lbu: Cipher aes-256-cbc is not supported
With Alpine 3.11.0 (I have 3.11.0rc3 rpi armhf but upgraded packages with apk update && apk upgrade):
# Uncomment the row below to encrypt config by default
ENCRYPTION=$DEFAULT_CIPHER
If encryption is uncommented, trying to lbu commit or lbu package raises this error:
# lbu package .
Cipher aes-256-cbc is not supported
It is because the check_openssl is not compatible with current openssl version:
# verify we have openssl if we want to encrypt
check_openssl() {
[ -z "$ENCRYPTION" ] && return 0
OPENSSL=$(which openssl 2>/dev/null) || die "openssl was not found"
$OPENSSL enc -ciphers | grep "^$ENCRYPTION$" > /dev/null \
|| die "Cipher $ENCRYPTION is not supported"
}
Probably the format has changed
# openssl enc -ciphers|head -n5
Supported ciphers:
-aes-128-cbc -aes-128-cfb -aes-128-cfb1
-aes-128-cfb8 -aes-128-ctr -aes-128-ecb
-aes-128-ofb -aes-192-cbc -aes-192-cfb
-aes-192-cfb1 -aes-192-cfb8 -aes-192-ctr
After commenting out the check, there's a different warning
# lbu package -p asdf .
*** WARNING : deprecated key derivation used.
Using -iter or -pbkdf2 would be better.
Probably would make sense to upgrade the key derivation while fixing this but does that create a compatibility problem? I didn't test.