Re: Entering a passphrase interactively in a runit script

2016-05-26 Thread Charles Duffy
...if the goal is to avoid storing a private key in plaintext, can that private key live in a hardware store (PKCS#11, TPM, etc) instead? On Thu, May 26, 2016 at 8:49 AM Steve Litt wrote: > On Thu, 26 May 2016 14:16:16 +0100 > Jonathan de Boyne Pollard

Re: Entering a passphrase interactively in a runit script

2016-05-26 Thread Steve Litt
On Thu, 26 May 2016 14:16:16 +0100 Jonathan de Boyne Pollard wrote: > Christophe-Marie Duquesne: > > Any idea how to proceed? > > You're running a daemon. It really shouldn't have an interactive > user interface. Remember the lessons that resulted

Re: Entering a passphrase interactively in a runit script

2016-05-26 Thread Jan Pobrislo
On Wed, 25 May 2016 12:50:50 +0200 Christophe-Marie Duquesne wrote: > Hi, > > I am trying to write a runit script that would require a passphrase > when starting. This passphrase must not exist in clear on the > filesystem, and it would require user interaction. You can use the