5 # This file and its contents are supplied under the terms of the
6 # Common Development and Distribution License ("CDDL"), version 1.0.
7 # You may only use this file in accordance with the terms of version
10 # A full copy of the text of the CDDL should have accompanied this
11 # source. A copy of the CDDL is also available via the Internet at
12 # http://www.illumos.org/license/CDDL.
18 # Copyright (c) 2017, Datto, Inc. All rights reserved.
21 . $STF_SUITE/include/libtest.shlib
25 # ZFS should not perform unencrypted sends from encrypted datasets
29 # 1. Create an encrypted dataset
30 # 2. Snapshot the dataset
31 # 3. Unload the dataset key
32 # 4. Verify sending the stream fails
35 verify_runnable "both"
39 datasetexists $TESTPOOL/$TESTFS1 && \
40 log_must zfs destroy -r $TESTPOOL/$TESTFS1
45 log_assert "ZFS should not perform unencrypted sends from encrypted datasets" \
48 typeset passphrase="password"
49 typeset snap="$TESTPOOL/$TESTFS1@snap"
51 log_must eval "echo $passphrase | zfs create -o encryption=on" \
52 "-o keyformat=passphrase $TESTPOOL/$TESTFS1"
53 log_must zfs snapshot $snap
54 log_must zfs unmount $TESTPOOL/$TESTFS1
55 log_must zfs unload-key $TESTPOOL/$TESTFS1
56 log_mustnot eval "zfs send $snap > /dev/null"
58 log_pass "ZFS does not perform unencrypted sends from encrypted datasets" \