Source-Changes-HG archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
[src/trunk]: src/sbin/cgdconfig Add documentation for verification methods. ...
details: https://anonhg.NetBSD.org/src/rev/aa6f09c647e0
branches: trunk
changeset: 538135:aa6f09c647e0
user: elric <elric%NetBSD.org@localhost>
date: Sat Oct 12 21:10:31 2002 +0000
description:
Add documentation for verification methods. Specify defaults for IV
method, keygen method and verification method.
diffstat:
sbin/cgdconfig/cgdconfig.8 | 25 ++++++++++++++++++++++---
1 files changed, 22 insertions(+), 3 deletions(-)
diffs (61 lines):
diff -r 6df0b4910165 -r aa6f09c647e0 sbin/cgdconfig/cgdconfig.8
--- a/sbin/cgdconfig/cgdconfig.8 Sat Oct 12 21:06:46 2002 +0000
+++ b/sbin/cgdconfig/cgdconfig.8 Sat Oct 12 21:10:31 2002 +0000
@@ -1,4 +1,4 @@
-.\" $NetBSD: cgdconfig.8,v 1.6 2002/10/07 00:12:40 wiz Exp $
+.\" $NetBSD: cgdconfig.8,v 1.7 2002/10/12 21:10:31 elric Exp $
.\"
.\" Copyright (c) 2002, The NetBSD Foundation, Inc.
.\" All rights reserved.
@@ -90,9 +90,9 @@
.It Fl g
Generate a paramsfile (to stdout).
.It Fl i Ar ivmeth
-Specify the IV method.
+Specify the IV method (default: encblkno).
.It Fl k Ar kgmeth
-Specify the key generation method.
+Specify the key generation method (default: pkcs5_pbkdf2).
.It Fl o Ar outfile
When generating a
.Ar paramsfile ,
@@ -104,6 +104,8 @@
Unconfigure all the devices listed in the cgd configuration file.
.It Fl u
Unconfigure a cgd.
+.It Fl V Ar vmeth
+Specify the verification method (default: none).
.It Fl v
Be verbose.
May be specified multiple times.
@@ -133,6 +135,21 @@
It is also handy to facilitate overwriting the contents of
a disk volume with meaningless data prior to use.
.El
+.Ss Verification Method
+The verification method is how
+.Nm
+determines if the passphrase that has been entered is correct.
+If the newly configured disk fails to verify, then
+.Nm
+will ask for the passphrase again and re-configure the device.
+The following verification methods are supported:
+.Pp
+.Bl -tag -width indentxxx
+.It none
+perform no verification.
+.It disklabel
+scan for a valid disklabel.
+.El
.Ss /etc/cgd/cgd.conf
The file
.Pa /etc/cgd/cgd.conf
@@ -200,6 +217,8 @@
the generated key is immune to passphrase-guessing attacks.
It is not valuable unless the parameters file is stored on removable media.
It is base64 encoded.
+.It verify_method
+The verification method.
.El
.Sh FILES
.Bl -tag -width indentxxxxxxxxxxxxxxxxxx -compact
Home |
Main Index |
Thread Index |
Old Index