pass phrase

Chuck Robey chuckr@picnic.mat.net
Thu, 20 Jan 2000 14:21:21 -0500 (EST)


On Thu, 20 Jan 2000, Chip Christian wrote:


> If you're writing in Tcl, why not something like this:
>
> if [ catch { exec gpg --batch --passphrase-fd 0 \
> --output ${dst} --decrypt ${src} \
> << "${passphrase}\n"} foo ] {
> send_user "${foo}\n"
> }
I was going to say, embedding the passphrase inside the tcl script would be even worse security ... then I noticed you used a variable ... You mean use the script itself to read the passphrase file, then using the piece above to do it? Now that's a decent idea ... ---------------------------------------------------------------------------- Chuck Robey | Interests include C & Java programming, New Year's Resolution: I | electronics, communications, and will not sphroxify gullible| signal processing. people into looking up | I run picnic.mat.net: FreeBSD-current(i386) and fictitious words in the | jaunt.mat.net : FreeBSD-current(Alpha)| dictionary. | ----------------------------------------------------------------------------