Page 1 of 1

Password without CLI

Posted: 29 Jan 2019 02:09
by 1MAXT3HKphYo
Is there a way to specify --sout-http-pwd or similar without using the command line? Otherwise the password shows up everywhere. I'm launching VLC on startup on a Raspberry Pi using systemd and a simple script. When I do "systemctl status my_script" I see the full command line for every child process of the script, password included.

I have a similar problem on the client side where all the passwords to all my cameras are visible in ps. Is it possible to use a script or configuration file or similar to pass configurations including sensitive information instead? I'm basically looking to do "raspivid --options-here -o - | vlc --stream-config /protected/dir/here.ext" where --stream-config is the option I can't currently find.

Re: Password without CLI

Posted: 29 Jan 2019 16:46
by Rémi Denis-Courmont
You can set it in the configuration file.

Re: Password without CLI

Posted: 30 Jan 2019 01:57
by 1MAXT3HKphYo
Thanks! I found the settings I was looking for in my vlcrc.

Re: Password without CLI

Posted: 30 Jan 2019 02:06
by 1MAXT3HKphYo
One more (hopefully final) question. I can't find sout-https-cert, sout-https-key, etc... in my vlcrc. Will these https options work in the config file or do they still have to be passed through the command line?

Re: Password without CLI

Posted: 30 Jan 2019 19:12
by Rémi Denis-Courmont
Did you mean http-cert and http-key ? There are no benefits to hiding those from the CLI though. The content of the key file should be secret, not its path.

Re: Password without CLI

Posted: 30 Jan 2019 22:44
by 1MAXT3HKphYo
Did you mean http-cert and http-key ?
Yes. I found it now. I was grepping vlcrc for "https" and not finding it. Thank you! So, to clarify, Are all options for the vlcrc necessarily identical to the long form command line?

My reading of the access documentation makes it seem as if the "cert" would be like

Code: Select all

--sout-https-cert file.name (or) --sout "#standard{ ... ,access=https{cert=file.name, ... }, ... }"
Do I have that wrong and I should be using http instead without the --sout prefix?
There are no benefits to hiding those from the CLI though.
Understood, but I'm in the process of writing a script that will make a configuration file and launch vlc. If I'm going to put some configuration in a file, I might as well put it all.