17 minutes ago, skobix said:

So the test seems to work ?

Indeed. Something doesn't add up, however you can now rest assured this is fixable (worst case I'll guide you through doing this using bare tools - now that we know you can open the box). But I need to figure out what's messing this up. Can you please do this (with your actual key of course):

 

echo '123@your!key' > k1
echo -n '123@your!key' > k2

cryptsetup luksOpen --test-passphrase --key-file k1 /dev/md1p1
cryptsetup luksOpen --test-passphrase --key-file k2 /dev/md1p1

and let me know which of them, if any, worked (i.e. gave no error message as in the previous test)?

1 hour ago, doron said:

Indeed. Something doesn't add up, however you can now rest assured this is fixable (worst case I'll guide you through doing this using bare tools - now that we know you can open the box). But I need to figure out what's messing this up. Can you please do this (with your actual key of course):

Ok, that sounds good 

 

None of your variants worked.

Here the results:

 

root@Unraid-Srv01:~# ls
k1  k2
root@Unraid-Srv01:~# cryptsetup luksOpen --test-passphrase --key-file k1 /dev/md1p1
No key available with this passphrase.
root@Unraid-Srv01:~# cryptsetup luksOpen --test-passphrase --key-file k2 /dev/md1p1
No key available with this passphrase.

 

If it helps, here the result of diff: 

 

oot@Unraid-Srv01:/mnt/user/Downloads# diff k1 k2
1c1
< 4v3ZJLEPTfykmcXgRaZFZzhTjDpHkb7RA7RGnkNm*cCw!N!fuPceTjXD@_Rk3ugpRyCBZNfdz86bg-XrMniBgMFEHn_d@YhZG8@-
---
> 4v3ZJLEPTfykmcXgRaZFZzhTjDpHkb7RA7RGnkNm*cCw!N!fuPceTjXD@_Rk3ugpRyCBZNfdz86bg-XrMniBgMFEHn_d@YhZG8@-
\ No newline at end of file
root@Unraid-Srv01:/mnt/user/Downloads# 

 

I found the problem and a fix has been posted (plugin). 

 

Essentially, LUKS/cryptsetup limits typed-in passphrases to 512 bytes, and silently truncates anything longer; but only with typed-in passphrases, not with phrases passed via key files. So basically if you type in an 800-byte string, your actual key is made of just the first 512 bytes of that. If you pass the same 800-byte key via a key file, all 800 bytes are used to generate your key, which is obviously different.

 

The update makes the tool's behavior consistent with cryptsetup and WebGui. Typed/pasted passphrases are truncated at 512 bytes, keyfiles are used as they are.

 

Thanks @skobixfor helping with this!

Edited May 26, 20242 yr by doron
Fix has been posted

Hi!

I was curious if this is still an active plugin, I don't see it in Apps listings and my current one seems to show an error when I try to view any updates for plugins on my server.

1 minute ago, Outlawtorn said:

Hi!

I was curious if this is still an active plugin, I don't see it in Apps listings and my current one seems to show an error when I try to view any updates for plugins on my server.

This function is built in to Unraid. Settings -> Disk Settings.

Edited March 13Mar 13 by Niklas

4 minutes ago, Niklas said:

This function is built in to Unraid. Settings -> Disk Settings.

Wow very cool, thanks!

I wasn't aware of that either :-) So, time to wrap up this plugin. Thanks for playing.