FS_GETCRYPT(1)
β¨ FS_GETCRYPT(1) β¨
okay so bestie, welcome to the AFS Command Reference π this little page is all about fs_getcrypt, and ngl it's a short one, but it's lowkey important so stay with me π«Ά
πΈ NAME πΈ
fs_getcrypt β it shows you the state of encryption for AFS file transfers. literally that's it, that's the whole job π
π¦ SYNOPSIS π¦
fs getcrypt [-help]
π DESCRIPTION π
so the fs getcrypt command shows the status of network traffic encryption for file traffic in the AFS client π
this encryption applies to file traffic going to and coming from the AFS server, but only for users with valid tokens π like, tokens are the whole vibe here.
the complement of this command is fs setcrypt, which sets the status of encryption on the client. so setcrypt is the main character who changes things, and getcrypt is the bestie who just tells you what's up πβ¨
π CAUTIONS π
okay this part is giving serious, so listen up fr fr:
AFS uses an encryption scheme called fcrypt, which is based on DES but is slightly weaker than DES π because fcrypt and DES are obsolete, the user has to decide how much to trust the encryption. consider using a Virtual Private Network at the IP level if better encryption is needed. no cap, that's the recommendation.
also!! encrypting file traffic requires a token. unauthenticated connections, or connections authorized via IP-based ACLs, will not be encrypted even when encryption is turned on. so don't be out here thinking you're encrypted when you're not π
β¨ OPTIONS β¨
-helpβ prints the online help for this command. and the way that all other valid options are ignored when you use it? iconic. it does one thing and it does it well π
π OUTPUT π
if encryption is enabled, the output is:
Security level is currently crypt (data security).
if encryption if disabled, the output is:
Security level is currently clear.
(yes, the original says "if encryption if disabled" β i'm keeping it exactly as written because that's the rule, bestie π«Ά)
so basically: crypt = cute and secure, clear = wide open, no protection, we don't love that π
π EXAMPLES π
there is only one way to invoke fs getcrypt. one. single. path. main character energy:
% fs getcrypt
β PRIVILEGE REQUIRED β
no special privileges are required for this command π you literally just run it. slay.
π§ SEE ALSO π§
fs_setcrypt(1)β the one that actually sets the encryption status- the description of the fcrypt encryption mechanism at <http://surfvi.com/~ota/fcrypt-paper.txt> β go read it if you wanna know more about fcrypt iykyk π
π COPYRIGHT π
Copyright 2007 Jason Edgecombe <jason@rampaginggeek.com>
this documentation is covered by the BSD License as written in the doc/LICENSE file. this man page was written by Jason Edgecombe for OpenAFS π
and that's the whole page babes π brought to you by OpenAFS, dated 2026-07-27, and yeah that's the FS_GETCRYPT(1) vibe check complete. stay encrypted (if you have a token!!) πΈβ¨π¦
π¦ where this page comes from
- ubuntu stonking: openafs-client 1.8.16.1-1
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms