Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Is it possible to encrypt the content stored in SVN?

Tags:

svn

If I am storing my source code in SVN on a shared hosting company, would it be possible to encrypt the content so EVEN if someone does have access to the repo they can't see the source in plain view?

Is there a plugin for this? Otherwise I'd imagine it would be crazy implementing this oneself!

like image 892
mrblah Avatar asked Sep 09 '09 22:09

mrblah


People also ask

Is SVN encrypted?

VisualSVN Server uses industry-standard AES-128 or AES-256 encryption algorithms to protect the backups. Both of them provide a strong level of security.

What is the best way to encrypt database?

Common Data Encryption Methods The two most widely used methods for data encryption are public key, also known as asymmetric encryption and private key, or symmetric encryption. Both rely on key pairs, but they differ in the way the sending and receiving parties share the keys and handle the encrypt/decrypt process.

How does SVN store files?

Subversion is a centralized system for sharing information. At its core is a repository, which is a central store of data. The repository stores information in the form of a filesystem tree - a typical hierarchy of files and directories.


2 Answers

The correct answer here is either:

  1. Find a hosting provider you trust (or one that is compliant if regulatory issue are the problem)
  2. Host it yourself

If the main concern is having a secure offsite backup, host the repository yourself and use someplace like rsync.net to handle the backup (they are SOX/HIPAA compliant). A cron job that rsyncs everything every 15 minutes should be sufficient. The cron job can encrypt your backup before pushing it. Just don't lose the keys/passwords.

This way Subversion doesn't need to know anything at all about your encryption scheme, and you can go about your work without having to worry about paranoia getting in the way of productivity.

Addenda:

Since you're doing shared hosting, and shared hosts are worthless: Get a dedicated source control host. Do not ever use a shared host for source control. Shared hosts are notorious for losing data and making false claims about data security and backups. Good examples of dedicated source control hosts: CVSDude, Beanstalk, GitHub

like image 168
Bob Aman Avatar answered Nov 09 '22 05:11

Bob Aman


It's old but i find other solution for this and may help others.

Today you can get some Virtual Provate Servers (VPS) very cheap. ($5/month)

Why VPS? You can install what you want! (Bob Aman's answer have a very good point about shared hosts security)

  1. Install TrueCrypt or other encryption system.
  2. Install SVN
  3. Create the SVN repository into the TrueCrypt Drive/File
  4. Configure SVN to use a SSH or other secure Data Transfer method.

I configured everything with THIS article: http://cinserely.blogspot.com.br/2010/10/creating-encrypted-subversion.html

How to (4.) http://tortoisesvn.net/sasl_howto.html

like image 27
Rafael Avatar answered Nov 09 '22 05:11

Rafael