Source-Changes-HG archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

[src/trunk]: src/sbin/cgdconfig Add documentation for verification methods. ...



details:   https://anonhg.NetBSD.org/src/rev/aa6f09c647e0
branches:  trunk
changeset: 538135:aa6f09c647e0
user:      elric <elric%NetBSD.org@localhost>
date:      Sat Oct 12 21:10:31 2002 +0000

description:
Add documentation for verification methods.  Specify defaults for IV
method, keygen method and verification method.

diffstat:

 sbin/cgdconfig/cgdconfig.8 |  25 ++++++++++++++++++++++---
 1 files changed, 22 insertions(+), 3 deletions(-)

diffs (61 lines):

diff -r 6df0b4910165 -r aa6f09c647e0 sbin/cgdconfig/cgdconfig.8
--- a/sbin/cgdconfig/cgdconfig.8        Sat Oct 12 21:06:46 2002 +0000
+++ b/sbin/cgdconfig/cgdconfig.8        Sat Oct 12 21:10:31 2002 +0000
@@ -1,4 +1,4 @@
-.\" $NetBSD: cgdconfig.8,v 1.6 2002/10/07 00:12:40 wiz Exp $
+.\" $NetBSD: cgdconfig.8,v 1.7 2002/10/12 21:10:31 elric Exp $
 .\"
 .\" Copyright (c) 2002, The NetBSD Foundation, Inc.
 .\" All rights reserved.
@@ -90,9 +90,9 @@
 .It Fl g
 Generate a paramsfile (to stdout).
 .It Fl i Ar ivmeth
-Specify the IV method.
+Specify the IV method (default: encblkno).
 .It Fl k Ar kgmeth
-Specify the key generation method.
+Specify the key generation method (default: pkcs5_pbkdf2).
 .It Fl o Ar outfile
 When generating a
 .Ar paramsfile ,
@@ -104,6 +104,8 @@
 Unconfigure all the devices listed in the cgd configuration file.
 .It Fl u
 Unconfigure a cgd.
+.It Fl V Ar vmeth
+Specify the verification method (default: none).
 .It Fl v
 Be verbose.
 May be specified multiple times.
@@ -133,6 +135,21 @@
 It is also handy to facilitate overwriting the contents of
 a disk volume with meaningless data prior to use.
 .El
+.Ss Verification Method
+The verification method is how
+.Nm
+determines if the passphrase that has been entered is correct.
+If the newly configured disk fails to verify, then
+.Nm
+will ask for the passphrase again and re-configure the device.
+The following verification methods are supported:
+.Pp
+.Bl -tag -width indentxxx
+.It none
+perform no verification.
+.It disklabel
+scan for a valid disklabel.
+.El
 .Ss /etc/cgd/cgd.conf
 The file
 .Pa /etc/cgd/cgd.conf
@@ -200,6 +217,8 @@
 the generated key is immune to passphrase-guessing attacks.
 It is not valuable unless the parameters file is stored on removable media.
 It is base64 encoded.
+.It verify_method
+The verification method.
 .El
 .Sh FILES
 .Bl -tag -width indentxxxxxxxxxxxxxxxxxx -compact



Home | Main Index | Thread Index | Old Index