Encrypting Configuration Parameters of DeleGate

In the version 9.4.0, DeleGate supported loading partially encrypted parameters. A chunk of encrypted parameter is in a form as "+=enc:ext::opt.XXXX....XXXX:" where the encrypted data is in "XXXX....XXXX" part coded in the base64 encoding.

EXAMPLES

Encrypt and decrypt a file with an encryption key (xxx).

% delegated -Fenc -kxxx -f file (file to file.enc) % delegated -Fdec -kxxx -f file (file.enc to file)


Encrypt a parameter file (dg-conf) and load the encrypted one (dg-conf.enc).

% delegated -Fenc -kxxx -f dg-conf % delegated +=dg-conf.enc **** PASSWD=ext:::xxx


Encrypt and decrypt a list of arguments with an encryption key (xxx).

% delegated -Fenc -kxxx -a a1 a2 a3 +=enc:ext::1bt.pS2/eJfoHuyxDmJl7ku6pezHUwjM7NWA: % delegated -Fdec -kxxx +=enc:ext::1bt.pS2/eJfoHuyxDmJl7ku6pezHUwjM7NWA: **** PASSWD=ext:::xxx a1 a2 a3 % delegated -Fenc -kxxx -a a1 a2 a3 | delegated -Fdec **** PASSWD=ext:::xxx a1 a2 a3


Encrypt a parameter and use the encrypted parameter in a command line.

% delegated -Fenc -kxxx -a MYAUTH=user1:pass1:socks +=enc:ext::1bt.exFtB/6sDPK7KQ9qZ5irY/LaW8tOJwqJStmgNC9/S0bSVpexG3Rviw==: % delegated -P8080 SERVER=http SOCKS=host \ +=enc:ext::1bt.exFtB/6sDPK7KQ9qZ5irY/LaW8tOJwqJStmgNC9/S0bSVpexG3Rviw==: **** PASSWD=ext:::xxx


Encrypt a string and use it in a parameter value.

% delegated -Fenc -kxxx -a pass1:socks +=enc:ext::1bt.yiU/ehV+OLccznVAsA+Gw/MOYlBMPTzj: % delegated -P8080 SERVER=http SOCKS=host \ MYAUTH=user1:+=enc:ext::1bt.yiU/ehV+OLccznVAsA+Gw/MOYlBMPTzj: **** PASSWD=ext:::xxx




PageViews: 609 hits / 98 nets

[CTX] [ALL]

---

A substitution resource can be given in an encrypted format. Encrypted data can be directly represented in the string of format as "+=enc:ext::XXXX:" in which the part of XXXX contains the encrypted data. This format of data is created with "-Fenc" option of DeleGate. When it is named with the suffix ".cdh" as "+=conf.cdh", it is decrypted by "Credhy" using the passphrase for decryption which is specified as the password of the "config" user.

---