encrypting password in shell script

Question

I'm running a shell script on a Ubuntu server, the shell script inserts data to my database (I use MariaDB) for the connection I have a database user and the database user has a password. The problem is the password is plain text, is there a way I can encrypt this password, store it in an other file, or another way so no one can read the password when reading the script?

thanks in advance,

mysql -u db_user -pplain_password <<EOF
USE db_name
INSERT INTO table ()
VALUES ();
EOF

if you can effortlessly decrypt the password, there's no real point in encrypting it. You can write the password into a file, readable by the owner only. More problematic is the fact that the password is written in the command line. No matter how strongly you encrypt the password in the file, it'll be shown in plain text just by doing a ps -ef — Ronald
– Ronald, Commented Feb 9, 2018 at 9:58

Paul Campbell · Accepted Answer · 2018-02-09 10:12:41Z

1

Check out mysql_config_editor. This will allow you to create a .mylogin.cnf file which will store the password in an encrypted form. .mylogin.cnf will be used by your script, or other client program, to connect to the database.

answered Feb 9, 2018 at 10:12

Paul Campbell

1,9862 gold badges14 silver badges19 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

encrypting password in shell script

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related