kenneth.skovhede@gmail.com
effdba0558
Status: Fixed I have now implemented a password protection control. You can now only view passwords when you enter them. After this, you may reset the passwords, by entering a new one, but you cannot read the existing passwords. To protect against people reading the database, which contains the passwords in clear text, the database is now encrypted by using the standard SQLite encryption method. This is different than what I proposed, but is a much stronger protection than merely scrambling the passwords, and also protects all information (servername, etc). It works by setting an environment variable called DUPLICATI_DB_KEY. When no password is set, Duplicati will use the key "Duplicati_Key_42", ensuring that all databases are encrypted by default. Using a pre-defined publicly known key is obviously not a strong protection, but it protects from casual users attempting to browse the database, and it also protects from string scanners that scan a harddisk for possible passwords. On the first startup, Duplicati will encrypt the database, using the mentioned key. You may want to delete any backup databases that are placed in the same folder as the database. Should you wish to decrypt the database, you can start Duplicati.exe with the commandline option "--unencrypted-database". This will use the current key to decrypt the database, and save it without encryption. Should you wish to change the database password, simply decrypt the database, then change the password via the environment variable, and start Duplicati.exe as normal. The SQLite documentation for the feature is here: http://www.hwaci.com/sw/sqlite/see.html Unfortunately, it does not seem as if any of the free SQLite tools supports this. The SQLite library found on Ubuntu does not support encryption, so I have disabled this feature by default on Linux. If a user has a special compiled version of SQLite, they may use the environment variables as mentioned above. I will write this information into a wiki page as soon asap. git-svn-id: https://duplicati.googlecode.com/svn/trunk@498 59da171f-624f-0410-aa54-27559c288bec
37 lines
1.5 KiB
C#
37 lines
1.5 KiB
C#
using System.Reflection;
|
|
using System.Runtime.CompilerServices;
|
|
using System.Runtime.InteropServices;
|
|
|
|
// General Information about an assembly is controlled through the following
|
|
// set of attributes. Change these attribute values to modify the information
|
|
// associated with an assembly.
|
|
[assembly: AssemblyTitle("Duplicati.Winforms.Controls")]
|
|
[assembly: AssemblyDescription("A collection of Windows.Forms controls for use in Duplicati")]
|
|
[assembly: AssemblyConfiguration("")]
|
|
[assembly: AssemblyCompany("HexaD")]
|
|
[assembly: AssemblyProduct("Duplicati.Winforms.Controls")]
|
|
[assembly: AssemblyCopyright("LGPL, Copyright © HexaD 2010")]
|
|
[assembly: AssemblyTrademark("")]
|
|
[assembly: AssemblyCulture("")]
|
|
|
|
// Setting ComVisible to false makes the types in this assembly not visible
|
|
// to COM components. If you need to access a type in this assembly from
|
|
// COM, set the ComVisible attribute to true on that type.
|
|
[assembly: ComVisible(false)]
|
|
|
|
// The following GUID is for the ID of the typelib if this project is exposed to COM
|
|
[assembly: Guid("a9395545-3088-479e-92df-ef63825331ed")]
|
|
|
|
// Version information for an assembly consists of the following four values:
|
|
//
|
|
// Major Version
|
|
// Minor Version
|
|
// Build Number
|
|
// Revision
|
|
//
|
|
// You can specify all the values or you can default the Build and Revision Numbers
|
|
// by using the '*' as shown below:
|
|
// [assembly: AssemblyVersion("1.0.*")]
|
|
[assembly: AssemblyVersion("1.0.0.0")]
|
|
[assembly: AssemblyFileVersion("1.0.0.0")]
|