Git-Mirrors/qubes-doc
1
0
Fork 0
mirror of https://github.com/QubesOS/qubes-doc.git synced 2024-10-01 01:25:40 -04:00
Code Issues Packages Projects Releases Wiki Activity

Emergency restore v2/v3: hardcode MD5 algo for decryption

Browse Source 
QubesOS/qubes-issues#7852
This commit is contained in:
Rusty Bird 2022-11-04 14:12:43 +00:00
parent 5b2471f884
commit 682508f84d
No known key found for this signature in database
GPG Key ID: 469D78F47AAF2ADF
2 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
user/how-to-guides/backup-emergency-restore-v2.md
View File

@ -67,14 +67,14 @@ encrypted and compressed.
4. Decrypt the `private.img` file. 4. Decrypt the `private.img` file.
~~~ ~~~
[user@restore vm1]$ openssl enc -d -pass pass:"$backup_pass" -aes-256-cbc -in private.img.000 -out private.img.dec.000 [user@restore vm1]$ openssl enc -d -md MD5 -pass pass:"$backup_pass" -aes-256-cbc -in private.img.000 -out private.img.dec.000
~~~ ~~~
**Note:** For multi-part files, a loop can be used: **Note:** For multi-part files, a loop can be used:
~~~ ~~~
find -name 'private.img.*' | sort -V | while read f; do find -name 'private.img.*' | sort -V | while read f; do
openssl enc -d -pass pass:"$backup_pass" -aes-256-cbc -in $f -out openssl enc -d -md MD5 -pass pass:"$backup_pass" -aes-256-cbc -in $f -out
${f/.img/.img.dec} ${f/.img/.img.dec}
done done
~~~ ~~~

2
user/how-to-guides/backup-emergency-restore-v3.md
View File

@ -98,7 +98,7 @@ any GNU/Linux system with the following procedure.
6. Decrypt the `private.img` file. 6. Decrypt the `private.img` file.
[user@restore vm1]$ find -name 'private.img.*[0-9]' | sort -V | xargs cat | openssl enc -d -pass pass:"$backup_pass" -aes-256-cbc -out private.img.dec [user@restore vm1]$ find -name 'private.img.*[0-9]' | sort -V | xargs cat | openssl enc -d -md MD5 -pass pass:"$backup_pass" -aes-256-cbc -out private.img.dec
**Note:** If your backup was encrypted with a cipher algorithm other than **Note:** If your backup was encrypted with a cipher algorithm other than
`aes-256-cbc`, you must substitute the correct cipher command. This `aes-256-cbc`, you must substitute the correct cipher command. This