Browse Source

fix(crypt-gpg): execute --card-status on each try

If the gpg card is not inserted before the --card-status command is
executed then the public key is not linked with the card. Therefore,
the LUKS partition cannot be decrypted. To solve this, the
--card--status command is executed on each try.
master
LinkTed 4 years ago committed by Jóhann B. Guðmundsson
parent
commit
6610093698
  1. 2
      modules.d/91crypt-gpg/crypt-gpg-lib.sh

2
modules.d/91crypt-gpg/crypt-gpg-lib.sh

@ -51,7 +51,7 @@ gpg_decrypt() { @@ -51,7 +51,7 @@ gpg_decrypt() {
fi

ask_for_password \
--cmd "gpg $opts --decrypt $mntp/$keypath" \
--cmd "GNUPGHOME=$gpghome gpg --card-status --no-tty > /dev/null 2>&1; gpg $opts --decrypt $mntp/$keypath" \
--prompt "${inputPrompt:-Password ($keypath on $keydev for $device)}" \
--tries 3 --tty-echo-off


Loading…
Cancel
Save