https-keyscript

https-keyscript copied to clipboard

- Added curl as dependency (busybox wget caused problems with tls connections, that's why I changed it to curl which it seems to work better ...) - Added openssl as...

brknkfr

Use busybox wget

2

- No need for real wget anymore, newer busybox wget works just fine with https urls - Add needed libraries for resolving

brknkfr

stupidpupil

The booting mechanism is quiet different on systems like the raspberry pis. The correct time isn't yet set, so the ssl certificates of remote https servers will be invalid. ```...

brknkfr

setup step 4 (busybox sh /lib/cryptsetup/scripts/wget_or_ask) failing "sh: bad number"

2

sh expect $CRYPTTAB_TRIED (if [ "$CRYPTTAB_TRIED" -gt 0 ]; then) to be set so the following fails: busybox sh /lib/cryptsetup/scripts/wget_or_ask "somepassphrase:https://example.org/encrypted_keyfile" > unencrypted_keyfile the following works (but without passing by...

yeupou

- Use configure_networking() in networking.sh (Fixes https://github.com/stupidpupil/https-keyscript/issues/4) - Wait for valid network connection - Deconfigure network in init-bottom/networking.sh

brknkfr

Newer distros have openssl 1.1 on board nowadays. (Fixes https://github.com/stupidpupil/https-keyscript/issues/7)

brknkfr

- Assumes `eth0` as the relevant networking interface (which it won't be on any Ubuntu system at least) - Assumes DHCP configuration

stupidpupil

- Add networking hook for resolving - Remove now unecessary strace dependency in wget hook (Fixes https://github.com/stupidpupil/https-keyscript/issues/6)

brknkfr

wget and curl are comparable, but curl has I nice option: `--dns-servers`, with which you can specify the dns resolvers. With curl you wouldn't have to configure resolv.conf in initramfs...

brknkfr