Encrypt on Install 1

[niall29]

Hi all,
I hope someone can help, here is a summary of my problem;
I have an VB 2005 app that runs once a day which connects to a Class 4 Db. In the app I have an App.config file which has the connectionstring and necessary passwords it needs to run. I have code that encrypts the Appsettings in the App.config file but my problem is that once I do a fresh install the config file does not get encrypted until the app runs the first time. As the app can only runs after 12.00am to keep reporting right, there is the possibility of leaving the passwords and connectionstring in plain text for a number of hours this is a BIG security risk.
Can anyone tell me is it possible to build a custom install to encrypt the config file straight after installation and if so how.

Any help would be greatly appreciated.
Niall

 

[jebenson]

Perhaps you could split off the encryption code into its own application that does only that, and run that app during setup. This way the config file gets encrypted but the reporting is not affected.


I used to rock and roll every night and party every day. Then it was every other day. Now I'm lucky if I can find 30 minutes a week in which to get funky. - Homer Simpson

Arrrr, mateys! Ye needs ta be preparin' yerselves fer Talk Like a Pirate Day!

 

[niall29]

That definitely sounds like a way round it and thank you but do you know how I can make it that the app that does the encrytion automatically runs after install. As anything that needs user input is always counted as a vulnerability

 

[jebenson]

Check out this link:

Launching your application after install using Visual Studio 2005

I used to rock and roll every night and party every day. Then it was every other day. Now I'm lucky if I can find 30 minutes a week in which to get funky. - Homer Simpson

Arrrr, mateys! Ye needs ta be preparin' yerselves fer Talk Like a Pirate Day!