Status: Fixed
I have now implemented a password protection control.
You can now only view passwords when you enter them.
After this, you may reset the passwords, by entering a
new one, but you cannot read the existing passwords.
To protect against people reading the database,
which contains the passwords in clear text, the
database is now encrypted by using the standard
SQLite encryption method. This is different
than what I proposed, but is a much stronger
protection than merely scrambling the passwords,
and also protects all information (servername, etc).
It works by setting an environment variable
called DUPLICATI_DB_KEY. When no password
is set, Duplicati will use the key "Duplicati_Key_42",
ensuring that all databases are encrypted by default.
Using a pre-defined publicly known key is obviously
not a strong protection, but it protects from casual
users attempting to browse the database, and it also
protects from string scanners that scan a harddisk
for possible passwords.
On the first startup, Duplicati will encrypt the database,
using the mentioned key. You may want to delete any backup
databases that are placed in the same folder as the database.
Should you wish to decrypt the database, you can start
Duplicati.exe with the commandline option "--unencrypted-database".
This will use the current key to decrypt the database, and save it
without encryption.
Should you wish to change the database password, simply decrypt the
database, then change the password via the environment variable,
and start Duplicati.exe as normal.
The SQLite documentation for the feature is here:
http://www.hwaci.com/sw/sqlite/see.html
Unfortunately, it does not seem as if any
of the free SQLite tools supports this.
The SQLite library found on Ubuntu
does not support encryption, so I have disabled
this feature by default on Linux.
If a user has a special compiled version
of SQLite, they may use the environment
variables as mentioned above.
I will write this information into a wiki
page as soon asap.
git-svn-id: https://duplicati.googlecode.com/svn/trunk@498 59da171f-624f-0410-aa54-27559c288bec
Status: Fixed
I have now fixed it so the UI sets the required option automatically.
I also fixed a minor typo "sfpt" -> "sftp".
git-svn-id: https://duplicati.googlecode.com/svn/trunk@486 59da171f-624f-0410-aa54-27559c288bec
Fixed issue #215.
If the user chooses EU buckets, bucketnames that are not valid hostname labels will be rejected.
If the user does not choose EU buckets, a warning is displayed for bucketnames that are not valid hostname labels, and the setup is switched to the path-style calling method.
Fixed issue #214.
There were multiple issues with entering a bucket/folder type path, those should now be resolved.
Fixed issue #212.
The UI and commandline now supports Reduced Redundancy Storage.
git-svn-id: https://duplicati.googlecode.com/svn/trunk@430 59da171f-624f-0410-aa54-27559c288bec
This was based on the idea that the interfaces should remain static.
I hope this change is enough to ensure stable interfaces until release 1.2.
Overview of changes:
Moved all interfaces into the same dll.
Encryption and compression is now plugable modules, just as the backends.
Encryption/compression can now register an UI.
Encryption now uses AESCrypt as a default.
GPG does not default to using the --armor option.
Added support for generic modules, but none are written yet.
Added support for plugable settings pages in the "Options" dialog.
Fixed issue #148.
Duplicati now uses AESCrypt as the default encryption format.
Fixed issue #199.
GPG now supports custom commandline options.
Fixed issue #207.
Encryption modules are now plugable.
Fixed issue #118.
S3 credentials are now stored.
Fixed issue #151.
Backends can now register system wide options.
git-svn-id: https://duplicati.googlecode.com/svn/trunk@427 59da171f-624f-0410-aa54-27559c288bec
Fixed issue #182.
Fixed an error with the commandline version reported in the forum.
Added improved error output.
git-svn-id: https://duplicati.googlecode.com/svn/trunk@417 59da171f-624f-0410-aa54-27559c288bec
I am unable to reproduce the error with the "test connection" that you describe.
Was it with a particular bucket/folder name?
I have also added some logic to ensure that it does not repeatedly ask to prefix the username.
git-svn-id: https://duplicati.googlecode.com/svn/trunk@406 59da171f-624f-0410-aa54-27559c288bec
Also changed the default url behavior to use api.mosso.com as the hostname to avoid problems with container names that are not valid hostnames.
git-svn-id: https://duplicati.googlecode.com/svn/trunk@405 59da171f-624f-0410-aa54-27559c288bec
Added a warning and auto-fix method to remove leading slashes from the path part of the WEBDAV UI.
git-svn-id: https://duplicati.googlecode.com/svn/trunk@396 59da171f-624f-0410-aa54-27559c288bec
This was a timeout bug that was triggered after 100 seconds.
Also added a timeout control to the WEBDAV and FTP backends, in case they have the same bug.
Made a few string localizable in the CloudFiles backend.
Added the code to do local MD5 generation, but commented it out as there are issues with this.
Added Duplicati version string to the WEBDAV backend user agent identification.
git-svn-id: https://duplicati.googlecode.com/svn/trunk@394 59da171f-624f-0410-aa54-27559c288bec
Fixed an issue with + in filenames.
Added spaces and + to the ExtendedChars of the backend tester.
git-svn-id: https://duplicati.googlecode.com/svn/trunk@390 59da171f-624f-0410-aa54-27559c288bec
Fixed various items where ".Peek() < 0" was used instead of ".EndOfStream".
Added transfer time to the SSH List command, to support larger lists.
git-svn-id: https://duplicati.googlecode.com/svn/trunk@372 59da171f-624f-0410-aa54-27559c288bec
Added a small application to fix future issues with embedded escape codes.
Also fixed some encoding issues with the pt-BR files.
git-svn-id: https://duplicati.googlecode.com/svn/trunk@298 59da171f-624f-0410-aa54-27559c288bec
