From 8a7fddcdd61dfd4dbab5bea776064732972d6cb1 Mon Sep 17 00:00:00 2001 From: Joey Hess Date: Tue, 12 Aug 2014 15:40:21 -0400 Subject: move bug and close it --- ...attempting_to_decrypt_a_non-encrypted_file.mdwn | 22 ++++++++++++++++++++++ ...ent_1_b42ff37be172ba841980c17ad6223e06._comment | 8 ++++++++ ...ent_2_c0325903cdb8d24c72fd4e67e18fbdc8._comment | 14 ++++++++++++++ ...attempting_to_decrypt_a_non-encrypted_file.mdwn | 20 -------------------- ...ent_1_b42ff37be172ba841980c17ad6223e06._comment | 8 -------- ...ent_2_c0325903cdb8d24c72fd4e67e18fbdc8._comment | 14 -------------- 6 files changed, 44 insertions(+), 42 deletions(-) create mode 100644 doc/bugs/shared_cipher_for_S3_attempting_to_decrypt_a_non-encrypted_file.mdwn create mode 100644 doc/bugs/shared_cipher_for_S3_attempting_to_decrypt_a_non-encrypted_file/comment_1_b42ff37be172ba841980c17ad6223e06._comment create mode 100644 doc/bugs/shared_cipher_for_S3_attempting_to_decrypt_a_non-encrypted_file/comment_2_c0325903cdb8d24c72fd4e67e18fbdc8._comment delete mode 100644 doc/forum/shared_cipher_for_S3_attempting_to_decrypt_a_non-encrypted_file.mdwn delete mode 100644 doc/forum/shared_cipher_for_S3_attempting_to_decrypt_a_non-encrypted_file/comment_1_b42ff37be172ba841980c17ad6223e06._comment delete mode 100644 doc/forum/shared_cipher_for_S3_attempting_to_decrypt_a_non-encrypted_file/comment_2_c0325903cdb8d24c72fd4e67e18fbdc8._comment diff --git a/doc/bugs/shared_cipher_for_S3_attempting_to_decrypt_a_non-encrypted_file.mdwn b/doc/bugs/shared_cipher_for_S3_attempting_to_decrypt_a_non-encrypted_file.mdwn new file mode 100644 index 000000000..16fa60718 --- /dev/null +++ b/doc/bugs/shared_cipher_for_S3_attempting_to_decrypt_a_non-encrypted_file.mdwn @@ -0,0 +1,22 @@ +I am trying to S3 as a file store for git annex. I have set up the remote via the following command: + + git annex initremote xxx-s3 type=S3 encryption=shared embedcreds=yes datacenter=EU bucket=xxx-git-annex fileprefix=test/ + +The remote gets set up correctly and creates the directory I want, and adds a annex-uuid file. + +Now when I try to copy a file to the xxx-s3 remote, I get the following error: + + $ git annex add ssl-success-and-failure-with-tl-logs.log + add ssl-success-and-failure-with-tl-logs.log ok + (Recording state in git...) + $ git annex copy ssl-success-and-failure-with-tl-logs.log --to xxx-s3 + copy ssl-success-and-failure-with-tl-logs.log (gpg) gpg: no valid OpenPGP data found. + gpg: decrypt_message failed: eof + + git-annex: user error (gpg ["--batch","--no-tty","--use-agent","--quiet","--trust-model","always","--batch","--passphrase-fd","10","--decrypt"] exited 2) + failed + git-annex: copy: 1 failed + +Any ideas what might be wrong? Is shared cipher broken somehow? + +> [[fixed|done]] --[[Joey]] diff --git a/doc/bugs/shared_cipher_for_S3_attempting_to_decrypt_a_non-encrypted_file/comment_1_b42ff37be172ba841980c17ad6223e06._comment b/doc/bugs/shared_cipher_for_S3_attempting_to_decrypt_a_non-encrypted_file/comment_1_b42ff37be172ba841980c17ad6223e06._comment new file mode 100644 index 000000000..1268d8cd0 --- /dev/null +++ b/doc/bugs/shared_cipher_for_S3_attempting_to_decrypt_a_non-encrypted_file/comment_1_b42ff37be172ba841980c17ad6223e06._comment @@ -0,0 +1,8 @@ +[[!comment format=mdwn + username="https://www.google.com/accounts/o8/id?id=AItOawmAINLSovhWM_4_KrbngOcxduIbBuKv8ZA" + nickname="Nuutti" + subject="comment 1" + date="2014-08-01T09:28:21Z" + content=""" +Sorry, this should probably be in bugs. +"""]] diff --git a/doc/bugs/shared_cipher_for_S3_attempting_to_decrypt_a_non-encrypted_file/comment_2_c0325903cdb8d24c72fd4e67e18fbdc8._comment b/doc/bugs/shared_cipher_for_S3_attempting_to_decrypt_a_non-encrypted_file/comment_2_c0325903cdb8d24c72fd4e67e18fbdc8._comment new file mode 100644 index 000000000..57d5ee0cf --- /dev/null +++ b/doc/bugs/shared_cipher_for_S3_attempting_to_decrypt_a_non-encrypted_file/comment_2_c0325903cdb8d24c72fd4e67e18fbdc8._comment @@ -0,0 +1,14 @@ +[[!comment format=mdwn + username="http://joeyh.name/" + ip="209.250.56.7" + subject="comment 2" + date="2014-08-12T19:37:56Z" + content=""" +This is not gpg trying to decrypt some file from the S3 remote. It is trying to decrypt the creds that embedcreds=yes caused to be stored in the git repo. + +I was able to reproduce this using your command line, with the S3 env vars set while running initremote, and then unset for the copy, which causes git-annex to try to get the creds from the git repo, and decrypt them. + +However, since encryption=shared, the encryption key is stored in the git repo, so there is no point at all in encrypting the creds, also stored in the git repo with that key. So `initremote` doesn't. The creds are simply stored base-64 encoded. + +I have fixed this. I will now move this thread to bugs so I can close it. +"""]] diff --git a/doc/forum/shared_cipher_for_S3_attempting_to_decrypt_a_non-encrypted_file.mdwn b/doc/forum/shared_cipher_for_S3_attempting_to_decrypt_a_non-encrypted_file.mdwn deleted file mode 100644 index bd172b56e..000000000 --- a/doc/forum/shared_cipher_for_S3_attempting_to_decrypt_a_non-encrypted_file.mdwn +++ /dev/null @@ -1,20 +0,0 @@ -I am trying to S3 as a file store for git annex. I have set up the remote via the following command: - - git annex initremote xxx-s3 type=S3 encryption=shared embedcreds=yes datacenter=EU bucket=xxx-git-annex fileprefix=test/ - -The remote gets set up correctly and creates the directory I want, and adds a annex-uuid file. - -Now when I try to copy a file to the xxx-s3 remote, I get the following error: - - $ git annex add ssl-success-and-failure-with-tl-logs.log - add ssl-success-and-failure-with-tl-logs.log ok - (Recording state in git...) - $ git annex copy ssl-success-and-failure-with-tl-logs.log --to xxx-s3 - copy ssl-success-and-failure-with-tl-logs.log (gpg) gpg: no valid OpenPGP data found. - gpg: decrypt_message failed: eof - - git-annex: user error (gpg ["--batch","--no-tty","--use-agent","--quiet","--trust-model","always","--batch","--passphrase-fd","10","--decrypt"] exited 2) - failed - git-annex: copy: 1 failed - -Any ideas what might be wrong? Is shared cipher broken somehow? diff --git a/doc/forum/shared_cipher_for_S3_attempting_to_decrypt_a_non-encrypted_file/comment_1_b42ff37be172ba841980c17ad6223e06._comment b/doc/forum/shared_cipher_for_S3_attempting_to_decrypt_a_non-encrypted_file/comment_1_b42ff37be172ba841980c17ad6223e06._comment deleted file mode 100644 index 1268d8cd0..000000000 --- a/doc/forum/shared_cipher_for_S3_attempting_to_decrypt_a_non-encrypted_file/comment_1_b42ff37be172ba841980c17ad6223e06._comment +++ /dev/null @@ -1,8 +0,0 @@ -[[!comment format=mdwn - username="https://www.google.com/accounts/o8/id?id=AItOawmAINLSovhWM_4_KrbngOcxduIbBuKv8ZA" - nickname="Nuutti" - subject="comment 1" - date="2014-08-01T09:28:21Z" - content=""" -Sorry, this should probably be in bugs. -"""]] diff --git a/doc/forum/shared_cipher_for_S3_attempting_to_decrypt_a_non-encrypted_file/comment_2_c0325903cdb8d24c72fd4e67e18fbdc8._comment b/doc/forum/shared_cipher_for_S3_attempting_to_decrypt_a_non-encrypted_file/comment_2_c0325903cdb8d24c72fd4e67e18fbdc8._comment deleted file mode 100644 index 57d5ee0cf..000000000 --- a/doc/forum/shared_cipher_for_S3_attempting_to_decrypt_a_non-encrypted_file/comment_2_c0325903cdb8d24c72fd4e67e18fbdc8._comment +++ /dev/null @@ -1,14 +0,0 @@ -[[!comment format=mdwn - username="http://joeyh.name/" - ip="209.250.56.7" - subject="comment 2" - date="2014-08-12T19:37:56Z" - content=""" -This is not gpg trying to decrypt some file from the S3 remote. It is trying to decrypt the creds that embedcreds=yes caused to be stored in the git repo. - -I was able to reproduce this using your command line, with the S3 env vars set while running initremote, and then unset for the copy, which causes git-annex to try to get the creds from the git repo, and decrypt them. - -However, since encryption=shared, the encryption key is stored in the git repo, so there is no point at all in encrypting the creds, also stored in the git repo with that key. So `initremote` doesn't. The creds are simply stored base-64 encoded. - -I have fixed this. I will now move this thread to bugs so I can close it. -"""]] -- cgit v1.2.3