Solaris Encryption and decryption

1. Encrypt and Decrypt file in Solaris System.
Problem Scenario:
You need to run .sh file in every time in your system. In so many cases you run this .sh file in crontab
scheduler system, where .sh file exists in your system. Everytime you need to put credential on this file,
like you ftp a file from source to target you need to put target ftp information in this .sh file.
Another case you need to take rman backup in every midnight or delete archive log in a specific period,
where you need to put db credential on this .sh file. You don’t know who access your system, but they
can easily get your confidential information by reading this .sh file.
To overcome this issue you can encrypt this .sh file with keyfile , at the time scheduler it will decrypt this
.sh file, after executing this .sh file it’s automatically delete in system.
Real example:
I want delete archive log in oracle database in (11.33 PM) using .sh file in crontab, also want no one can
access my .sh file.
Step 1: I create a flat file named archive_delete.sh which code is below
ORACLE_BASE=/u01/app/oracle
ORACLE_HOME=/u01/app/oracle/product/11.2.0/db_1
ORACLE_SID=SOURCEDB
LD_LIBRARY_PATH=$ORACLE_HOME/lib
PATH=$PATH:/usr/local/bin:/usr/sbin:/usr/bin:/usr/openwin/bin:/usr/ucb:$ORACLE_HOME/bin
export ORACLE_BASE ORACLE_HOME ORACLE_SID LD_LIBRARY_PATH PATH
rman target sys/sys123@sourcedb log
/export/home/oracle/ARCHIVE_PURGE/log/DR_archive_del_`date +%d%m%y-%H%M `.log<< EOF
run
{
delete noprompt archivelog all completed before 'sysdate-2';
}
EXIT;
EOF

2. Step 2: Now I generate a keyfile for this encryption this flat archive_delete.sh
dd if=/dev/urandom of=123.txt bs=16 count=1
Keyfile 123.txt generated.
If you want to read this file you found that
Step 3: Now I generate encrypted .sh file from archive_delete.sh using 123.txt keyfile
encrypt -a aes -k /export/home/oracle/script/123.txt -i /export/home/oracle/script/archive_delete.sh -o
/export/home/oracle/script/en_archive_delete.sh
Successfully generated en_archive_delete.sh.
If you want to read this en_archive_delete.sh file you found that
File is totally encrypted 

3. Step 4 : Now delete this flat archive_delete.sh file , where you provide your valuable in system
password in your database.
Step 5: Now I create a .sh file which decrypt en_archive_delete.sh file , after executing this decrypt .sh
file automatically deleted form Solaris system.
decrypt -a aes -k /export/home/oracle/script/123.txt -i
/export/home/oracle/script/en_archive_delete.sh -o /export/home/oracle/script/de_archive_delete.sh
sh /export/home/oracle/script/de_archive_delete.sh
rm /export/home/oracle/script/de_archive_delete.sh
Step 6: Now execute this run.sh file
Check the rman log file

4. It’s running fine , on the other hand decrypted file .sh file which is generated also deleted from system .
Now attached this run.sh file crontab and check any issue arise or not.
Check the rman log file
Wow !! No one can your DB system password , who enter your system. Enjoy 