Package: tripwire
Version: 2.4.3.7-3+b3
Severity: normal

Dear Maintainer,

I've installed tripwire, opting out of key creation during installation,
and am creating my keys with twadmin.  When I run twadmin, and provide a
64-character passphrase, it prints the request for verification, but
immediately skips to rejecting and re-requesting it:

---------- start output ---------------
root@deb11-tripwire:/etc/tripwire# twadmin -m G -S /etc/tripwire/site.key

(When selecting a passphrase, keep in mind that good passphrases typically
have upper and lower case letters, digits and punctuation marks, and are
at least 8 characters in length.)

Enter the site keyfile passphrase:HERE I PROVIDE EXACTLY 64 CHARACTERS OF 
ALPHANUMERIC INPUT
Verify the site keyfile passphrase:
Incorrect site passphrase.
Enter the site keyfile passphrase:
---------- start output ---------------

This seems to be true whether I cut-and-paste the passphrase, or type it
by hand.  63 characters and 65 characters are both fine; it only happens
with 64.


-- System Information:
Debian Release: 11.0
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 5.10.0-8-amd64 (SMP w/1 CPU thread)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_GB:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages tripwire depends on:
ii  debconf [debconf-2.0]                      1.5.77
ii  exim4-daemon-light [mail-transport-agent]  4.94.2-7

tripwire recommends no packages.

tripwire suggests no packages.

-- debconf information:
* tripwire/installed:
  tripwire/email-report:
  tripwire/rebuild-config: true
  tripwire/rebuild-policy: true
* tripwire/use-localkey: false
  tripwire/site-passphrase-incorrect: false
  tripwire/upgrade: true
  tripwire/change-in-default-policy:
  tripwire/local-passphrase-incorrect: false
* tripwire/use-sitekey: false
  tripwire/broken-passphrase:

Reply via email to