discover: Recognise and open LUKS encrypted partitions

[petitboot] / discover / discover-server.c

diff --git a/discover/discover-server.c b/discover/discover-server.c
index 23d6113ec7ce5de5675feff0e761745d854c2442..1a332cbfbc76e8d5ef720158778308d066fd45bd 100644 (file)
--- a/discover/discover-server.c
+++ b/discover/discover-server.c
@@ -365,13 +365,29 @@ static int discover_server_handle_auth_message(struct client *client,
                                        _("Password updated successfully"));
                }
                break;
+       case AUTH_MSG_DECRYPT:
+               if (!client->can_modify) {
+                       pb_log("Unauthenticated client tried to open encrypted device %s\n",
+                                       auth_msg->decrypt_dev.device_id);
+                       rc = -1;
+                       status->type = STATUS_ERROR;
+                       status->message = talloc_asprintf(status,
+                                       _("Must authenticate before opening encrypted device"));
+                       break;
+               }
+
+               device_handler_open_encrypted_dev(client->server->device_handler,
+                               auth_msg->decrypt_dev.password,
+                               auth_msg->decrypt_dev.device_id);
+               break;
        default:
                pb_log("%s: unknown op\n", __func__);
                rc = -1;
                break;
        }
 
-       write_boot_status_message(client->server, client, status);
+       if (status->message)
+               write_boot_status_message(client->server, client, status);
        talloc_free(status);
 
        return rc;