Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have a question about security of a file on a webserver. I have a file on my webserver which is used by my webapplication. It's a bitcoin wallet. Essentially it's a file with a private key in it used to decrypt messages.

Now, my webapplication uses the file, because it's used to recieve transactions made trough the bitcoin network. I was looking into ways to secure it. Obviously if someone has root access to the server, he can do the same as my application. However, I need to find a way to encrypt it.

I was thinking of something like this, but I have no clue if this is actually going to work:

  1. Client logs in with some sort of client certificate.
  2. Webapplication creates a wallet file.
  3. Webapplication encrypts file with client certificate.
  4. If the application wants to access the file, it has to use the client certificate.

So basically, if someone gets root access to the site, they cannot access the wallet. Is this possible and does anyone know about an implementation of this?

Are there any problems with this? And how safe would this be?

share|improve this question
3  
As long as the computation takes place on the server a root user will always be able to access the decrypted wallet. If you want to secure it move everything to client side. –  Robert Jun 24 '11 at 15:20

1 Answer 1

Very good question. I have just recently gotten into Bitcoin (just as a hobby, because I know the bubble is already burst). You might want to check this forum if you need any help. https://bitcointalk.org/index.php?topic=17240.0

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.