From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: <dietmar@proxmox.com> Received: from firstgate.proxmox.com (firstgate.proxmox.com [212.224.123.68]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by lists.proxmox.com (Postfix) with ESMTPS id 4382F614F2 for <pbs-devel@lists.proxmox.com>; Thu, 17 Dec 2020 06:53:36 +0100 (CET) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id 3838022A41 for <pbs-devel@lists.proxmox.com>; Thu, 17 Dec 2020 06:53:36 +0100 (CET) Received: from proxmox-new.maurer-it.com (proxmox-new.maurer-it.com [212.186.127.180]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by firstgate.proxmox.com (Proxmox) with ESMTPS id 5EEC322A34 for <pbs-devel@lists.proxmox.com>; Thu, 17 Dec 2020 06:53:34 +0100 (CET) Received: from proxmox-new.maurer-it.com (localhost.localdomain [127.0.0.1]) by proxmox-new.maurer-it.com (Proxmox) with ESMTP id 2F5794522B for <pbs-devel@lists.proxmox.com>; Thu, 17 Dec 2020 06:53:34 +0100 (CET) Date: Thu, 17 Dec 2020 06:53:12 +0100 (CET) From: Dietmar Maurer <dietmar@proxmox.com> To: Proxmox Backup Server development discussion <pbs-devel@lists.proxmox.com>, =?UTF-8?Q?Fabian_Gr=C3=BCnbichler?= <f.gruenbichler@proxmox.com> Message-ID: <826727687.1829.1608184393284@webmail.proxmox.com> In-Reply-To: <20201216134111.445581-1-f.gruenbichler@proxmox.com> References: <20201216134111.445581-1-f.gruenbichler@proxmox.com> MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable X-Priority: 3 Importance: Normal X-Mailer: Open-Xchange Mailer v7.10.4-Rev14 X-Originating-Client: open-xchange-appsuite X-SPAM-LEVEL: Spam detection results: 0 AWL 0.113 Adjusted score from AWL reputation of From: address KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment RCVD_IN_DNSWL_MED -2.3 Sender listed at https://www.dnswl.org/, medium trust SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_PASS -0.001 SPF: sender matches SPF record URIBL_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [manifest.rs, proxmox-backup-client.rs, key.rs, proxmox.com] Subject: [pbs-devel] applied: [PATCH proxmox-backup 0/7] master key improvements X-BeenThere: pbs-devel@lists.proxmox.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Proxmox Backup Server development discussion <pbs-devel.lists.proxmox.com> List-Unsubscribe: <https://lists.proxmox.com/cgi-bin/mailman/options/pbs-devel>, <mailto:pbs-devel-request@lists.proxmox.com?subject=unsubscribe> List-Archive: <http://lists.proxmox.com/pipermail/pbs-devel/> List-Post: <mailto:pbs-devel@lists.proxmox.com> List-Help: <mailto:pbs-devel-request@lists.proxmox.com?subject=help> List-Subscribe: <https://lists.proxmox.com/cgi-bin/mailman/listinfo/pbs-devel>, <mailto:pbs-devel-request@lists.proxmox.com?subject=subscribe> X-List-Received-Date: Thu, 17 Dec 2020 05:53:36 -0000 applied > On 12/16/2020 2:41 PM Fabian Gr=C3=BCnbichler <f.gruenbichler@proxmox.com= > wrote: >=20 > =20 > this series fixes a bug preventing encrypted-key-restore that got > introduced with fingerprint checks when restoring files, and further > improves master key handling by providing an import command that takes a > restored encrypted key and a private master key to create a PBS keyfile. >=20 > Fabian Gr=C3=BCnbichler (7): > master key: store blob name in constant > fix #3197: skip fingerprint check when restoring key > key: move RSA-encryption to KeyConfig > client: add 'import-with-master-key' command > docs: replace openssl command with client > KeyConfig: add encrypt/decrypt test > KeyConfig: always calculate fingerprint >=20 > docs/backup-client.rst | 6 +- > src/backup/crypt_config.rs | 26 +------ > src/backup/key_derivation.rs | 104 +++++++++++++++++++++++++-- > src/backup/manifest.rs | 1 + > src/bin/proxmox-backup-client.rs | 33 +++++---- > src/bin/proxmox_backup_client/key.rs | 95 ++++++++++++++++++++++++ > 6 files changed, 218 insertions(+), 47 deletions(-) >=20 > --=20 > 2.20.1 >=20 >=20 >=20 > _______________________________________________ > pbs-devel mailing list > pbs-devel@lists.proxmox.com > https://lists.proxmox.com/cgi-bin/mailman/listinfo/pbs-devel