I am using afio and gpg as follows to create an archive that has each
element encrypted asymmetrically to a user, i.e. with no key needed to
encrypt. Almost all the time, it works perfectly. But for some directories,
it fails about half of the time on about 10 percent of the files (which
files fail changes each time).
Here is the relevant part of my script:
cat myfiles | afio -oz -Z -U \
-P gpg -Q -e \
-Q --no-options \
-Q --always-trust \
-Q --no-auto-check-trustdb \
-Q --batch -Q -vv \
-Q --recipient -Q myuser \
-Q --homedir -Q myhomedir \
-3 0 \
myarchive
The -vv is just for debugging, so that each attempt at encryption prints
something. Here is the output of that. The first stanza is a file that
worked, and the second is one that did not.
Mostly it does work. I hope you can see why I'm concerned about file
integrity with these programs. At first, I thought maybe gpg's trust
checking stuff might cause the intermittence, but I fixed that and it
continued. These files are not really special in any obvious way. They are
less than 200MiB. It is only some files, and apparently ones that are above
say 1MB, like some of the files in /var/lib/dpkg.
But which program? How do I debug further? I am not a C programmer.
Thanks.
Output:
gpg: using secondary key E475487A instead of primary key 5F49980B
gpg: key 5F49980B: accepted as trusted key
gpg: No trust check due to --always-trust option
gpg: reading from `[stdin]'
gpg: writing to stdout
gpg: ELG-E/AES encrypted for: "E475487A test"
gpg: using secondary key E475487A instead of primary key 5F49980B
gpg: key 5F49980B: accepted as trusted key
gpg: No trust check due to --always-trust option
gpg: reading from `[stdin]'
gpg: writing to stdout
gpg: ELG-E/AES encrypted for: "E475487A test"
afio: "/home/judy/hoka/data--xyzzy-isnotco/soft--16740.q.z": Error zipping
file, written damaged copy to archive.
Whaaaaaaat? When I decrypt, gpg complains about corruption. Why
intermittent?
I am using debian sarge, ext3, software raid mirroring, linux 2.4.19ac4.
--
judy m. down
<[EMAIL PROTECTED]>
--------------------------------------------------------------------
Get your own FREE local e-mail address at http://www.blackburnmail.com/
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
