View Issue Details

IDProjectCategoryView StatusLast Update
0000046bareos-corefile daemonpublic2015-03-25 19:19
Reportermvwieringen Assigned To 
PrioritynormalSeverityfeatureReproducibilityN/A
Status closedResolutionfixed 
PlatformOpenIndianaOSOpenIndianaOS Versionb151a
Product Version13.1.0 
Fixed in Version13.1.0 
Summary0000046: Encryption cipher is hardcoded
DescriptionThe crypto framework support multiple encryption ciphers but the code hardcodes
the cipher to AES128.
Additional InformationThe crypto framework support the following ciphers:

- AES128
- AES192
- AES256
- BLOWFISH

openssl (< 1.0) also has support for the following block ciphers.
- CAMELLIA128
- CAMELLIA192
- CAMELLIA256

openssl (> 1.0) also has support for the following block ciphers.
- AES128HMACSHA1
- AES256HMACSHA1

Adding support for these extra block ciphers seems obvious e.g. set the
right NID and entry point to the cipher.
TagsNo tags attached.

Activities

pstorz

pstorz

2013-07-04 13:07

administrator   ~0000487

TODO is creating a regression test.
mvwieringen adm

mvwieringen adm

2013-08-13 03:12

administrator   ~0000621

Fix committed to bareos master branch with changesetid 839.
mvwieringen

mvwieringen

2015-03-25 16:51

developer   ~0001427

Fix committed to bareos2015 bareos-13.2 branch with changesetid 4395.
joergs

joergs

2015-03-25 19:19

developer   ~0001580

Due to the reimport of the Github repository to bugs.bareos.org, the status of some tickets have been changed. These tickets will be closed again.
Sorry for the noise.

Related Changesets

bareos: master d35282ec

2013-05-04 20:48

mvwieringen adm

Ported: N/A

Details Diff
Encryption cipher is hardcoded

The crypto framework support multiple encryption ciphers but the code
hardcodes the cipher to AES128.

The crypto framework support the following ciphers:
- AES128
- AES192
- AES256
- BLOWFISH

openssl (< 1.0) also has support for the following block ciphers.
- CAMELLIA128
- CAMELLIA192
- CAMELLIA256

openssl (> 1.0) also has support for the following block ciphers.
- AES128HMACSHA1
- AES256HMACSHA1

Adding support for these extra block ciphers seems obvious e.g. set the
right NID and entry point to the cipher.

Fixes 0000046: Encryption cipher is hardcoded
Affected Issues
0000046
mod - src/stored/stored_conf.c Diff File
mod - src/lib/crypto.h Diff File
mod - src/lib/crypto.c Diff File
mod - src/filed/filed_conf.h Diff File
mod - src/filed/filed_conf.c Diff File
mod - src/filed/crypto.c Diff File

bareos2015: bareos-13.2 73927aa1

2013-05-04 22:48

mvwieringen

Ported: N/A

Details Diff
Encryption cipher is hardcoded

The crypto framework support multiple encryption ciphers but the code
hardcodes the cipher to AES128.

The crypto framework support the following ciphers:
- AES128
- AES192
- AES256
- BLOWFISH

openssl (< 1.0) also has support for the following block ciphers.
- CAMELLIA128
- CAMELLIA192
- CAMELLIA256

openssl (> 1.0) also has support for the following block ciphers.
- AES128HMACSHA1
- AES256HMACSHA1

Adding support for these extra block ciphers seems obvious e.g. set the
right NID and entry point to the cipher.

Fixes 0000046: Encryption cipher is hardcoded
Affected Issues
0000046
mod - src/filed/crypto.c Diff File
mod - src/filed/filed_conf.c Diff File
mod - src/filed/filed_conf.h Diff File
mod - src/lib/crypto.c Diff File
mod - src/lib/crypto.h Diff File
mod - src/stored/stored_conf.c Diff File

Issue History

Date Modified Username Field Change
2013-01-27 19:43 mvwieringen New Issue
2013-01-27 19:43 mvwieringen Status new => assigned
2013-01-27 19:43 mvwieringen Assigned To => mvwieringen
2013-01-28 09:38 mvwieringen Target Version => 12.4.0
2013-01-28 09:38 mvwieringen Fixed in Version => 12.4.0
2013-01-28 09:38 mvwieringen Additional Information Updated
2013-02-13 18:56 mvwieringen Changeset attached => bareos master bcc11d7c
2013-02-13 18:56 mvwieringen Status assigned => closed
2013-02-13 18:56 mvwieringen Resolution open => fixed
2013-02-13 19:06 mvwieringen Product Version 12.4.0 => 13.1.0
2013-02-13 19:06 mvwieringen Target Version 12.4.0 => 13.1.0
2013-02-13 19:06 mvwieringen Fixed in Version 12.4.0 => 13.1.0
2013-02-13 19:06 mvwieringen Assigned To mvwieringen =>
2013-03-04 10:31 mvwieringen Product Version => 13.1.0
2013-03-04 10:31 mvwieringen Fixed in Version => 13.1.0
2013-05-24 12:52 pstorz Assigned To => pstorz
2013-05-24 12:52 pstorz Status closed => resolved
2013-07-04 13:07 pstorz Note Added: 0000487
2013-07-11 09:00 mvwieringen adm Status resolved => closed
2013-07-11 09:00 mvwieringen adm Assigned To pstorz =>
2013-08-13 03:12 mvwieringen adm Changeset attached => bareos master d35282ec
2013-08-13 03:12 mvwieringen adm Note Added: 0000621
2013-08-13 03:12 mvwieringen adm Assigned To => mvwieringen adm
2013-08-13 03:12 mvwieringen adm Status closed => resolved
2013-08-13 08:58 mvwieringen adm Assigned To mvwieringen adm =>
2013-08-13 08:58 mvwieringen adm Status resolved => closed
2015-03-25 16:51 mvwieringen Changeset attached => bareos2015 bareos-13.2 73927aa1
2015-03-25 16:51 mvwieringen Note Added: 0001427
2015-03-25 16:51 mvwieringen Status closed => resolved
2015-03-25 19:19 joergs Note Added: 0001580
2015-03-25 19:19 joergs Status resolved => closed