DPAPI and config files

[Dan Amiga]

Hello. This is about DPAPI and configuration files.
Basically, what I understand is when loading the exe assembly the framework
takes parameters from the config file and loads them.
I want to store THE ENTIRE web.config ( or any other config file ) using
DPAPI.

That is - I want to develop a component which intercept the frameworks
request to the web.config, decrypt the config file stored in the DPAPI
protected storage and give it to the framework for regular execution.

The thing is - I want it to be transparent. I don't want other development
teams to be concered and implement this logic in their applications.

Any idea's ?

Dan Amiga,
Israel.

 

[Paul Glavich [MVP - ASP.NET]]

The configuration application block offers similar functionality but
relegates most of the config info to another file (not the web.config) and
encrypts that.

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnbda/html/cmab.asp

 

[Dan Amiga]

I am talking about Framework config files, not only Web.Config, also
Machine.config, etc.
How does this application block handels options that must exists before the
assembly loads such as processmodel / impersonation ?

 

[Joe Kaplan \(MVP - ADSI\)]

I don't believe you can do what you want to do as there are no hooks into
the configuration file APIs at the level you need. The best you could do
would be to encrypt specific data or use something like the configuration
application block as previously mentioned.

Joe K.

I am talking about Framework config files, not only Web.Config, also
Machine.config, etc.
How does this application block handels options that must exists before the
assembly loads such as processmodel / impersonation ?

The configuration application block offers similar functionality but
relegates most of the config info to another file (not the web.config) and
encrypts that.

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnbda/html/

 

[Dan Amiga]

Thanks,
It's already a progress if you understood what I wanted
How can I be sure there are no Hooks into it ?
Where else can I post for info ?