Password without CLI

[1MAXT3HKphYo]

Is there a way to specify --sout-http-pwd or similar without using the command line? Otherwise the password shows up everywhere. I'm launching VLC on startup on a Raspberry Pi using systemd and a simple script. When I do "systemctl status my_script" I see the full command line for every child process of the script, password included.

I have a similar problem on the client side where all the passwords to all my cameras are visible in ps. Is it possible to use a script or configuration file or similar to pass configurations including sensitive information instead? I'm basically looking to do "raspivid --options-here -o - | vlc --stream-config /protected/dir/here.ext" where --stream-config is the option I can't currently find.

[Rémi Denis-Courmont]

You can set it in the configuration file.

[1MAXT3HKphYo]

Thanks! I found the settings I was looking for in my vlcrc.

[1MAXT3HKphYo]

One more (hopefully final) question. I can't find sout-https-cert, sout-https-key, etc... in my vlcrc. Will these https options work in the config file or do they still have to be passed through the command line?

[Rémi Denis-Courmont]

Did you mean http-cert and http-key ? There are no benefits to hiding those from the CLI though. The content of the key file should be secret, not its path.

[1MAXT3HKphYo]

Did you mean http-cert and http-key ?

Yes. I found it now. I was grepping vlcrc for "https" and not finding it. Thank you! So, to clarify, Are all options for the vlcrc necessarily identical to the long form command line?

My reading of the access documentation makes it seem as if the "cert" would be like

Code: Select all

--sout-https-cert file.name (or) --sout "#standard{ ... ,access=https{cert=file.name, ... }, ... }"

Do I have that wrong and I should be using http instead without the --sout prefix?

There are no benefits to hiding those from the CLI though.

Understood, but I'm in the process of writing a script that will make a configuration file and launch vlc. If I'm going to put some configuration in a file, I might as well put it all.