Configuration :: Custom Config Files Encryption
Mar 24, 2011
I have a couple of configuration files flxConnection.config and flxSecurity.config files which are being referenced from the Machine.config file like below.
<securitySettings configSource="flxSecurity.config" />
<connectionStrings configSource="flxConnection.config" />
I would like to encrypt the files (a) flxSecurity.config and (b) flxConnection.config using the RSAProtectedConfigurationProvider using a custom RSA key, which can be deployed to other servers. How is that possible? If possible, looked at a variety of stuff in the internet and they all seem to be referring to either Web.config or Machine.config encryption which is pretty straight-forward. This is how the flxConnection.config looks like,
<?xml version="1.0"?>
<connectionStrings>
<add name="LocalSqlServer" connectionString="data source=.SQLEXPRESS;Integrated
Security=SSPI;AttachDBFilename=|DataDirectory|aspnetdb.mdf;User Instance=true"
providerName="System.Data.SqlClient" />
</connectionStrings>
This is how the flxSecurity.config looks like,
<?xml version="1.0" encoding="UTF-8"?>
<securitySettings>
<add key="APC_APP_ID" value="apcrpt"/>
</securitySettings>
View 3 Replies
Similar Messages:
Nov 16, 2010
I have two webconfig files, on in the root directory and one in the other directory. I dont know how to access or specify for the particular pages or APIs those are in the folder.Root webconfig file used by another section and the 2nd one accessed by another api. I have no idea about that
View 3 Replies
Aug 17, 2010
I am currently trying to publish a web application in TestRelease mode and when I do, the following dll is compiled and put into the bin folder.Microsoft.VisualStudio.Settings.dll.I do not get this dll when I comple in release or debug mode so wondered if there is a setting I can change so this dll does not appear in the bin folder when I compile in TestRelease or TestDebug mode ?When I get that dll in the bin folder and try to deploy the application to our test server, I receive the following message: Could not load file or assembly 'Microsoft.VisualStudio.Settings.dll' or one of its dependencies.Any suggestions on why that dll appears in the bin folder and how I can prevent it from being deployed when I pusblish through visual studio ?
View 1 Replies
Mar 23, 2010
How can I use web.config file in VB.net class library.
View 4 Replies
Dec 14, 2010
I've created a custom config section for my application. For some reason Visual Studio 2010 isn't picking up and of my custom properties. I'm getting warnings similar to this for all the "add" keys: Could not find schema information for the element 'urlFilterSection'
CONFIG FILE:
<configSections>
<section name="urlFilterSection" type="BotFinderApp.Models.UrlFilterSection, BotFinder" />
</configSections>
<urlFilterSection>
<urlFilterCollection>
<add url="urlhere.com.au" numberOfIpsToExtract="10" />
<add url="urlhere.com.au" numberOfIpsToExtract="10" />
<add url="urlhere.com.au" numberOfIpsToExtract="10" />
<add url="urlhere.com.au" numberOfIpsToExtract="10" />
<add url="urlhere.com.au" numberOfIpsToExtract="10" />
<add url="urlhere.com.au" numberOfIpsToExtract="10" />
<add url="urlhere.com.au" numberOfIpsToExtract="10" />
<add url="urlhere.com.au" numberOfIpsToExtract="10" />
<add url="urlhere.com.au" numberOfIpsToExtract="10" />
</urlFilterCollection>
</urlFilterSection>
UrlFilterSection:
namespace BotFinderApp.Models
{
public class UrlFilterSection : ConfigurationSection
{
public UrlFilterSection()
{
}
[ConfigurationProperty("urlFilterCollection", IsDefaultCollection = false)]
[ConfigurationCollection(typeof(UrlFilterCollection), AddItemName = "add", ClearItemsName = "clear", RemoveItemName = "remove")]
public UrlFilterCollection Urls
{
get
{
var urlsCollection = (UrlFilterCollection)base["urlFilterCollection"];
return urlsCollection;
}
}
}
}
UrlFilterCollection
namespace BotFinderApp.Models
{
public class UrlFilterCollection : ConfigurationElementCollection
{
public UrlFilterCollection()
{
}
protected override ConfigurationElement CreateNewElement()
{
return new UrlFilter();
}
protected override object GetElementKey(ConfigurationElement element)
{
return ((UrlFilter)element).Url;
}
}
}
UrlFilter
namespace BotFinderApp.Models
{
public class UrlFilter : ConfigurationElement
{
public UrlFilter()
{
}
[ConfigurationProperty("url", DefaultValue = "", IsRequired = true)]
public string Url
{
get { return (string)this["url"]; }
set { this["url"] = value; }
}
[ConfigurationProperty("numberOfIpsToExtract", DefaultValue = "0", IsRequired = true)]
public int NumberOfIpsToExtract
{
get { return (int)this["numberOfIpsToExtract"]; }
set { this["numberOfIpsToExtract"] = value; }
}
}
}
View 2 Replies
Nov 8, 2010
let me know that what is the advantages / benefits of using multiple web.config files in web application
View 3 Replies
Feb 12, 2010
I'm getting an ConfigurationErrorsException when trying to load a custom section from my web.config.
I'm trying to register a custom section in web.config to load it later using a "Section Class".
Suppose my section is orderService, and I register it in web.config as shown:
<configuration>
<configSections>
<sectionGroup name="system.web.extensions" type="System.Web.Configuration.SystemWebExtensionsSectionGroup, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35">
</sectionGroup>
<section name="orderService" type="orderService"/>
</configSections>
<orderService available="true" pollTimeout="00:01:00" location="abc">
</orderService>
<appSettings></appSettings>
<connectionStrings/>
Then I try to load it with:
Configuration config = WebConfigurationManager.OpenWebConfiguration(Request.ApplicationPath);
OrderService custSection = OrderService)config.GetSection("orderService"); <== The exception is thrown here (OrderService is a class that inherits from the class ConfigurationSection, and that defines a property for each orderService property, in this case: available, pollTimeout and location)
The exception says: An error occurred creating the configuration section handler for orderService: Could not load type 'orderService'. (my web.config path line 23) Does anybody know what am I doing wrong here? (I got it from the book APress: Pro ASP.NET 3.5 in C#)
View 2 Replies
Sep 1, 2010
<rahul>
<test">
<FileExtensions>
[code]...
View 3 Replies
Feb 16, 2011
This is a general question and is not about any particular issue that I am facing right now.As configuration settings in the child level can override the ones in parent level,errors can occur when you have 2 web.config files one redefining configuration settings that you cannot override such as authentication or session state.Issue happens when you have authentication / session state set on the lower level web.config and also in higher level web.config. Is there any other configuration settings like these ?
View 1 Replies
Feb 2, 2010
For some reason the Custom Errors for 404 pages are not working on my production server, but they work fine on development. Instead of going to the custom 404.aspx page, it goes to the ugly IIS 404 page.
Here is my Custom Errors protion of my web.config:
[Code]....
I changed the defaultRedirect to also go to my 404.aspx page just to make sure I was catching everything, but still it does't work. I know I could change the IIS 404 error to also point to my 404.aspx page, but that will not work for me because I need to capture the "aspxerrorpath" in the querystring for .net 404 errors. The IIS method will not give me that.
I am just hoping it is a server configuration I missed somewhere, but everything on production looks the same as on development.
View 9 Replies
Dec 30, 2010
I'd like to add build configuration dependant web config files to my empty ASP.NET 4 Web site project. How can I do that? According to this blog entry, VS 2010 is supposed to provide a context menu entry on the original web.config file, Add Config Transform, allowing to add build configuration dependant web.config files to the project. But this context menu entry doesn't exist. What did I do wrong?
Steps to reproduce:
Create an empty ASP.NET 4 Web site project on localhost (IIS)
View 4 Replies
Apr 12, 2010
I was merging my web.config file and one I downloaded for open source forums, as it told me to. I copied the different lines myself, but now I'm getting three compile errors in my file.
Here are the errors:
1- The 'compliation' start tag on line 47 does not match the end tag of 'system.web'. Line 205, position 4.
2- Tag was not closed. (On line 47, column 4)
3- Expecting end tag </compilation>. (On line 205, column 3)
I'll also post my web.config file below.
[Code]....
View 5 Replies
Apr 14, 2010
If I create a custom error page in my web.config file, how do I retrieve error details in the error page?
So with ...
<customErrors mode="On" defaultRedirect="/error/error.aspx">
<error statusCode="404" redirect="/error/404.aspx" />
</customErrors>
I am referring to errors generated by my asp.net. For example I created a sample page and wrote 'throw new Exception("some error")' as a test. How can I retrieve an instance of the exception or exception details in my "/error/error.aspx" page? Currently in my error page if I query Server.GetLastError() the return value is null.
View 6 Replies
Feb 15, 2011
Here is what I do:
//First delete
aspnet_regiis -pz MyKeyName
//Create the container
aspnet_regiis -pc MyKeyName -exp
//Install the key into a machine-level RSA key provider
aspnet_regiis -pi MyKeyName pathToKeyFile
//Encrypt
aspnet_regiis -pef "connectionStrings" -prov pathToWebConfigFile
//So that's all good so far. If I want I can now decrypt which runs just fine on the same machine:
aspnet_regiis -pdf "connectionStrings"
I now take the Encrypted file and bring it to another machine and instal the same key (got from exporting my key using aspnet_regiis -px "MyKeyName" "C:MyKeyName.xml" -pri).
Now when I run the same decryption command I get an error " Decryption failed... Bad Data..."
View 1 Replies
Mar 13, 2010
This is meant to be easy ...so ive been told, but still cant get it to work!I have a sql database hosted on a shared server which requires the use of sql authentication.As a result I require to encrypt my sensitive data in the config (connection strings etc).I understand that you can do this using aspnet_regiis etc, but ive been told that as I have no direct acccess to the server, I may need to program the encryption.
I have seen a few examples, but as a novice I have been banging away at this, looking at an errors screen most of the time!
View 18 Replies
Oct 25, 2010
m trying to encrypt the <connectionStrings> in my web.config site using this code:
[Code]....
View 1 Replies
Apr 20, 2010
I want to encrypt the connection string in web.config, the problem is each time a developer changes the connection string in web.config and publishes, it needs to be encrypted every time in the web server. Is there any way that the connection string can encrypted automatically every time someone publishes it?
Note :- All of us work on our local machines other than the server. So encryption using local machine key is not an option.
View 1 Replies
Jun 2, 2010
i was looking for a solution in which i need to encrypt all file uploaded in my upload controls, so when ever any intruder tries to view the files directly in its destination folder, they can't open it, and the only way they can open the files is by going to the website and downloading it there, of-course after they have log in into the website. i just become curious to change the Attributes of the Destination folder on its Advance Properties to "Encrypt content to secure data", yes indeed the files are encrypted including the newly uploaded files and indeed i can't open them directly in the Destination Folder, but i can't also open them when i try to download them in the website,
View 5 Replies
Oct 12, 2010
I am using a custom membership provider with a custom ValidateUser method. The ValidateUser sends and additional parameter to authenticate my users (Username, Password, and Dealer). I created a custom stored procedure for ValidateUser to call. I copied over all my users from another table and encrypted all the passwords in the aspnet_membership table using the code below. My question is, how do I take the password the user enters in the login form and validate that against what is in my aspnet_membership Here is the code I used to encrypt the passwords (not even sure this was the right way to encrypt. Please tell me if I did this wrong):
public static string EncodePasswordNow(string originalPassword)
{
Byte[] originalBytes;
[code]...
View 1 Replies
Nov 3, 2010
I was reading about how it is a good idea to encrypt the connection strings for security purposes. I came up with a solution that I think may be somewhat elegant, but there may be big flaws in my thinking. I am overworked and tired :)
Basically I have a setting in the web config EncryptConnectionString. In the Global.asax. Application_Start I am checking this in the config. If it is true, I am encrypting the connection strings. If it is false, I am decrypting the connection string.
Question #1 Is there a better way?
View 1 Replies
Feb 16, 2011
Currently, I work on an ASP.NET project which is hosted under version control and is used on several developer machines, tester machine and production environment.
In three cases, configuration (Web.config) may be different. For example, developer and tester environments use testing SQL Server, whereas in production environment, another SQL Server is accessed, so the connection string is different in those cases.
We want to keep three versions of Web.config in subversion. But modifying each of three files every time we need to add, remove or change a common setting is annoying: it would be nice to have a common, master Web.config, which will be inherited by each of the three Web.config files.
How to set up an ASP.NET project which will use a master configuration file and different slave configuration files on different machines, thus sharing the same project/source code/configuration files in subversion?
View 2 Replies
Sep 1, 2010
We are experiencing some strange behaviour on one of our ASP.NET web servers (Windows 2003 64-bit). After some activity, two third-party controls are unable to run correctly. One is log4net (it does not write error messages out) and the other is a menu control (it displays eval message instead of picking up its license). The one common thread is that both controls pick up their config from external config files (linked to from web.config).
Just wondering if anyone has any thoughts on this or experienced this in any way. Is it related to file/folder rights? The server has been running fine for a while and just started exhibiting this behaviour. Perhaps it occurs around the time the worker processes are recycled.
View 1 Replies
Nov 3, 2010
I have been using the aspnet_regiis to encrypt my web configs in .net 2.0. I have recently moved my application to .net 4 and the encryption runs without any issues but when I try to view the site, I get a 500.19 error "Configuration section encryption is not supported".
I have verified that my web config contains "<validation validateIntegratedModeConfiguration="false" />"
View 1 Replies
Sep 16, 2010
Not sure if I'm posting the question in the right category.
1) I'm working in a project where encryption of data is high priority. Could some one suggest what would be the best encryption method to protect data from being cracked.
I'm using TCP/IP protocol.
2) Is HTTPS totally secured. If I'm using HTTPS, does that mean that there is no encryption of data required in the coding?
View 3 Replies
Jul 1, 2010
I was following the tutorials from this two sites:
http://www.15seconds.com/issue/070104.htm
http://aspnet.4guysfromrolla.com/articles/020404-1.aspx
Following the first site, it had worked but when I´ve moved the pages and files to other folders and set the web.config file on this folder, now it won´t work at all!!!
The file is an *.swf object. I did put the asapi.dll to map the extension on the website root, I´ve put the
[Code]....
on the web.config new folder and on the web.config website´s root.
It won´t work!!! I can access the file directly!!! on the web.config of the folder that contains the file, there is a <deny users="*" /> line.
View 4 Replies