Question about upgrading cryptsetup

titopoquito · 07-19-2014, 08:49 AM

Hi all,

I was thinking about installing and testing zuluCrypt as a future replacement for TrueCrypt. Well, I got further, installed tc-play and zuluCrypt. The latter insists though that it needs a newer cryptsetup to be able to open TrueCrypt containers. The newer cryptsetup's (1.6.5) library has the same major version number (4) but another minor version number (4.6.0).

So my question is: Any (positive/negative) experiences here with newer cryptsetup? Do I have to expect something to break?

metaschima · 07-19-2014, 09:28 PM

I don't expect it to cause any problems, because nothing uses libcryptsetup that I can detect. I wrote a script to check what depends on what and only cryptsetup depends on libcryptsetup and they are both in the same package.

mlslk31 · 07-20-2014, 01:29 PM

Should be OK, just recompile what you need to recompile. Expect things to break in the meantime. Start simple. Test. Be careful of the extra configure flags, especially if you wish to upgrade libgcrypt as well. If the kernel needs any special crypto settings, be sure those are enabled as well. When things break, they have a tendency to not point to one thing in particular. If you're not keeping notes, keep notes. It will keep some hair from turning gray.

titopoquito · 07-20-2014, 04:57 PM

Thanks for the answers so far. It's good to know that libcryptosetup is not linked to any other program or library. libgcrypt is my main worry indeed, and I had thought that someone had already tested to upgrade them. Maybe I'll test it in VirtualBox first just to make sure. Oh, and unfortunately there is not that much hair left that could turn gray/grey, but I promise to keep notes in case I have to fiddle with kernel settings

metaschima · 07-20-2014, 05:05 PM

Many things depend on libgcrypt, so that is much more likely to break something. Here's the list I get for it:

Code:

/sbin/crda
/sbin/cryptsetup
/sbin/regdbdump
/usr/bin/SDLvncviewer
/usr/bin/cifsdd
/usr/bin/dbwrap_tool
/usr/bin/dirmngr
/usr/bin/eventlogadm
/usr/bin/gcr-viewer
/usr/bin/gentest
/usr/bin/gnome-keyring-3
/usr/bin/gnome-keyring-daemon
/usr/bin/gpg-agent
/usr/bin/gpg2
/usr/bin/gpgkey2ssh
/usr/bin/gpgsm
/usr/bin/gpgv2
/usr/bin/kbxutil
/usr/bin/linuxvnc
/usr/bin/locktest
/usr/bin/masktest
/usr/bin/mtp-albumart
/usr/bin/mtp-albums
/usr/bin/mtp-connect
/usr/bin/mtp-detect
/usr/bin/mtp-emptyfolders
/usr/bin/mtp-files
/usr/bin/mtp-filetree
/usr/bin/mtp-folders
/usr/bin/mtp-format
/usr/bin/mtp-getplaylist
/usr/bin/mtp-hotplug
/usr/bin/mtp-newplaylist
/usr/bin/mtp-playlists
/usr/bin/mtp-reset
/usr/bin/mtp-thumb
/usr/bin/mtp-tracks
/usr/bin/mtp-trexist
/usr/bin/net
/usr/bin/nm-applet
/usr/bin/nmblookup
/usr/bin/ntlm_auth
/usr/bin/pdbedit
/usr/bin/profiles
/usr/bin/regdiff
/usr/bin/regpatch
/usr/bin/regshell
/usr/bin/regtree
/usr/bin/rpcclient
/usr/bin/samba-regedit
/usr/bin/secret-tool
/usr/bin/sharesec
/usr/bin/smbcacls
/usr/bin/smbclient
/usr/bin/smbclient4
/usr/bin/smbcontrol
/usr/bin/smbcquotas
/usr/bin/smbget
/usr/bin/smbpasswd
/usr/bin/smbspool
/usr/bin/smbstatus
/usr/bin/smbta-util
/usr/bin/smbtorture
/usr/bin/smbtree
/usr/bin/testparm
/usr/bin/xsltproc
/usr/sbin/nmbd
/usr/sbin/samba
/usr/sbin/smbd
/usr/sbin/winbindd

titopoquito · 07-20-2014, 05:26 PM

Quote:

Originally Posted by metaschima

Many things depend on libgcrypt, so that is much more likely to break something. Here's the list I get for it:

Code:

/sbin/crda
/sbin/cryptsetup
/sbin/regdbdump
/usr/bin/SDLvncviewer
/usr/bin/cifsdd
/usr/bin/dbwrap_tool
...

Oh wow, that peace of software will not feel alone I guess. Some more work to do I guess. Thanks a lot metaschima, that info is very appreciated!