Everbrent/cis
8
0 Fork 0
mirror of https://github.com/m8tin/cis.git synced 2026-11-02 14:17:24 +01:00
Code Issues Packages Projects Releases Wiki Activity

Better openssl configuration

Browse Source
This commit is contained in:
m8in committed 2026-09-28 21:01:40 +02:00
1 parent 1a759dde07
commit 342e835009
1 file changed
+2 -2
Download Patch File Download Diff File Expand all files Collapse all files
script/host/tpm/secrets.sh
+2 -2
View File
@@ -87,7 +87,7 @@ function seal() {
-r "${AES_STORE_FILE}" \ -r "${AES_STORE_FILE}" \
-u "${AES_STORE_FILE}.pub" \ -u "${AES_STORE_FILE}.pub" \
-c "${TMPDIR%/}/safe.ctx" -c "${TMPDIR%/}/safe.ctx"
openssl enc -aes-256-cbc -salt -pbkdf2 \ openssl enc -aes-256-cbc -md sha256 -pbkdf2 -iter 600000 -salt \
-in <(tar -czvf - "${SECRETS_PLAIN_PATH%/}/"*) \ -in <(tar -czvf - "${SECRETS_PLAIN_PATH%/}/"*) \
-out "${SECRETS_STORE_FILE}.tar.gz.aes" \ -out "${SECRETS_STORE_FILE}.tar.gz.aes" \
-pass file:<(tpm2_unseal -c "${TMPDIR%/}/safe.ctx") -pass file:<(tpm2_unseal -c "${TMPDIR%/}/safe.ctx")
@@ -106,7 +106,7 @@ function unseal() {
-r "${AES_STORE_FILE}" \ -r "${AES_STORE_FILE}" \
-u "${AES_STORE_FILE}.pub" \ -u "${AES_STORE_FILE}.pub" \
-c "${TMPDIR%/}/safe.ctx" -c "${TMPDIR%/}/safe.ctx"
openssl enc -d -aes-256-cbc -pbkdf2 \ openssl enc -d -aes-256-cbc -md sha256 -pbkdf2 -iter 600000 \
-in "${SECRETS_STORE_FILE}.tar.gz.aes" \ -in "${SECRETS_STORE_FILE}.tar.gz.aes" \
-out - \ -out - \
-pass file:<(tpm2_unseal -c "${TMPDIR%/}/safe.ctx") | tar -xzvf - -C / -pass file:<(tpm2_unseal -c "${TMPDIR%/}/safe.ctx") | tar -xzvf - -C /