1#!/bin/ksh -p
2#
3# This file and its contents are supplied under the terms of the
4# Common Development and Distribution License ("CDDL"), version 1.0.
5# You may only use this file in accordance with the terms of version
6# 1.0 of the CDDL.
7#
8# A full copy of the text of the CDDL should have accompanied this
9# source.  A copy of the CDDL is also available via the Internet at
10# http://www.illumos.org/license/CDDL.
11#
12
13#
14# Copyright (c) 2018 by Datto Inc.
15# All rights reserved.
16#
17
18. $STF_SUITE/include/libtest.shlib
19. $STF_SUITE/tests/functional/fault/fault.cfg
20
21#
22# DESCRIPTION:
23# Test that injected decryption errors are handled correctly.
24#
25# STRATEGY:
26# 1. Create an encrypted dataset with a test file
27# 2. Inject decryption errors on the file 20% of the time
28# 3. Read the file to confirm that errors are handled correctly
29# 4. Confirm that the decryption injection was added to the ZED logs
30#
31
32log_assert "Testing that injected decryption errors are handled correctly"
33
34function cleanup
35{
36	log_must zinject -c all
37	default_cleanup_noexit
38}
39
40log_onexit cleanup
41
42default_mirror_setup_noexit $DISK1 $DISK2
43log_must zfs set compression=off $TESTPOOL
44log_must eval "echo 'password' | zfs create -o encryption=on \
45	-o keyformat=passphrase -o keylocation=prompt $TESTPOOL/fs"
46mntpt=$(get_prop mountpoint $TESTPOOL/fs)
47log_must mkfile 32M $mntpt/file1
48
49log_must zinject -a -t data -e decrypt -f 20 $mntpt/file1
50log_must zfs umount $TESTPOOL/fs
51log_must zfs mount $TESTPOOL/fs
52
53log_mustnot eval "cat $mntpt/file1 > /dev/null"
54# Events are not supported on FreeBSD
55if ! is_freebsd; then
56	log_must eval "zpool events $TESTPOOL | grep -q 'authentication'"
57fi
58
59log_pass "Injected decryption errors are handled correctly"
60