Bad sigs about python-keepass HOT 13 CLOSED

Hi Matt,

This code operates on KeePass files in v3 file format only. Such files are produced by KeePass 1 and KeePassX. The .kdbx files made by KeePass 2 are in some totally different format. I have no plans to ever add support for this format.

I've never used KeePass (neither version 1 nor 2, actually) but you could check if it can save your DB in this old v3 file format. Or maybe there is some 3rd format shared by both KeePass 2 and either KeePass 1 or KeePassX that would let you finally convert to the v3 format.

-Brett.

from python-keepass.

Hey @brettviren I just checked and the latest keepass2 GUI program doesn't seem to allow you to save to another version of the database. Not sure what's going on here.

from python-keepass.

I believe KeePass V2 allows you to save databases in the KeePass V1 format using the Export option, on the file menu.

from python-keepass.

Thanks @smarthall I shall hunt down that option.

from python-keepass.

So I found the option unfortunately it is only available on Windows platforms (for some reason) so I was unable to try it.

from python-keepass.

Hi Brett,

In my case, decryption itself is failing and wondering if this format should have been recognized or not. I created the file using KeepPassX on Mac, and file reports this:

Keepass password database 1.x KDB, 48 groups, 773 entries, 6000 key transformation rounds

BTW, I don't like typing passwords on the command-line where they can be accidentally seen (and can get into the shell history), so I suggest reading it when one is not specified. In my case, I just used a quick hack to workaround like this:

diff --git a/python/keepass/cli.py b/python/keepass/cli.py
index bdfb022..fd58d21 100644
--- a/python/keepass/cli.py
+++ b/python/keepass/cli.py
@@ -11,6 +11,7 @@ Command line interface to manipulating keepass files
 # later version.

 import sys
+import getpass

 class Cli(object):
     '''
@@ -148,7 +149,7 @@ class Cli(object):
         except IndexError:
             print "No database file specified"
             sys.exit(1)
-        self.db = kpdb.Database(files[0],opts.masterkey)
+        self.db = kpdb.Database(files[0],opts.masterkey or getpass.getpass())
         self.hier = self.db.hierarchy()
         return

from python-keepass.

Hi haridsv.

I think you have some other file format. Using one of my KeePassX files I get:

$ file junk.kdb 
junk.kdb: DBase 3 data file

As for hiding passwords from shell history you can simply preface your command line with a space. At least in Bash 4.1.2 I see that feature.

But, if you want to make a pull request with your change I'll merge it in.

from python-keepass.

As per their FAQ at http://www.keepassx.org/faq/#q_2, they are using what is called KeePass 1.x (Classic) format (and I am using their KeePassX 0.x release, not the newer 2.x release). This is also compatible with the MiniKeePass on iOS and KeePassDroid on Android (I sync the same file via Dropbox). What program to you use to create your kdb file?

The change I made is a quick hack, which doesn't account for the fact that you could have databases with no passwords. I will think of a way to allow both and send a pull request.

BTW, I am aware of the bash feature to skip history, but I don't think many people are aware of it, and I still don't prefer using it for the fact that it is still visible on the screen for sometime :)

from python-keepass.

There might be some confusion here over KeePass vs. KeePassX versions and the various versions of the database file formats.

This package handles keepass file format v3. This is used by KeePassX 0.4.3 at least (this is the version I use now). I've never used anything else but KeePassX and only up to 0.4.3. I think there is an effort to rewrite KeePassX but I've not looked into it nor know what it's version numbers look like. The "non-X" KeePass is a whole different package which I have not even tried to run.

Given the use of similar or same names in this space I would not be surprised if saying "keepass file format v3" is still ambiguous. But, that's all I know how to describe what python-keepass supports.

HTH.

from python-keepass.

Interestingly, that is exactly the same application and version I am using:

Looks like my file should have been supported, so could this be a bug in python-keepass then?

from python-keepass.

Hmm, okay our differing output from file could mean that your "magic" file that file uses as its lookup could have better support for KDB files than mine. Although the reporting of version "1.x" confuses me. I think that might refer to the KeePass (not-X) application version number.

I don't know why python-keepass is not decrypting your file. Maybe you can make and post a sample file which fails for you and I could see if I can reproduce it.

from python-keepass.

Hi,

Got the same problem with a new fresh sample Keepass db (created from scratch with KeePass 2.30).

$ keepassc.py open -m "aa" ~/NewDatabase.kdbx
Traceback (most recent call last):
File "/usr/bin/keepassc.py", line 4, in
import('pkg_resources').run_script('python-keepass==1.0', 'keepassc.py')
File "/usr/lib/python2.7/site-packages/pkg_resources/init.py", line 735, in run_script
self.require(requires)[0].run_script(script_name, ns)
File "/usr/lib/python2.7/site-packages/pkg_resources/init.py", line 1659, in run_script
exec(script_code, namespace, namespace)
File "/usr/lib/python2.7/site-packages/python_keepass-1.0-py2.7.egg/EGG-INFO/scripts/keepassc.py", line 14, in

File "build/bdist.linux-x86_64/egg/keepass/cli.py", line 86, in call
File "build/bdist.linux-x86_64/egg/keepass/cli.py", line 151, in _open
File "build/bdist.linux-x86_64/egg/keepass/kpdb.py", line 38, in init
File "build/bdist.linux-x86_64/egg/keepass/kpdb.py", line 52, in read
File "build/bdist.linux-x86_64/egg/keepass/header.py", line 82, in init
File "build/bdist.linux-x86_64/egg/keepass/header.py", line 146, in decode
IOError: Bad sigs:
2594363651 3041655653
2594363651 3041655655

OS : Fedora 23
NewDatabase.kdbx.zip

from python-keepass.

.kdbx is not a supported format.

from python-keepass.