mirrors/git-annex
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages 1 Wiki Activity Actions

multicast: Support uftp 5.0 by switching from aes256-cbc to aes256-gcm

Browse source 
aes256-gcm is supported by both 4.x and 5.x, while 5.x dropped aes256-cbc.

Sponsored-by: Graham Spencer on Patreon
This commit is contained in:
Joey Hess 2022-04-19 12:02:10 -04:00
parent 3371fedbba
commit fd65de0eb9
No known key found for this signature in database
GPG key ID: DB12DB0FF05F8F38
3 changed files with 7 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
CHANGELOG
View file

@ -6,6 +6,8 @@ git-annex (10.20220323) UNRELEASED; urgency=medium
Same for mincopies. Same for mincopies.
* assistant: When annex.autocommit is set, notice commits that * assistant: When annex.autocommit is set, notice commits that
the user makes manually, and push them out to remotes promptly. the user makes manually, and push them out to remotes promptly.
* multicast: Support uftp 5.0 by switching from aes256-cbc to
aes256-gcm.
-- Joey Hess <id@joeyh.name> Mon, 28 Mar 2022 14:46:10 -0400 -- Joey Hess <id@joeyh.name> Mon, 28 Mar 2022 14:46:10 -0400

2
Command/Multicast.hs
View file

@ -152,7 +152,7 @@ send ups fs = do
let ps = let ps =
-- Force client authentication. -- Force client authentication.
[ Param "-c" [ Param "-c"
, Param "-Y", Param "aes256-cbc" , Param "-Y", Param "aes256-gcm"
, Param "-h", Param "sha512" , Param "-h", Param "sha512"
-- Picked ecdh_ecdsa for perfect forward secrecy, -- Picked ecdh_ecdsa for perfect forward secrecy,
-- and because a EC key exchange algorithm is -- and because a EC key exchange algorithm is

4
doc/bugs/uftp_5__58___invalid_key_type.mdwn
View file

@ -49,3 +49,7 @@ ok
### Have you had any luck using git-annex before? (Sometimes we get tired of reading bug reports all day and a lil' positive end note does wonders) ### Have you had any luck using git-annex before? (Sometimes we get tired of reading bug reports all day and a lil' positive end note does wonders)
Of course! I'm using it to track assets in an infrastructure repository Of course! I'm using it to track assets in an infrastructure repository
> I've changed it to use aes256-gcm. I have not verified if there
> is other breakage from the new version, so file a bug if you find any.
> [[done]] --[[Joey]]