Quicken to GnuCash (Windows) (Charles Day)
Derek Atkins
warlord at MIT.EDU
Mon Dec 3 15:58:24 EST 2007
Don't forget to remove the .xac (backup) and .log files as well.
-derek
"Donald Allen" <donaldcallen at gmail.com> writes:
> Oops -- I left out a pretty important step in the script -- removing
> the temporary, unencrypted file when done! Better:
>
> #! /bin/bash
>
> ##Invoked by
> ##secure_gnucash <encrypted gnucash file> <recipient>
>
> ENCRYPTED_GNUCASH_FILE=$1
> TEMPORARY_WORKING_FILE=`mktemp -p /tmp`
> ENCRYPTION_RECIPIENT=$2
>
> gpg --output $TEMPORARY_WORKING_FILE $ENCRYPTED_GNUCASH_FILE
>
> gnucash $TEMPORARY_WORKING_FILE
>
> gpg -e -r "$ENCRYPTION_RECIPIENT" --output=$ENCRYPTED_GNUCASH_FILE
> $TEMPORARY_WORKING_FILE
>
> rm $TEMPORARY_WORKING_FILE
>
>
> On Dec 3, 2007 9:57 AM, Donald Allen <donaldcallen at gmail.com> wrote:
>> Regarding Charles Day's very reasonable desire to maintain his gnucash
>> file(s) in encrypted form, I agree with him -- it would be a very
>> useful addition to gnucash to provide an encryption option.
>>
>> A stopgap partial solution for Charles: maintain your gnucash file
>> encrypted and use something like the following script:
>>
>> #! /bin/bash
>>
>> ENCRYPTED_GNUCASH_FILE=$1
>> TEMPORARY_WORKING_FILE=`mktemp -p /tmp`
>> RECIPIENT=$2
>>
>> gpg --output $TEMPORARY_WORKING_FILE $ENCRYPTED_GNUCASH_FILE
>>
>> gnucash $TEMPORARY_WORKING_FILE
>>
>> gpg -e -r "$RECIPIENT" --output=$ENCRYPTED_GNUCASH_FILE $TEMPORARY_WORKING_FILE
>>
>> If you name the script more_secure_gnucash, you would invoke it as
>>
>> more_secure_gnucash <encrypted gnucash file> <recipient>
>>
>> where 'recipient' is the identifier of your key-pair, 'Don Allen' in
>> my case. gpg will ask you questions when you run the script. Don't
>> forget to give it execute permission. I did some cursory testing of
>> this and it seems to work, but no guarantees express or implied :-) If
>> you correct it or improve it, please let us know.
>>
>> This is not absolutely secure, obviously, because the file exists
>> unencrypted in your filesystem while gnucash is running, but it does
>> so under a randomly generated name. But it would reduce the
>> probability of thievery unless and until gnucash acquires the
>> encryption capability done right.
>>
>> /Don Allen
>>
> _______________________________________________
> gnucash-user mailing list
> gnucash-user at gnucash.org
> https://lists.gnucash.org/mailman/listinfo/gnucash-user
> -----
> Please remember to CC this list on all your replies.
> You can do this by using Reply-To-List or Reply-All.
>
>
--
Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory
Member, MIT Student Information Processing Board (SIPB)
URL: http://web.mit.edu/warlord/ PP-ASEL-IA N1NWH
warlord at MIT.EDU PGP key available
More information about the gnucash-user
mailing list