Howto Access an IPCOP Backup File
In my company I’m using two IPCOP router (one as an backup) to decouple a test hardware configuration from the company network. Additionally I had modified the setup to create 4 additional VLANs.
For quite some time I’ve negelected to keep up with the released updates. So these routers were still running 1.4.10, while 1.4.21 is current. Before update 1.4.11 it was easy to get access to the backup files, since IPCOP provided the option to write uncrypted backups. This was changed with 1.4.11 with the additional security option, that a backup password needs to be created.
Apparently no one else had the desire to look at the backup files, since searching the Web didn’t turn up any hints, what needed to be done to get at the backup content. So, in the end I looked at the IPCOP sources.
This steps need to be executed:
Export the backup key from the IPCOP backup Web interface.
The exported backup key needs to be converted by executing
openssl enc -a -d -aes256 -salt \
-in <exported backup key file> \
-out backup.key
The backup password is required for this operation.
Then the IPCOP backup can be converted into the original tar-achive.
openssl des3 -d -salt -in <IPCOP backup file>.dat \
-out backup.tgz -kfile backup.key`
The tar-archive can now be imported into your local file system for examination.
