I was looking at Ansible Vault which is used for encryption in Ansible playbooks. The Ansible documentation seems to be thin on details of how it works, apart from mentioning that the default cipher is AES. I can't confidently figure it out myself from the source code.
I can see the result of using ansible-vault
to encrypt a test file:
$ANSIBLE_VAULT;1.1;
AES256
DIGITS
DIGITS
etc.
I found this post which explains how to decrypt an Ansible-Vault-encrypted file using a patched version of openssl. Can anyone explain whether it's possible to decrypt an Ansible Vault file using vanilla tools not packaged with Ansible? (Assuming you know the password, of course).