Comment 10 for bug 234818

Revision history for this message
Valient Gough (vgough) wrote :

My apologies. Could the Hardy packages have been built with an old version of OpenSSL (pre 0.9.7)?

Encfs 1.0 switched to using new EVP methods in OpenSSL, which required OpenSSL 0.9.7 or later. If encfs was built with earlier versions of OpenSSL, or versions with broken EVP interfaces (?), then only the pre-1.0 cipher would be available.

It hadn't occurred to me that new filesystems were still being created using pre-1.0 settings. Encfs should have been generating a big run-time warning all these years to warn people that they were using deprecated options, rather then a small compile-time warning which only maintainers would have seen.