Dear sirs,

I have been using openssl for some personal home-use encryption, and 
recently overwrote an input file while using openssl bf accidentally 
because bash's autocompletion put in the input file's name when I 
started typing the same name (minus bf at the end) for the output and I 
carelessly hit enter.

For me it was not a big issue since those files were recoverable from 
elsewhere but there are probably people using openssl for more important 
things and they might have a serious problem if such a thing happened.

So I request that openssl bf and other such openssl commands must check 
whether the input and output filenames are same and in such case give 
the user a warning and ask whether the user wants the output file to 
have the same name by deleting the input file after processing.

If yes, then use a temporary file name till processing is done and then 
delete the input file and do something like mv tempfile origfile.

If no, then abort.

Since this is not a technical problem but an interface feature request I 
did not include the make report output etc (since I am using a pre-built 
openssl from my distro).

Thank you.

Shriramana Sharma.

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       openssl-dev@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to