File level encryption in 2.1?
-
Hi:
I saw this page (https://github.com/pfsense/pfsense-tools/tree/master/misc-scripts/config-crypto). Just wondering whether data encrytion at file level has been part of 2.1? I could not find any in the gui. Thanks!
zenny
-
That is for dealing with importing/exporting an encrypted config.xml only. It isn't encrypted on the filesystem, it's optionally encrypted when you make a backup.
If it were stored encrypted then you'd either need to give a password at bootup to decrypt it (terribly inconvenient, but secure), or the decryption key would have to be stored on the HDD with the config, making the whole mechanism pretty pointless.
The first of those two might be an option in the future, but it's pretty doubtful as that would also break quite a few other things that expect to be able to grep and otherwise parse through the config to determine settings.
-
Thanks jimp for an explicit explanation. :D
