Encrypt files using OpenSSL

Posted About 13 years ago. Visible to the public.

Using OpenSSL it's very easy to seriously encrypt files.
Use the script below. Input / Output are self explanatory. Put a long passphrase into PASSWORD_FILENAME. It is the key to decrypt to file again. Paste this into a console and copy it to wherever you need it.

touch /tmp/openssl_encryption_password && chmod 0700 /tmp/openssl_encryption_password && apg -n1 -m 60 > /tmp/openssl_encryption_password

Remember to at least delete the input file afterwards. Better use shred to wipe files on Linux as used in the script below.

#!/bin/sh
PASSWORD_FILENAME=/opt/backup/openssl_encryption_password
INPUT_FILE=/opt/backup/input
OUTPUT_FILE=/opt/backup/output.enc

/usr/bin/openssl enc -aes-256-cbc -salt -in INPUT_FILE -out OUTPUT_FILE -pass file:$PASSWORD_FILENAME
/usr/bin/shred -u INPUT_FILE
Thomas Eisenbarth
makandra.de
Say thanks
Last edit
About 7 years ago
License
Source code in this card is licensed under the MIT License.

Related cards:

Rails: Encrypting your database information using Active Record Encryption

Since Rails 7 you are able to encrypt database information with Active Record. Using Active Record Encryption will store an attribute as string in the database. And uses JSON for seri...

Sync confidential files between unixes using cloud storage and encfs

Note: You might also want to check out BoxCryptor which does pretty much the same, and is supported across many more platforms. I just didn't want to use Dropbox...

I use Ubuntu One to automatically sync confidential...

Backup your Mac to an encrypted local hard drive

There are many blog posts on encrypting backups, but none works for local drives.

#How to

  • Encrypt the external backup drive using TrueCrypt or PGP or similar...

Test whether Perfect Forward Secrecy (PFS) is enabled on a server (using OpenSSL)

Use the following command to test if a server (in this example: makandra.com on port 443) uses Perfect Forward Secrecy (PFS):

openssl s_client -connect makandra.com:443 -cipher ECDHE-RSA-RC4-SHA

You should see something like the following:

...

Using Vim to repair files with incorrect character encoding/representation

Consider you have a file that uses improper encoding on special characters. Example: You see the latin1 version "ñ" for the UTF-8 "ñ" but the file itself is stored as UTF-8 (meaning that the UTF-8 bytes are doubly encoded).

You can fix that ...

Remove carriage returns from DOS-formatted text files using Vim

If you need to strip carriage return characters from a text file, you can use Vim:

vim file.txt
:set ff=unix
:wq

Setting up Tomcat to use an existing OpenSSL certificate

This is for those who already own an SSL certificate (e.g. using it in the Apache HTTP Server) and need to feed it to a Tomcat application. The main issue is that you need to convert your OpenSSL certificate for Java to use it in its keystore.

Cr...

Using multiple MySQL versions on the same linux machine using docker

We had a card that described how to install multiple mysql versions using mysql-sandbox. Nowadays with the wide adoption of docker it might be easier to u...

Creating Filesystems with Ruby and FUSE

The FUSE project allows you to create filesystems in userspace - which means you can create a filesystem without having to get your hands dirty and modify your kernel source. This is insanely cool, and can be used for many purposes. Here we're goi...

Using rbenv on Ubuntu 18.04+

We will be installing rbenv and ruby-build from our own fork, not from the Ubuntu sources.

Installing rbenv

  1. Install rbenv:

    git clone https://github.com/rben...
Posted by Thomas Eisenbarth to makandra dev (2011-02-18 17:09)
This website uses short-lived cookies to improve usability.
or learn more