web.Config加密解密最简单实用方法

admin

web.config的文件多数的时候不希望别人看到，下面提供一个加密，解密的语句，简洁方便实用，先看到效果，至于加密的原理其他的网页上做了很多说明，这里只演示效果。
! a7 }( n$ r6 A7 b# p　　加密前的connectionStrings节点
6 C) n& ?& Q7 q9 d! k" }! K& r　　代码
/ I. }, N# x$ g& V* u5 c) @; L　　<connectionStrings>
: X+ U  z  ]5 Y" `, c1 v, q5 a　　<add name="SQLConnString1" connectionString="server=WJW-PC\SQL2008;user id=sa;password=12345;Initial Catalog=dbFASH;min pool size=4;max pool size=400;" />
& O9 F' x! ^2 @# ?. f　　<add name="eziyaConnectionString1" connectionString="Data Source=HOME-COMPUTER;Initial Catalog=dbFASH;Integrated Security=True;MultipleActiveResultSets=Falseacket Size=4096;Application Name=&quot;Microsoft SQL Server Management Studio&quot;"
　　providerName="System.Data.SqlClient" />
9 s4 T2 U) a. S　　<add name="eziyaConnectionString2" connectionString="Data Source=192.168.1.200;Initial Catalog=dbFASHersist Security Info=True;User ID=taoka;MultipleActiveResultSets=Falseacket Size=4096;Application Name=&quot;Microsoft SQL Server Management Studio&quot;"
　　providerName="System.Data.SqlClient" />
, r# B$ F- ]# [, r  z3 v0 C　　<add name="eziyaConnectionString3" connectionString="Data Source=192.168.61.160;Initial Catalog=dbFASHersist Security Info=True;User ID=sa;MultipleActiveResultSets=Falseacket Size=4096;Application Name=&quot;Microsoft SQL Server Management Studio&quot;"
　　providerName="System.Data.SqlClient" />
　　</connectionStrings>
" j$ W* J" I/ `# [　　加密后的connectionStrings的节点
　　代码
　　<connectionStrings configProtectionProvider="RsaProtectedConfigurationProvider">
　　<EncryptedData Type="http://www.w3.org/2001/04/xmlenc#Element"
　　xmlns="http://www.w3.org/2001/04/xmlenc#"&gt;
　　<EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc" />
　　<KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"&gt;
6 Y* v+ k# j5 B0 c　　<EncryptedKey xmlns="http://www.w3.org/2001/04/xmlenc#"&gt;
　　<EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5" />
　　<KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"&gt;
　　<KeyName>Rsa Key</KeyName>
' z+ [/ [) D' N" ?% @　　</KeyInfo>
  C9 r1 F3 c$ h* d* q$ g( ^2 z' s　　<CipherData>
# h7 X1 ]% L6 v# e- s8 S6 }　　<CipherValue>FOkydQFNniZvq71ua4XapuVCUrJFOARkXeqqwyKFoP+NGXGewehxYW0zTzIn/j+YCvH/r6ABoE/AfWMMEDyr81R1mhi4ckXbiJ2BvW612/W7f7Wkqj+FDwse+lgAISHZ5HfspaY1LBvKYAu1VEm6Iu6NlT35TPnjxFf+p5Apf0E=</CipherValue>
2 ?6 U, n( Y$ m5 v! L　　</CipherData>
　　</EncryptedKey>
  y; m& c- X9 y# D% s0 ^　　</KeyInfo>
　　<CipherData>
　　<CipherValue>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</CipherValue>
　　</CipherData>
5 Z1 j( d9 O. t& s; Q# F　　</EncryptedData>
　　</connectionStrings>
" j* K+ |8 }% z& v* q9 m6 d　　完全看不到连接的信息！
　　下面是两个.bat批处理文件
　　加密：
; n0 V+ I8 ?2 y$ o: a! G- ~0 y　　@echo off
( ~% {" ]6 J* k　　C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe -pef "connectionStrings" "E:\code\proj\Web"
　　解密：
　　@echo off
　　C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe -pdf "connectionStrings" "E:\code\proj\Web"
, d2 G  Y- X9 u- E: \　　PAUSE
　　直接将语句拷贝到.BAT文件中，E:\code\proj\Web为相应的web.config所在的路径，只能在一台电脑上操作，否则不可逆

Anthony~

好方法。我正好刚遇到这个问题