Password in log :: Support Forum

tattdogg
Joined:: 2016-04-22
Posts:: 19
Location:: Minsk, Belarus

Password in log

2016-10-03 12:36

Is there any way not to show password in logs?

winscp> open "sftp://logn:password@127.0.0.1:22" -hostkey="ssh-rsa 2048 ..." -timeout=15

Reply with quote

martin◆ Site Admin
Joined:: 2002-12-10
Posts:: 42,204
Location:: Prague, Czechia

Re: password in log

2016-10-06

What log is that?

Reply with quote

tattdogg

Re: password in log

2016-10-06 14:03

session.OutputDataReceived += SessionOnOutputDataReceived;
...
private void SessionOnOutputDataReceived(object sender, OutputDataReceivedEventArgs args)
{
     Logger.Trace(args.Data);
}

Reply with quote

martin◆ Site Admin

Re: password in log

2016-10-10

So, it's your log file. Filter the password before writing the entry to the log.

Reply with quote

tattdogg

Re: password in log

2016-10-10 09:39

This is what I do right now. I just wondering if I could use some property to exclude the password from your output stream.
The password can be stolen from the memory stream that way... Is it possible to add this functionality in next versions of package?

Reply with quote

martin◆ Site Admin
Joined:: 2002-12-10
Posts:: 42,204
Location:: Prague, Czechia

Re: password in log

2016-10-17

This request has been added to the tracker:
Issue 1475 – Mask out password in .NET assembly output log

I'm sending you an email with a development version of WinSCP to the address you have used to register on this forum.

Reply with quote

tattdogg

2016-10-20 13:31

thank you

Reply with quote

tattdogg
Joined:: 2016-04-22
Posts:: 19
Location:: Minsk, Belarus

2016-12-05 10:56

Will it work with a PrivateKeyPassphrase?

sessionOptions.PrivateKeyPassphrase = "abc";

Reply with quote

martin◆ Site Admin

2016-12-08

It will now:
Issue 1488 – Mask out passphrase in .NET assembly output log

Reply with quote

Password in log

Password in log

Re: password in log

Re: password in log

Re: password in log

Re: password in log

Re: password in log

Documentation

Support

Associations

Follow Us