Can I encrypt web.config with a specialized security provider that is not built in the GAC?

Question

I wrote a custom secure configuration provider for my web.config.

When I try to encrypt my web.config file, I get the following error from aspnet_iisreg

aspnet_regiis.exe -pef appSettings. -prov CustomProvider (runs in my MSBuild)

Failed to load file or assembly "MyCustomProviderNamespace" or one of its dependencies. The system cannot find the specified file.

After checking in the Fusion log, I confirm that it checks both the GAC and the "C: /WINNT/Microsoft.NET/Framework/v2.0.50727/" (aspnet_iisreg location). But he cannot find a supplier.

I do not want to move my component to the GAC, I want to leave the custom assembly in my ApplicationBase to copy to different servers without the need to pull / pop from the GAC.

Here is my provider configuration in web.config file.

<configProtectedData> <providers> <add name="CustomProvider" type="MyCustomProviderNamespace.MyCustomProviderClass, MyCustomProviderNamespace" /> </providers> </configProtectedData> 

I want aspnet_iisreg to check my ApplicationBase database folder for this assembly. Anyone got any ideas?

Answer 1

The dirty bit, what I ended up doing is to add a DLL that performs encryption in the GAC of the build machine. This encrypted the configuration in order.

When deploying the solution, I copied the Dll to ApplicationBase, the application was able to decrypt it successfully.