On 04/04/2013 05:41 AM, Salz, Rich wrote:
read -sp "Enter path to key: " key
read -sp "Enter IV: " iv
openssl enc -e -aes256 -K $key -iv $iv -in ... -out ...
That doesn't help; the key is STILL in the argv list and can be seen by doing a
ps.
/r$
Your right, my apologies. Doesn't look like this exists after reviewing
the doc @ https://www.openssl.org/docs/apps/openssl.html
As a work around using the openssl shell. I was thinking of ps when
using options to MySQL which does mask sensitive input from ps but not
from /dev/mem.
--
Principal Security Engineer
Akamai Technology
Cambridge, MA
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager majord...@openssl.org
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager majord...@openssl.org