AM-Créations configuration encrypter

What is AM-Créations configuration encrypter

This tool makes it easy to encrypt and decrypt JSON configuation files. It consists of two parts :

• A command line utility that lets you encrypt values in your JSON configuration files
• A library that decrypts them on the fly in your .NET Standard applications

Motivation

Projects often contains sensitive information like database connection strings, API keys or usernames and passwords for external services. This information should never be committed to source control and should be handled in a secure way. Key vaults like those provided by Azure and AWS aren't always available for projects that can't be connected to the internet.

Advantages

• Lets you encrypt only certain values in your configuation, so the rest of the config is still readable.
• Access the encrypted values the same way you are used to in your .NET Core applications.
• Lets you share config files or even check them in in your VCS without the need to remove sensitive information.
• The configuration file is not fully encrypted, only its string values, so you are aware of which values are overriden and you don't need to have the full unencrypted file to add or change a key.

Installation

You can install the package via the NuGet Package Manager by searching for AmCreations.Configuration.EncryptedJson.

You can also install the package via PowerShell using the following command:

Install-Package AmCreations.Configuration.EncryptedJson

or via the dotnet CLI:

dotnet add package AmCreations.Configuration.EncryptedJson

Getting started

• To decrypt values for the configuration file you will need a certificate (private and public key), or at least its private key.
• To encrypt values for the configuration file you will need a certificate (private and public key), or at least its public key.

Certificates can be generated by using openssl. An example certificate is already in the project and the encrypted string in the example appsettings.Encrypted.json file has been encrypted with it.