mirrors/git-annex
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages 1 Wiki Activity Actions

move bug and close it

Browse source
This commit is contained in:
Joey Hess 2014-08-12 15:40:21 -04:00
parent c963563602
commit 2369ba4618
3 changed files with 2 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

22
doc/bugs/shared_cipher_for_S3_attempting_to_decrypt_a_non-encrypted_file.mdwn Normal file
View file

@ -0,0 +1,22 @@
I am trying to S3 as a file store for git annex. I have set up the remote via the following command:
git annex initremote xxx-s3 type=S3 encryption=shared embedcreds=yes datacenter=EU bucket=xxx-git-annex fileprefix=test/
The remote gets set up correctly and creates the directory I want, and adds a annex-uuid file.
Now when I try to copy a file to the xxx-s3 remote, I get the following error:
$ git annex add ssl-success-and-failure-with-tl-logs.log
add ssl-success-and-failure-with-tl-logs.log ok
(Recording state in git...)
$ git annex copy ssl-success-and-failure-with-tl-logs.log --to xxx-s3
copy ssl-success-and-failure-with-tl-logs.log (gpg) gpg: no valid OpenPGP data found.
gpg: decrypt_message failed: eof
git-annex: user error (gpg ["--batch","--no-tty","--use-agent","--quiet","--trust-model","always","--batch","--passphrase-fd","10","--decrypt"] exited 2)
failed
git-annex: copy: 1 failed
Any ideas what might be wrong? Is shared cipher broken somehow?
> [[fixed|done]] --[[Joey]]

8
doc/bugs/shared_cipher_for_S3_attempting_to_decrypt_a_non-encrypted_file/comment_1_b42ff37be172ba841980c17ad6223e06._comment Normal file
View file

@ -0,0 +1,8 @@
[[!comment format=mdwn
username="https://www.google.com/accounts/o8/id?id=AItOawmAINLSovhWM_4_KrbngOcxduIbBuKv8ZA"
nickname="Nuutti"
subject="comment 1"
date="2014-08-01T09:28:21Z"
content="""
Sorry, this should probably be in bugs.
"""]]

14
doc/bugs/shared_cipher_for_S3_attempting_to_decrypt_a_non-encrypted_file/comment_2_c0325903cdb8d24c72fd4e67e18fbdc8._comment Normal file
View file

@ -0,0 +1,14 @@
[[!comment format=mdwn
username="http://joeyh.name/"
ip="209.250.56.7"
subject="comment 2"
date="2014-08-12T19:37:56Z"
content="""
This is not gpg trying to decrypt some file from the S3 remote. It is trying to decrypt the creds that embedcreds=yes caused to be stored in the git repo.
I was able to reproduce this using your command line, with the S3 env vars set while running initremote, and then unset for the copy, which causes git-annex to try to get the creds from the git repo, and decrypt them.
However, since encryption=shared, the encryption key is stored in the git repo, so there is no point at all in encrypting the creds, also stored in the git repo with that key. So `initremote` doesn't. The creds are simply stored base-64 encoded.
I have fixed this. I will now move this thread to bugs so I can close it.
"""]]