Add option to specify OpenSSL digest type

Open mandoonandy opened this issue 5 years ago • 0 comments

OpenSSL have changed the default key from MD5 to SHA256. This is part of the deprecation of MD5.

Any geliUnlocker configuration built using MD5 will now fail with an error during the openssl decryption.

Add an option to specify the openssl key digest. If the option is not specified in rc.conf, then the option is ignored.

unlockgeli_cpool_key_digest="md5"

Apr 30 '20 05:04 mandoonandy