]> git.ipfire.org Git - thirdparty/systemd.git/commit
cryptsetup: handle DA lockout/bad PIN properly 37894/head
authorLennart Poettering <lennart@poettering.net>
Thu, 19 Jun 2025 10:28:32 +0000 (12:28 +0200)
committerLennart Poettering <lennart@poettering.net>
Thu, 19 Jun 2025 10:33:52 +0000 (12:33 +0200)
commitdf21ceca25a9b86ab9763be9c8e68aa3107178f5
tree312541e725929c7b4f3c77b5d6677418e8876aea
parent48cb1ad9c3fde47dc40b4345fa2efb2012596768
cryptsetup: handle DA lockout/bad PIN properly

Now that we have recognizable errors, let's print clear error messages
when we try to unlock a TPM slot. And in case of the token plugin
propagate this as ENOANO so that libcryptsetup recognizes this as bad
PIN. (ENOANO is documented as the error to return in that case)

Fixes: #32260
src/cryptsetup/cryptsetup-tokens/luks2-tpm2.c
src/shared/cryptsetup-tpm2.c