Re: security/veracrypt

On Sat, Dec 02 2017, Antoine Jacoutot <ajacoutot@bsdfrog.org> wrote:
> On Fri, Dec 01, 2017 at 10:56:26PM +0000, joshua stein wrote:
>> I had a need to access a VeraCrypt/TrueCrypt encrypted volume, so I
>> made a port of VeraCrypt.
>>
>> Our wxWidgets is too old to build the GUI stuff, but the
>> command-line program and FUSE service work enough to access a volume
>> from a USB disk or create a new volume stored as a file.
>>
>> The veracrypt utility accesses the encrypted volume/file and uses
>> FUSE to present a disk that has a single large "volume" file on it,
>> then vnconfig is used to mount that volume file as a loopback disk
>> which by default has a FAT filesystem on it.
>>
>> I don't really have a need for this anymore, so I'm making this port
>> available in case anyone else wants to run with it and possibly
>> import it.
>>
>> Ideally our wxWidgets can be updated to 2.9+ so the GUI parts can be
>> built and other patches removed, and then upstreamed to VeraCrypt so
>
> Why not start from the beginning and update wxWidgets ?

I don't think veracrypt import should be delayed because of wxWidgets.
We know since years that our wxwidgets port is outdated.

> We know it is outdated yet we still add patches to cope with it. Let's just fix
> the real issue and update... This will also make mpi@ happy !

An update has been posted to ports@ before the 6.2 lock:

https://marc.info/?l=openbsd-ports&m=150478114211607&w=2

If people start working on this, please let's coordinate to avoid
duplicate work. ;)

--
jca | PGP : 0x1524E7EE / 5135 92C1 AD36 5293 2BDF DDCC 0DFA 74AE 1524 E7EE