Re: PGP and CF
When you run the batch file yourself, you apparently have sufficient rights to do so. The user account that CF is running as does not. You can test this by changing CF to run as your user account since you know that account has no issue running the batch file. If it works, you should be able to adjust the CF service's group memberships to match your account's or change the CF service to run as a user with sufficient privileges. That sounds about right, but since i am a newbie to all this CF and PGP, how do you do that? ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:329886 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: PGP and CF
When you run the batch file yourself, you apparently have sufficient rights to do so. The user account that CF is running as does not. You can test this by changing CF to run as your user account since you know that account has no issue running the batch file. If it works, you should be able to adjust the CF service's group memberships to match your account's or change the CF service to run as a user with sufficient privileges. that sounds about right, but since i am a newbie to all this CF and PGP, how do you do that? ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:329890 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: PGP and CF
That sounds about right, but since i am a newbie to all this CF and PGP, how do you do that? By reading the documentation: http://help.adobe.com/en_US/ColdFusion/9.0/Installing/WSf01dbd23413dda0e-2c56ae6b11fae6200fe-8000.html Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest caliber vendor-authorized instruction at our training centers, online, or onsite. ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:329935 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
PGP and CF
@echo off CLS set myfile=C:\D_Drive\sft\lib0109.zip.pgp set pkey=lib123456 set sento=-o C:\D_Drive\sft\lib0109.zip set mypgppath=C:\D_Drive\sft\pgp.exe call %mypgppath% +force %myfile% -z %pkey% %sentto% using above batch file works fine using it from cf cfexecute name=c:\sft\pgptest.bat outputfile=c:\sft\log.txt/cfexecute gives File is encrypted. Secret key is required to read it. You do not have the secret key needed to decrypt this file. any ideas ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:329780 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: PGP and CF
Is it possible you created the batch file on an encrypted volume that only your use account has access to? . . . . . When you run the batch file yourself, you apparently have sufficient rights to do so. The user account that CF is running as does not. You can test this by changing CF to run as your user account since you know that account has no issue running the batch file. If it works, you should be able to adjust the CF service's group memberships to match your account's or change the CF service to run as a user with sufficient privileges. safo kaskas wrote: @echo off CLS set myfile=C:\D_Drive\sft\lib0109.zip.pgp set pkey=lib123456 set sento=-o C:\D_Drive\sft\lib0109.zip set mypgppath=C:\D_Drive\sft\pgp.exe call %mypgppath% +force %myfile% -z %pkey% %sentto% using above batch file works fine using it from cf cfexecute name=c:\sft\pgptest.bat outputfile=c:\sft\log.txt/cfexecute gives File is encrypted. Secret key is required to read it. You do not have the secret key needed to decrypt this file. any ideas ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:329781 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: PGP and CF
http://www.houseoffusion.com/groups/cf-talk/thread.cfm/threadid:49278 safo kaskas wrote: @echo off CLS set myfile=C:\D_Drive\sft\lib0109.zip.pgp set pkey=lib123456 set sento=-o C:\D_Drive\sft\lib0109.zip set mypgppath=C:\D_Drive\sft\pgp.exe call %mypgppath% +force %myfile% -z %pkey% %sentto% using above batch file works fine using it from cf cfexecute name=c:\sft\pgptest.bat outputfile=c:\sft\log.txt/cfexecute gives File is encrypted. Secret key is required to read it. You do not have the secret key needed to decrypt this file. any ideas ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:329782 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
PGP with CF
We have a need to integrate with another vendor who doesn't have a web service. They said that what they usually do is have the other business store the information in a csv file which is encrypted with PGP. What options are out there for PGP encryption with CF? I did a search and found some information about CFX_PGP, which is a few hundred $, and also Dave Watts mentioning something about having to pay for the license to use PGP on the server. There is a free version of PGP called GnuPG, which is based on the openPGP standard. Theoretically, it should be compatible with PGP. Are there any CF tags or CFCs that exist to work with this? It should be possible to just do it with CFEXECUTE, if a tag is not available, correct? Are there any other secure options besides PGP? One option would be to use a zip file with a password, but as with any password scheme, this is a problem if somebody can get access to the server (they can grab the password from your code and decrypt the files). Russ ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:230879 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4 Donations Support: http://www.houseoffusion.com/tiny.cfm/54
RE: PGP with CF
Looks like there are some java implementations as well. Has anyone successfully used them with CF? -Original Message- From: Russ [mailto:[EMAIL PROTECTED] Sent: Tuesday, January 31, 2006 2:48 PM To: CF-Talk Subject: PGP with CF We have a need to integrate with another vendor who doesn't have a web service. They said that what they usually do is have the other business store the information in a csv file which is encrypted with PGP. What options are out there for PGP encryption with CF? I did a search and found some information about CFX_PGP, which is a few hundred $, and also Dave Watts mentioning something about having to pay for the license to use PGP on the server. There is a free version of PGP called GnuPG, which is based on the openPGP standard. Theoretically, it should be compatible with PGP. Are there any CF tags or CFCs that exist to work with this? It should be possible to just do it with CFEXECUTE, if a tag is not available, correct? Are there any other secure options besides PGP? One option would be to use a zip file with a password, but as with any password scheme, this is a problem if somebody can get access to the server (they can grab the password from your code and decrypt the files). Russ ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:230882 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations Support: http://www.houseoffusion.com/tiny.cfm/54
Re: PGP with CF
I am not the security guru, but the standard way to deal with encryption in CFMX is using the Java Cryptography Extension (JCE), which is included as part of J2SE 1.4 and later. Looks like there are some java implementations as well. Has anyone successfully used them with CF? ~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:230904 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations Support: http://www.houseoffusion.com/tiny.cfm/54
