C# 加密 Web.Config

Encrypting Web.Config

提问by TheVillageIdiot

Duplicate of Encrypting config files for deployment .NETand Encrypting config files for deployment

用于部署 .NET 的加密配置文件和用于部署的加密配置文件的重复

---

---

What is the best approach and tools for encrypting information in web.config file?

在 web.config 文件中加密信息的最佳方法和工具是什么？

采纳答案by RichardOD

I believe there are two ways of doing this:

我相信有两种方法可以做到这一点：

using aspnet_regiis using DPAPIor RSA, or doing it programmatically.

使用DPAPI或RSA使用 aspnet_regiis ，或以编程方式进行。

The programmatic way can be handy, particularly if you also like to encrypt app.config.

编程方式可能很方便，特别是如果您还喜欢加密 app.config。

From my experiences of using this, if you write a custom configuration section, you have install the DLL containing the classes for that section into the GAC. For a project I was working I basically scripted the following approach:

根据我使用它的经验，如果您编写自定义配置部分，则您已将包含该部分类的 DLL 安装到 GAC 中。对于我正在工作的项目，我基本上编写了以下方法：

• Copy config DLL to GAC.
• Perform encryption.
• Remove config DLL from GAC.

• 将配置 DLL 复制到 GAC。
• 执行加密。
• 从 GAC 中删除配置 DLL。

Chances are if you are just encrypting connection strings then this won't be a problem. You also need to be bear in mind whether you want to encrypt on a machine wide basis or to a specific user account- both options can be useful depending on your scenario. For simplicity I stuck to machine wide encryption. The links I have provided explain the merits of both approaches.

如果您只是加密连接字符串，那么这可能不是问题。您还需要记住是要在机器范围内加密还是要加密到特定用户帐户 - 根据您的情况，这两个选项都可能有用。为简单起见，我坚持使用机器范围的加密。我提供的链接解释了这两种方法的优点。

回答by Irwin

Have you tried this: http://weblogs.asp.net/scottgu/archive/2006/01/09/434893.aspx

你有没有试过这个：http: //weblogs.asp.net/scottgu/archive/2006/01/09/434893.aspx

回答by x0n

Use the aspnet_regiis tool in your framework directory:

使用框架目录中的 aspnet_regiis 工具：

                                        -- CONFIGURATION ENCRYPTION OPTIONS --

pe section            Encrypt the configuration section. Optional arguments:
                      [-prov provider] Use this provider to encrypt.
                      [-app virtual-path] Encrypt at this virtual path. Virtual path must begin with a forward slash.
                      If it is '/', then it refers to the root of the site. If -app is not specified, the root
                      web.config will be encrypted.
                      [-site site-name-or-ID] The site of the virtual path specified in -app. If not specified, the
                      default web site will be used.
                      [-location sub-path] Location sub path.
                      [-pkm] Encrypt/decrypt the machine.config instead of web.config.

pd section            Decrypt the configuration section. Optional arguments:
                      [-app virtual-path] Decrypt at this virtual path. Virtual path must begin with a forward slash.
                      If it is '/', then it refers to the root of the site. If -app is not specified, the root
                      web.config will be decrypted.
                      [-site site-name-or-ID] The site of the virtual path specified in -app. If not specified, the
                      default web site will be used.
                      [-location sub-path] Location sub path.
                      [-pkm] Encrypt/decrypt the machine.config instead of web.config.

回答by jinsungy

Use the aspnet_regiis.exe Command-Line Tool

使用 aspnet_regiis.exe 命令行工具

You can also encrypt and decrypt sections in the Web.config file using the aspnet_regiis.exe command-line tool, which can be found in the %WINDOWSDIR%\Microsoft.Net\Framework\version directory.

您还可以使用 %WINDOWSDIR%\Microsoft.Net\Framework\version 目录中的 aspnet_regiis.exe 命令行工具加密和解密 Web.config 文件中的部分。

Look here: http://aspnet.4guysfromrolla.com/articles/021506-1.aspx.

看这里：http: //aspnet.4guysfromrolla.com/articles/021506-1.aspx。

回答by Remus Rusanu

You should start from here, easy to follow, well explained step-by-step guide in MSDN: How To: Encrypt Configuration Sections in ASP.NET 2.0 Using DPAPI

您应该从这里开始，易于遵循，MSDN 中详细解释的分步指南：如何：使用 DPAPI 加密 ASP.NET 2.0 中的配置部分

回答by Jalpesh Vadgama

Here are the commands to encrypt web.config file without any programming...

以下是无需任何编程即可加密 web.config 文件的命令...

For encryption

用于加密

aspnet_regiis -pef "Section" "Path exluding web.config"

For Decryption

用于解密

aspnet_regiis -pdf "Section" "Path exluding web.config"

From this commands you can encrypt or decrypt all the section.

通过此命令，您可以加密或解密所有部分。