Bitcoin Forum
November 10, 2024, 10:43:57 AM *
News: Latest Bitcoin Core release: 28.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: password protected wallet with bitcoind  (Read 953 times)
rupy (OP)
Hero Member
*****
Offline Offline

Activity: 725
Merit: 503



View Profile
April 08, 2013, 10:23:45 AM
 #1

Will there be a password property on the JSON API to send money?

I mean to host the bitcoind on AWS EC2, which implies I need some kind of encryption if people are to trust this setup, how do other pool operators manage this?

BANKBOOK GWT Wallet & no-FIAT Billing API
Revalin
Hero Member
*****
Offline Offline

Activity: 728
Merit: 500


165YUuQUWhBz3d27iXKxRiazQnjEtJNG9g


View Profile
April 09, 2013, 04:57:14 AM
 #2

Yes, you can use walletpassphrase to unlock the wallet, send the coins, then relock the wallet.

Why are you doing this though?  You haven't added much security if the script which unlocks the wallet is on the same server.  If the script is on another server, why not just sen the coins from there?

      War is God's way of teaching Americans geography.  --Ambrose Bierce
Bitcoin is the Devil's way of teaching geeks economics.  --Revalin 165YUuQUWhBz3d27iXKxRiazQnjEtJNG9g
rupy (OP)
Hero Member
*****
Offline Offline

Activity: 725
Merit: 503



View Profile
April 09, 2013, 07:48:02 AM
 #3

I will load the password from a remote location encrypted into the web server memory so it will be VERY hard for any amazon employee or anyone else to steal the wallet.

BANKBOOK GWT Wallet & no-FIAT Billing API
rupy (OP)
Hero Member
*****
Offline Offline

Activity: 725
Merit: 503



View Profile
April 19, 2013, 01:16:48 PM
 #4

Ok, I did some additional thinking around this, so this is how you would do it?

1) walletpassphrase (1 sec.)
2) sendtoaddress
3) walletlock

The scenario here is to have a bitcoind running with HTTPS on a server that is outside of my physical control.

The client software would be on the same machine, and the password would only be stored encrypted (with a custom encryption) in the memory of the client software, fetched over HTTPS when the client is started from a secure location _under_ my physical control and only available when I start the client.

Is this how pool owners do it?

BANKBOOK GWT Wallet & no-FIAT Billing API
rupy (OP)
Hero Member
*****
Offline Offline

Activity: 725
Merit: 503



View Profile
April 19, 2013, 01:19:22 PM
 #5

But I also just figured that you can't steal bitcoins, because you cannot spend stolen bitcoins EVER!

BANKBOOK GWT Wallet & no-FIAT Billing API
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!