Password in commandline

[ragnar]

As far as I can see you need to submit your password in clear text when working with the commandline tool. Is there any way around it?

[Beth]

You could set up your Vault website to use an SSL certificate, then you are logging in, you would use the -ssl switch.

[ragnar]

You could set up your Vault website to use an SSL certificate, then you are logging in, you would use the -ssl switch.

How would that work? Could you give me an example for a command line command?

[Beth]

All of what you enter in the command line would be the same, except adding the switch -ssl. When you have a certificate, it encrypts the communication so that the information that is transferred is encrypted. You would still actually enter your password in plain text, but it then shouldn't go across your network in plain text.

Here's a short article about what an SSL certificate is: https://www.globalsign.com/ssl-informat ... icate.html.

If you look in our Vault CLC help, http://download.sourcegear.com/misc/vau ... nt/clc.htm, and search for ssl, you will see that it's listed with the login information and that nothing else changes with the CLC but that one switch.

Setting up certificates on your website can take some time if you have no experience with them. You would either have to have your own Certificate Authority on your network, or you can purchase a 3rd party certificate to use.

[Beth]

Another idea that could make is so that you only have to enter a password once is to use the REMEMBERLOGIN command first. Rememberlogin creates an encrypted file on the CLC machine, so it's not readable.