[ { "Id": "586701", "ThreadId": "251268", "Html": "\r\n

Is there anyway to create a zip file with password protection on the complete file vs a password on the files contained within? I know this may not be spec but it seems silly to have to enter a password for each file.  I want a password required when\r\n someone tries to open the zipfile itself.

\r\n

 

\r\n

Thanks,

\r\n

Rut

\r\n", "PostedDate": "2011-03-25T13:47:04.85-07:00", "UserRole": null, "MarkedAsAnswerDate": null }, { "Id": "586847", "ThreadId": "251268", "Html": "

No, and maybe.

\r\n

DotNetZip does entry encryption, which means that the file data for each entry is encrypted, according to the zip spec. Using this method of zip encryption means that people can view the \"table of contents\" for a zip file (also known as the \"central directory\" in zip speak) without entering a password.

\r\n

There is a way to do \"central directory encryption\" described in the zip spec, but I haven't implemented that in DotNetZip. 

\r\n

Some possible ways around what you describe as the problem:

\r\n
    \r\n
  1. you say it seems silly to enter a password for each file. I'm not sure what you are using to unpack, but it seems like it's your own custom app.  in your application, cache the password for a given entry, then try it as the password for the next encrypted entry.   only prompt for a new password if the cached one fails. In the common case where the same password has been used for all entries in a zip, the user needs enter the password just once.
    2. \r\n
  2. Zip the zip.  If you want to keep the contents of a zip private, encrypt it inside another zip file.  The outer zip protects the inner zip.  The user needs to enter a password to unpack the inner zip, and only then can view the \"table of contents\" of said inner zip.
    3. \r\n
\r\n

 

", "PostedDate": "2011-03-26T00:40:15.55-07:00", "UserRole": null, "MarkedAsAnswerDate": null }, { "Id": "586872", "ThreadId": "251268", "Html": "

Thanks. I think I tried zipping the zip file but it didn't seem to work. I'll look at it again.  The end user would normally use winzip or winrar to open the zip file, not my application (which simply copies files and zips them). When opening in winrar, it asks for a password for each file.

", "PostedDate": "2011-03-26T04:51:25.163-07:00", "UserRole": null, "MarkedAsAnswerDate": null }, { "Id": "587527", "ThreadId": "251268", "Html": "

I have two questions now. I'm trying to save a zip file within a zipfile and password protect it.  When I open the outer zip with winrar and double-click on the inner zip, it prompts me for a password. If I enter nothing and press cancel it continues to open the inner zipfile. So it doesn't appear the password is required to open the inner zip.  See code below.

\n

 

\n

Also, is there a way to create a zip within a zip (with the inside zip password protected) and then unzip the outside zipfile so you are left with only the password protected zipfile?

\n

I've been trying to accomplish this but I'm having no luck.

\n

 

\n

        Dim tmpName As String
        Dim tmpZip As New ZipFile
        Dim zip As New ZipFile
        Dim path As String

       'Get the real filename and add TMP to create the inner zipfile
        tmpName = IO.Path.GetFileName(Me.ZipFileName)

        path = IO.Path.GetPathRoot(Me.ZipFileName)
        tmpName = \"TMP\" & tmpName

\n

       'Add the list of file paths/names to inner zipfile.
        For Each s As String In lstFilesToZip
            tmpZip.AddItem(s)
        Next

\n

         'Save inner zipfile
         tmpZip.Save(path & \"\\\" & tmpName)
        tmpZip = Nothing

\n

 

\n

        'create outer zipfile and add inner zipfile with password.
        zip.Password = ZipPassword
        zip.AddFile(path & \"\\\" & tmpName)

\n

        'Save as real filename.
        zip.Save(Me.ZipFileName)
        zip = Nothing

\n

 

\n

Thanks,

\n

Rut

", "PostedDate": "2011-03-28T05:34:34.397-07:00", "UserRole": null, "MarkedAsAnswerDate": null }, { "Id": "588972", "ThreadId": "251268", "Html": "

This code works for me

\r\n
\r\n
        Dim path As String = IO.Path.GetPathRoot(Me.ZipFileName)\r\n        System.Console.WriteLine(\"Path:{0}\", path)\r\n\r\n        'Get the real filename and add TMP to create the inner zipfile\r\n        Dim baseName As String = IO.Path.GetFileNameWithoutExtension(Me.ZipFileName)\r\n        Dim extension As String = IO.Path.GetExtension(Me.ZipFileName)\r\n        Dim innerZipName As String = baseName & \"-inner\" & extension\r\n        innerZipName = IO.Path.Combine(path, innerZipName)\r\n\r\n        System.Console.WriteLine(\"innerZipName = {0}\", innerZipName)\r\n        DeleteIfPresent(innerZipName)\r\n\r\n        Using innerZip = New ZipFile\r\n\r\n            'Add the list of file paths/names to inner zipfile.\r\n            For Each s As String In lstFilesToZip\r\n                innerZip.AddItem(s)\r\n            Next\r\n\r\n            'Save inner zipfile - no password protection needed\r\n            innerZip.Save(innerZipName)\r\n        End Using\r\n\r\n\r\n        DeleteIfPresent(Me.ZipFileName)\r\n        Using  outerZip = New ZipFile\r\n            'create outer zipfile and add inner zipfile with password.\r\n            outerZip.Password = Me.ZipPassword\r\n            Dim e As ZipEntry = outerZip.AddFile(innerZipName)\r\n            'Save as real filename.\r\n            outerZip.Save(Me.ZipFileName)\r\n        End Using\r\n\r\n        'Remove the \"temporary\" inner zip file from the filesystem
        IO.File.Delete(innerZipName)\r\n\r\n
\r\n
\r\n

First thing - I recommend that you always employ a Using clause with the ZipFile type.  Every example that I produce in the docucmentation and on the forums shows this.  Do it, to avoid problems.  Also, doing it this way avoids the need to set your variables equal to Nothing when finished.

\r\n

Ok - on to the code.  It produces a single zip file - that zipfile itself contains a single (nested) zipfile, which contains the entries from lstFileNames. The inner zip can be extracted only with a password. Once the inner is extracted, then you have a zipfile, which can be opened and viewed freely.

\r\n

 

", "PostedDate": "2011-03-30T11:03:09.217-07:00", "UserRole": null, "MarkedAsAnswerDate": null }, { "Id": "588976", "ThreadId": "251268", "Html": "\r\n
\r\n

Thanks but did you try opening the file (outer zip) with Winrar? When I double-click on the zip file I see the inner zipfile. When I double-click on it I get a password prompt. If I enter nothing and click ok\r\n it opens up the inner zipfile and I can see all my files (and open them) without ever entering a password.

\r\n

\r\n

Rut

\r\n

\r\n
\r\n
\r\n

From: Cheeso [email removed]\r\n
\r\nSent: Wednesday, March 30, 2011 2:03 PM
\r\nTo: jrutledge@triad.rr.com
\r\nSubject: Re: dotnetzip password question [DotNetZip:251268]

\r\n
\r\n
\r\n

\r\n

From: Cheeso

\r\n
\r\n

This code works for me

\r\n
\r\n
        Dim path As String = IO.Path.GetPathRoot(Me.ZipFileName)
\r\n
        System.Console.WriteLine("Path:{0}", path)
\r\n
\r\n
        'Get the real filename and add TMP to create the inner zipfile
\r\n
        Dim baseName As String = IO.Path.GetFileNameWithoutExtension(Me.ZipFileName)
\r\n
        Dim extension As String = IO.Path.GetExtension(Me.ZipFileName)
\r\n
        Dim innerZipName As String = baseName & "-inner" & extension
\r\n
        innerZipName = IO.Path.Combine(path, innerZipName)
\r\n
\r\n
        System.Console.WriteLine("innerZipName = {0}", innerZipName)
\r\n
        DeleteIfPresent(innerZipName)
\r\n
\r\n
        Using innerZip = New ZipFile
\r\n
\r\n
            'Add the list of file paths/names to inner zipfile.
\r\n
            For Each s As String In lstFilesToZip
\r\n
                innerZip.AddItem(s)
\r\n
            Next
\r\n
\r\n
            'Save inner zipfile - no password protection needed
\r\n
            innerZip.Save(innerZipName)
\r\n
        End Using
\r\n
\r\n
\r\n
        DeleteIfPresent(Me.ZipFileName)
\r\n
        Using  outerZip = New ZipFile
\r\n
            'create outer zipfile and add inner zipfile with password.
\r\n
            outerZip.Password = Me.ZipPassword
\r\n
            Dim e As ZipEntry = outerZip.AddFile(innerZipName)
\r\n
            'Save as real filename.
\r\n
            outerZip.Save(Me.ZipFileName)
\r\n
        End Using
\r\n
\r\n
        'Remove the "temporary" inner zip file from the filesystem
        IO.File.Delete(innerZipName)
\r\n
\r\n
\r\n

First thing - I recommend that you always employ a Using clause with the ZipFile type. Every example that I produce in the docucmentation and on the forums shows this. Do it, to avoid problems. Also, doing it this\r\n way avoids the need to set your variables equal to Nothing when finished.

\r\n

Ok - on to the code. It produces a single zip file - that zipfile itself contains a single (nested) zipfile, which contains the entries from lstFileNames. The inner zip can be extracted only with a password. Once\r\n the inner is extracted, then you have a zipfile, which can be opened and viewed freely.

\r\n

\r\n
\r\n
\r\n", "PostedDate": "2011-03-30T11:08:21.51-07:00", "UserRole": null, "MarkedAsAnswerDate": null }, { "Id": "589023", "ThreadId": "251268", "Html": "

Hmm, I don't have WinRar, so no, I haven't tried that. I tried Windows Explorer to open them, and in that case, I got prompted for the password when I tried extracting the inner zip.  If I enter the password, then it extracts; if I don't enter the password, then it does not extract.  Once extracted, the inner zip opens and I can view and extract those files just fine.

\n

I also tried the same thing in DotNetZip (using the graphical tool that is built on DotNetZip) and got essentially the same behavior.

\n

update: ok I just downloaded winRar 4.0, and ran it on a zipfile produced with the code that I showed above.  It did exactly what I described for Windows Explorer and for the DotNetZip tool.

\n

\"\"

\n

If I press \"Cancel\" when prompted for the password, it extracts no files.  If I click OK with a blank password, it gives me the dialog box shown above.  This is with the latest WinRar. 

\n

So, I think you must be doing something wrong. Or you're making a bad assumption, somewhere.

", "PostedDate": "2011-03-30T12:29:00.643-07:00", "UserRole": null, "MarkedAsAnswerDate": null } ]