How do you find what typs of crypto ciphers are supported.? I've dumped out /proc/crypto, which lists out a bunch of types, but none of the names listed seem to work. So far I have only got a couple types to work, the default(when I don't supply cryptsetup any cipher type) aes-cbc-plain and aes-ecb.
Since I don't even see aes-cbc-plain in /proc/crypto
In 10.04 I was using the following commands to mount an encrypted disk image:
Code: sudo losetup -f Which tells what loop back device block is available Then I'd type:
Code: sudo losetup -e aes /dev/loop0 /home/user/crypt.img and then enter the device's password
Code: sudo mount -t ext4 /dev/loop0 /media/crypt I've tried this in 10.10 and it hasn't been working (I can't remember if I did anything in 10.04 to make it work). I've installed the loop-aes-utils package and restarted my machine. Every time I try the 2nd step, after entering the password I get: Code: ioctl: LOOP_SET_STATUS: Invalid argument, requested cipher or key length (128 bits) not supported by kernel
can anyone provide me with the path where i can find the library files. stdio.h, sys/types.h.......
View 4 Replies View RelatedI would like port 80 to have a small daemon running on it that detects HTTP traffic and sends a small redirect response, and any other traffic begins streaming data from my VPN daemon. I was wondering if this has already been made, or any kind of technology for detecting types of traffic and allowing you to run multiple types of servers on the same port.
View 4 Replies View RelatedI'm trying to use "netlink" to get ip address of a Linux box. But the linux/types.h included from "linux/rtnetlink.h" introduced many conflicting type declarations with "sys/types.h".
#include <rtnetlink.h>
#include <sys/types.h>
#include <sys/socket.h>
int main (int argc, char *argv[])
{
return 0;
}
The program will demonstrate such type conflicts.
I'm using Grsync and I want to be able to plug in any drive into my laptop and run rsync on it to back up all the user documents on there to another external hdd and to exclude everything else. Working on the principle that user documents don't always appear where we'd expect I want rsync to look through the whole drive and filter what it backs up by file type. I am only having partial success, however.
I am using the 'filter' option in the 'additional options' box. I am using the command
Code:
filter='merge /home/tim/Desktop/filter'
and I am attaching the filter file I have written. (I have added the .txt extention to upload it).
I have tested this script on my home folder and here's what's going wrong. Rsync will copy the entire directory structure regardless of whether there are any files to be copied over in those directories. I am also getting only some file types getting included and not others. .odt and .ods files are copied, for instance, but not .doc or .rtf.
How can I find out which Bluetooth profiles are supported on Ubuntu 9.10?Sometimes I see a device say that it needs a certain profile and I would like to be able to see the list that my laptop supports.
View 1 Replies View RelatedMy recent CENT OS install went very well. However the only thing missing is wireless support for my modest FR-300USB Wireless adapter. Since I do not have the expertise to create a driver I need to know where I can find what wireless adapters are supported.
View 1 Replies View RelatedI've got a Lenny system on a quad core system with 4GB of ram. Currently Linux www 2.6.26-2-amd64 #1 SMP Thu Nov 25 02:05:44 UTC 2010 x86_64
I've had it for a couple of years, and its been fine, very fast and reliable.
Lately, its got a problem: after its been running for a day or two, access using SSH, or TLS/HTTPS gets really slow. Painfully slow. A reboot returns the system to normal fast operation.
I can't think of anything that has changed, other than I got a new SSL cert and installed it.
The system is mostly a vanity domain server, with Apache HTTPD running a half dozen very low volume services. Its running bind9, mysql, and a few other things, nothing big, nothing that would load down a quad core with lots of ram. The disk is only 14% used.
I work for a SUN resller in South Africa, I have recieved a request from a customer for a autoloader with LTO3 or 4 drives. Where can I find out what auto loaders and interfaces (SCSI or SAS) are supported.
View 1 Replies View RelatedOn a bunch of servers, we use integrity checking tool on a large amount of data. Therefore, we compute SHA1 hash from a lot of files everyday. The CPU is a "generic" one, enough powerful for normal use, but get's totally saturated when integrity check begins. Is there any kind of server using a crypto-processor so as to delegate crypto functions to this dedicated processor?
View 7 Replies View Relatedi have a program which have to encrypt data by using a symmetric block cipher with cbc encryption mode . it seems, that the IN data length must be a multiple of the cipher block length. is there a possibility to advice libgrypt to do the padding of the IN buffer automatically or must i do this manually? in case of manual padding: what is the recommended strategy to perform high security? fill with zeros or random numbers
View 1 Replies View RelatedI'm trying to figure out why Apache is ignoring SSL Cipher statements when placed inside a Virtual Host. Specifically I'm trying to disable SSLv2 and only allow SSLv3 or TLSv1
In httpd-ssl.conf I have the following
Code:
And when I try and connect, I get the expected results.
Quote:
In my virtual host statement I have
Code:
The only difference between the two is the httpd-ssl.conf has -ALL in the CIPHER, and the virtual host entry has ALL. However if I try and change the ALL statement in the virtual host entry to -ALL I get the following error in my logs & get no content.
Quote:
Why it's not working in the virtual host statement? Unfortunately as many of you are probably aware it's impossible to gain PCI certification with SSLv2 enabled.
I've got this weird problem: when I reboot my Debian 8.3 server, I have to run through the crypto unlocking processes for my encrypted volumes a few times before I actually get to a login screen. The operation times out 85% of the time, leaving me to reboot and try over and over until the system is happy.
Here's my partitioning setup (manually partitioned at install):
/boot: 500 MB, EXT2, nodev, nosuid, noexec
/tmp: 2 GB, EXT2, AES-256/xts-plain64 with RANDOM KEY
swap: 2.5 GB, AES-256/xts-plain 64 with RANDOM KEY
/: 35 GB, EXT4, AES-256/xts-plain 64 with PASSPHRASE
/var: 35 GB, EXT4, AES-256/xts-plain 64 with PASSPHRASE
/home: 45 GB, EXT4, AES-256/xts-plain 64 with PASSPHRASE
Here's the output from journalctl -b -p 3:
Code: Select allDate and time | server name | systemd[1]: Timed out waiting for device dev-sda5.device
Date and time | server name | systemd[1]: Dependency failed for Cryptography Setup for sda5_crypt
Date and time | server name | systemd[1]: Dependency failed for Encrypted Volumes
Date and time | server name | systemd[1]: Dependency failed for dev-mapper-sda5_crypt.device
Date and time | server name | systemd[1]: Dependency failed for /tmp
[Code] ....
I had the same problem in previous builds where I chose Twofish instead of AES, and I was hoping that the timeouts would be fixed by switching to AES as my CPU has the AES instruction set. Obviously that didn't make a damn bit of difference.
What am I doing wrong, or what should I change in my setup? The encryption is a requirement. Could the problem be caused by something as stupid as using a RANDOM KEY instead of a PASSPHRASE on /tmp and swap?
Debian 8.3 as OS version.
I recently bought two DreamPlugs and replaced the preinstalled aged Ubuntu 9.04 with Debian Squeeze on them.I built a Marvell Orion 2.6.35 kernel from git. OpenSSL performes lousy on this hardware (my VIA Nano with PadLock support gives me ~690 000k on 8192 size blocks):
[Code]...
I have had for a test installed Feodora but was so silly checking the box for encryption the HD. Now I tested all for removing Feodora (no data anymore on the disc) but even the test unlocking this from my ubuntu system failed with the following error:Error unlocking device: cryptsetup exited with exit code 251: Command failed: Failed to setup dm-crypt key mapping.Check kernel for support for the aes-xts-plain64 cipher spec and verify that /dev/sdb2 contains at least 508 sectorsI installed some encryption packages in the meantime - but non was helpful.Would some kind person - who understands this better than I - please provide the detailed steps needed to mount and unlock the encrypted Feodora installed hard disc. Maybe one of you know which packege I have to install.
View 2 Replies View RelatedI've been using pdfTk to encrypt PDFs for distribution to unsophisticated users (that is, users without PGP keys or the will to get one). RC4 encryption, although reasonably adequate for my use, is relatively insecure. I would be more comfortable with AES. Have any gnu tools emerged that implement AES within a PDF container?
View 2 Replies View RelatedI had a pretty much standard installation according to some tutorial (I don't remember, which one) for courier, including ssl. After upgrading from Wheezy (7) to Jessie (8) everything continued working fine, excep ssl connections to pop or imap.
In the log I get this error message while connecting to imapd-ssl:
Code: Select allFeb 26 20:16:22 mx imapd-ssl: couriertls: connect: error:1408A0C1:SSL routines:SSL3_GET_CLIENT_HELLO:no shared cipher
First I thought there got some chiphers removed from default configuration. But even when I try to allow all protocols and all ciphers:
Code: Select allTLS_PROTOCOL="SSL23"
TLS_CIPHER_LIST="ALL"
And then test via s_client:
Code: Select all# openssl s_client -connect 127.0.0.1:993 -cipher ALL
CONNECTED(00000003)
3073349308:error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure:s23_clnt.c:770:
---
no peer certificate available
---
No client certificate CA names sent
---
SSL handshake has read 7 bytes and written 341 bytes
---
New, (NONE), Cipher is (NONE)
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
---
TLS over STARTTLS is also not working and does not invoke a log-entry. So I want to solve the ssl-problem first. I guess the STARTTLS-problem is automatically solved then.
My update procedure was:
Editing /etc/apt/sources.listapt-get updateapt-get upgradeapt-get dist-upgradeKeep all configuration files regarding courier.
Having installed 9,10 onto a laptop my cherubic daughter swicthed off the power (no battery) and upon restarting i am faced with "Starting Init crypto disks... OK) and there it stops!! I had hoped that I could go to recovery mode and fix it but am faced with the same stalling point. I see others are unresolved in this.
View 2 Replies View RelatedWhat are the different types of API's in linux?How can we predict the kind of API we are using?And what are API layers related to?Are API's and system calls ,both are same?
View 5 Replies View RelatedI'm not completely new to fedora, but I'm still getting used toWhat programs do I search in the add/remove software. For opening rar file types?
View 10 Replies View RelatedI hope this is in the right spot. I need some help editing my .vimrc file. I want to edit it so that if I create a .cpp file, it will turn on cindent, and if I create a .asm file, it will turn on regular autoindent and set ft=nasm so Vim uses NASM syntax highlighting. How do I go about doing this?
View 2 Replies View RelatedText in firefox (mainly) as in other applications in my system look as you can see above. I didn't touch anything in the configuration. It's started from the very first moment I finished installing 10.04 Has anyone had the same issue?
View 1 Replies View RelatedIm currently using OpenOffice.org Writer to write a hand in document for my course. I've come to the point where I want to create a graphical tree in Draw to present an idea and then add this document into writer. I've tried to use Insert -> Object -> OLE Object, and add the document as an inline frame. This looked pretty ugly though, either it's too small or there seems to be no way to just resize the frame without stretching the whole document into unreadability.
View 2 Replies View RelatedI'm want to get some logs from my server, but not general logs like syslog that gives me a lot of random logs. I want to know how I can get logs of things like logins(with time, IP and username), commands that the user ran, process running at the time and things like this.
View 1 Replies View Relatedhow would i go about taring multiple file types, such as *.doc *.pdf *.txt
i know that i can use the command Code: tar -zcvf filename.tar.gz /location/of/backup *.doc , but how do i include multiple wild cards?
I guess I'm just a noob, but I notice that some C libraries (and even some C++ ones) tend to redefine the basic types with their own naming convention.
For example, OpenGL redefines the basic types:
Code: from GL/gl.h
typedef unsigned int GLenum;
typedef unsigned char GLboolean;
typedef unsigned int GLbitfield;
typedef signed char GLbyte;
typedef short GLshort;
typedef int GLint;
[Code].....
I'm setting up link aggregation. When I use two ports of the same nic everything is working fine. When I use two ports of different nics (broadcom and intel) it doesn't work. Does anyone know of limitations using two different nics for link aggregation?
View 3 Replies View RelatedThis is concerning the normal login password at command line by changing via the 'passwd' command. Is there a way to change the type of passwords used? For example, the majority of linux distros use MD5. In Slackware or Centos, where would I change the security setting to go from MD5 to DES or some other encryption?
View 5 Replies View Relatedi am searching for a table that gives info about the result of operations (+ , - , * , /) on data types
i mean if we * int by another int, the result should be assign in long so no overflow happens.
something like that.
like what will be the result of mult unsigned int by signed it , is there tables for such operations.