Re: Protected ZIP file with password

Petrus Bastos wrote: > I'm testing on FreeBSD. I can use any command through system(), but the zip > command doesn't works! I don't know why. > > > On Feb 18, 2008 4:06 PM, Nick Stinemates <nick@stinemates.org> wrote: > > >> Petrus Bastos wrote: >> >>> Hey folks, >>> >>> I got access to exec method for test! But, it's not working... :( >>> the function returns 127 and don't create the zip file, I've tested on >>> Linux command tool and works! Do you have any idea why didn't work? >>> >>> Thanks again and sorry for the inconvenience, >>> Petrus Bastos. >>> >>> On Feb 18, 2008 2:37 PM, Nick Stinemates <nick@stinemates.org >>> <mailto:nick@stinemates.org>> wrote: >>> >>> Petrus Bastos wrote: >>> > Richard, >>> > >>> > Unfortunately, I can't get out of the zip password rut >>> because the >>> > destination system read only this file format. I can't change the >>> > destination system. >>> > >>> > Thanks, >>> > Petrus. >>> > >>> > On Feb 18, 2008 2:11 PM, Richard Lynch <ceo@l-i-e.com >>> <mailto:ceo@l-i-e.com>> wrote: >>> > >>> > >>> >> On Mon, February 18, 2008 5:59 am, Petrus Bastos wrote: >>> >> >>> >>> Thanks again for your worry. So, let's go, here goes my >>> situation. >>> >>> I'm >>> >>> exporting data to another system. That system have an option to >>> >> be >> >>> >>> feed by a >>> >>> password protected zip file. The export activity will be occur >>> in this >>> >>> way: >>> >>> the user will generate the file on my application and will put >>> this >>> >>> file >>> >>> into that another system. So, I need generate that file. Maybe >>> >> one >> >>> >>> solution >>> >>> is to generate the file unzipped and determine that user >>> should zip >>> >>> the file >>> >>> with password on his Windows or Linux operating system. But, I >>> can't >>> >>> let >>> >>> that responsibility on user hands. So, because that I need to >>> generate >>> >>> the >>> >>> file already protected. >>> >>> >>> >> Perhaps you could use SCP (or SSH tunneling) to transfer the >>> file from >>> >> system to system, so that it need not ever be visible to the >>> outside >>> >> world, and thus not need the rather lame zip password. >>> >> >>> >> Another option would be to take the whole file and 2-way encrypt >>> >> it >> >>> >> with a public/private key pair, and install the private key on >>> >> the >> >>> >> receiving server. >>> >> >>> >> In other words, get out of the zip password rut, and protect >>> the file >>> >> some other way. >>> >> >>> >> -- >>> >> Some people have a "gift" link here. >>> >> Know what I want? >>> >> I want you to buy a CD from some indie artist. >>> >> http://cdbaby.com/from/lynch >>> >> Yeah, I get a buck. So? >>> >> >>> >> >>> >> >>> > >>> > >>> Sounds like a creative challenge... this is what makes programmers >>> problem solvers. You can write the code, you have the knowledge.. >>> >> and >> >>> then you get requirements like this one. How annoying! >>> >>> I found out some interesting information researching your issue. It >>> seems that encryption by password is actually not built in to ZIP >>> itself, but was an implementation detail apps like WinZip added to >>> >> the >> >>> mix. Because of that, the original ZIP libs don't have any notions >>> >> of >> >>> password protection. >>> >>> It seems like this isn't a language specific issue, either. >>> >>> I think it's time to get creative, Petros. You're in a bind, and I >>> assume you need to get this done, so you have the following >>> options (in >>> the order I would do it in..) >>> -> Turn on exec() >>> -> You can use/modify an app I wrote (in python) which accepts UDP >>> packets and executed commands based off of it. You can strip out the >>> really insecure things and just accept 'zip' commands. The lib/app >>> >> is >> >>> really small and lightweight. There are no dependencies outside of I >>> think 3 python modules. If I couldn't turn on exec(), this is the >>> route >>> I would go. >>> -> Use some form of file/directory montoring + zip. >>> -> Pass the request on to an environment that has zip() >>> >>> -- >>> ================== >>> Nick Stinemates (nick@stinemates.org >>> <mailto:nick@stinemates.org>) >>> http://nick.stinemates.org >>> >>> AIM: Nick Stinemates >>> MSN: nickstinemates@hotmail.com >>> <mailto:nickstinemates@hotmail.com> >>> Yahoo: nickstinemates@yahoo.com >>> <mailto:nickstinemates@yahoo.com> >>> ================== >>> >>> >>> >>> >> What platform are you testing on? >> >> You got it to work under Linux but not on Windows? Am I understanding >> that properly? >> >> For windows, I read you should be using a tool called PkZIP. >> >> -- >> ================== >> Nick Stinemates (nick@stinemates.org) >> http://nick.stinemates.org >> >> AIM: Nick Stinemates >> MSN: nickstinemates@hotmail.com >> Yahoo: nickstinemates@yahoo.com >> ================== >> >> >> >> > > Do you have SSH access to the system? If so, 'man zip' and look at the params. -- ================== Nick Stinemates (nick@stinemates.org) http://nick.stinemates.org AIM: Nick Stinemates MSN: nickstinemates@hotmail.com Yahoo: nickstinemates@yahoo.com ==================