yakshaveinc / linux

software engineering for Linux projects
The Unlicense
1 stars 3 forks source link

Generic CI file encryption and decryption with OpenSSL #15

Open abitrolly opened 5 years ago

abitrolly commented 5 years ago

Add to CI instructions scenario for decrypting file during deploy.

# encrypt
openssl aes-256-cbc -pbkdf2 -in secret.txt -out secret.enc -pass pass:$CIRCLE_ENC_KEY
# decrypt
$ openssl aes-256-cbc -pbkdf2 -in secret.enc -pass pass:$CIRCLE_ENC_KEY -d

Explain pbkdf2 derivation, symmetric key vs public/private.