加密Web.Config

以下是在不进行任何编程的情况下加密web.config文件的命令。。。

用于加密

aspnet_regiis -pef "Section" "Path exluding web.config"

用于解密

aspnet_regiis -pdf "Section" "Path exluding web.config"

我相信有两种方法可以做到这一点:

使用aspnet\u regiu正在使用 DPAPI RSA doing it programmatically .

编程方式非常方便,尤其是如果您还喜欢加密app.config。

• 从GAC中删除配置DLL。

如果您只是加密连接字符串,那么这就不会成为问题。您还需要记住是要在机器范围内加密还是要加密到特定的用户帐户-这两个选项都可能有用,具体取决于您的场景。为了简单起见,我坚持使用机器范围的加密。我提供的链接解释了这两种方法的优点。

你试过这个吗: http://weblogs.asp.net/scottgu/archive/2006/01/09/434893.aspx

在框架目录中使用aspnet_regais工具:

                                        -- CONFIGURATION ENCRYPTION OPTIONS --

pe section            Encrypt the configuration section. Optional arguments:
                      [-prov provider] Use this provider to encrypt.
                      [-app virtual-path] Encrypt at this virtual path. Virtual path must begin with a forward slash.
                      If it is '/', then it refers to the root of the site. If -app is not specified, the root
                      web.config will be encrypted.
                      [-site site-name-or-ID] The site of the virtual path specified in -app. If not specified, the
                      default web site will be used.
                      [-location sub-path] Location sub path.
                      [-pkm] Encrypt/decrypt the machine.config instead of web.config.

pd section            Decrypt the configuration section. Optional arguments:
                      [-app virtual-path] Decrypt at this virtual path. Virtual path must begin with a forward slash.
                      If it is '/', then it refers to the root of the site. If -app is not specified, the root
                      web.config will be decrypted.
                      [-site site-name-or-ID] The site of the virtual path specified in -app. If not specified, the
                      default web site will be used.
                      [-location sub-path] Location sub path.
                      [-pkm] Encrypt/decrypt the machine.config instead of web.config.

您应该从这里开始,简单易懂,在MSDN中详细解释了分步指南: How To: Encrypt Configuration Sections in ASP.NET 2.0 Using DPAPI

使用aspnet_regiis.exe命令行工具

您还可以使用aspnet\u regiis.exe命令行工具对Web.config文件中的节进行加密和解密,该工具位于%WINDOWSDIR%\Microsoft.Net\Framework\version目录下。

看这里: http://aspnet.4guysfromrolla.com/articles/021506-1.aspx .