digits, 6)) print "About to add a random backup passphrase to LUKS partition " + part + "." open(opts.cert, 'rb').close() accept = "y" if not opts.all_yes: accept = raw_input("Is this ok? (y/n) ") if accept != "y": if opts.verbose: print "Operation aborted." sys.exit(3) # Add a random backup passphrase to the LUKS device print "Current passphrase for " + part + " needed to unlock the device." cmd = "volume_key --save " + part + " -c " + opts.cert + " --create-random-passphrase " + escrow + " --output-format asymmetric" r = subprocess.call(shlex.split(cmd)) if r != 0: print >> sys.stderr, "Operation failed." sys.exit(4) if opts.verbose: print "Random passphrase has been successfully added to " + part + "." print "Encrypted packet stored at " + escrow + "." # Read in the escrow packet as a base64 encoded binary attachment if opts.verbose: print "Using escrow packet " + escrow + "." fp = open(escrow, 'rb') packet = MIMEBase('application', 'octet-stream') packet.set_payload(fp.read()) fp.close() Encoders.encode_base64(packet) packet.add_header('Content-Disposition', 'attachment; filename="%s"' % escrow) md5_sum = hashlib.md5(file(escrow).read()).hexdigest() # Prepare the transfer msg = MIMEMultipart() msg['Subject'] = "Backup Passphrase Escrow Packet from " + sender msg['From'] = sender msg['To'] = recipient text = "Backup passphrase escrow packet from: %s" % sender text = text + "\n\nPacket MD5 checksum: " + md5_sum + "\n" msg.attach(MIMEText(text, 'plain')) msg.attach(packet) # Transfer the packet rc = 0 s = smtplib.SMTP(SMTP_SERVER) for e in s.sendmail(sender, recipient, msg.as_string()): rc = 5 if rc == 0: print "Escrow packet successfully sent to %s." % recipient s.quit() # Remove the packet if requested removed = False if opts.remove and rc == 0: accept = "y" if not opts.all_yes: accept = raw_input("Removing escrow packet " + escrow + " - is this ok? (y/n) ") if accept != "y": if opts.verbose: print "Escrow packet not removed." if accept == "y": os.unlink(escrow) removed = True print "Escrow packet " + escrow + " removed." if rc == 0 and not removed and opts.verbose: print "Remove the escrow packet after receiving confirmation e-mail." # All done. sys.exit(rc) if __name__ == "__main__": main()

2 1

volume_key-0.3.4 released
by Miloslav Trmač 26 Aug '10

26 Aug '10

Hello, volume_key 0.3.4 is now available at https://fedorahosted.org/volume_key/ Changes in version 0.3.4: - New option --unencrypted, which allows dumping unencrypted metadata of a packet without necessarily being able to decrypt the encrypted metadata and secrets. - New function libvk_packet_open_unencrypted(). - Generate stronger default passphrases in volume_key. - Fix build with recent gpgme versions. - Update translations. Mirek

1 0

volume_key-0.3.1 released
by Miloslav Trmač 11 Dec '09

11 Dec '09

Hello, volume_key 0.3.1 is now available at https://fedorahosted.org/volume_key/wiki/ . Changes in version 0.3.1: - Don't output garbage on NSS errors. Mirek

1 0

volume_key-0.3 released
by Miloslav Trmač 01 Oct '09

01 Oct '09

Hello, volume_key 0.3 is now available at https://fedorahosted.org/volume_key/wiki/ . Changes in version 0.3: - New packet formats that only encrypt the secrets, not all metadata, potentially allowing to unwrap the secret directly into a hardware crypto token. The new default format (both for volume_key(8) and the Python bindings) is LIBVK_PACKET_FORMAT_ASYMMETRIC_WRAP_SECRET_ONLY. - Update to compile against cryptsetup-1.1.0-test0. - Support newer libblkid versions. Mirek

1 0

(testing) Current implementation status
by Miloslav Trmač 11 Jun '09

11 Jun '09

Is this thing on? The current status is: https://fedorahosted.org/mailman/listinfo/volume_key contains an implementation of the stand-alone parts of disk encryption key escrow (no IPA or installer integration), based on the plan at https://fedoraproject.org/wiki/Disk_encryption_key_escrow_use_cases . There is no official release (and no Fedora package) yet because the code depends on cryptsetup extensions that were not accepted upstream. If upstream doesn't respond, I'll probably just bundle the modified libcryptsetup into the volume_key RPM package and link it statically. For now, you can get the cryptsetup patch from https://fedorahosted.org/releases/v/o/volume_key/cryptsetup-svn-r49.patch , and a preliminary tarball from https://fedorahosted.org/released/volume_key/volume_key-0.1.tar.bz2 . Mirek

1 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

volume_key