search

jpillora / chisel

A fast TCP/UDP tunnel over HTTP
MIT License
12.68k stars 1.34k forks source link

Encrypted autfile/username:password storage #120

Open cagdasbas opened 4 years ago

cagdasbas commented 4 years ago

Hi everyone,

I'm wondering, is there any way to store authentication details encrypted. Chisel doesn't have as far as I can find but maybe with a 3rd party application it can be done.

Also how hard would it be to implement this feature? I want to look into it.

johschmitz commented 4 years ago

I think only a salted hashes should be stored. Maybe it can be done similar to the Ansible approach: https://docs.ansible.com/ansible/latest/reference_appendices/faq.html#how-do-i-generate-encrypted-passwords-for-the-user-module

jpillora commented 4 years ago

A hash option would be great

I think anywhere a password can go, it should look for a special prefix “sha256:”

On Wed, 30 Oct 2019 at 8:56 am Johannes Schmitz notifications@github.com wrote:

I think only a salted hashes should be stored. Maybe it can be done similar to the Ansible approach:

https://docs.ansible.com/ansible/latest/reference_appendices/faq.html#how-do-i-generate-encrypted-passwords-for-the-user-module

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/jpillora/chisel/issues/120?email_source=notifications&email_token=AAE2X4YVSTM3FSJHCPVSVWTQRCWQVA5CNFSM4I7RZQNKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOECSG6YY#issuecomment-547647331, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAE2X4ZOH74SCRZPEKRCBWTQRCWQVANCNFSM4I7RZQNA .

cagdasbas commented 4 years ago

I finally found time to look into.

What do you think about #130

What do you guys think, needs any change and/or improvement?

jpillora commented 4 years ago

Looks alright, though need to look into that newly imported library

On Sun, 15 Dec 2019 at 12:52 pm Cagdas Bas notifications@github.com wrote:

I finally found time to look into.

What do you think about #130 https://github.com/jpillora/chisel/pull/130

What do you guys think, needs any change and/or improvement?

— You are receiving this because you commented.

Reply to this email directly, view it on GitHub https://github.com/jpillora/chisel/issues/120?email_source=notifications&email_token=AAE2X47KLHRFJMJ2HTEZVVTQYWEXFA5CNFSM4I7RZQNKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEG4PLPQ#issuecomment-565769662, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAE2X45SEIEXRKR3FIMTSNLQYWEXFANCNFSM4I7RZQNA .