Bug 1070279 - Adding keystore/trusstore password encryption/obfuscation in rhq-server.properties and agent-configuration.xml files
Summary: Adding keystore/trusstore password encryption/obfuscation in rhq-server.prope...
Keywords:
Status: CLOSED DUPLICATE of bug 1070262
Alias: None
Product: JBoss Operations Network
Classification: JBoss
Component: Agent, Core Server, Installer, Security
Version: JON 3.3.0
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
: JON 3.3.0
Assignee: RHQ Project Maintainer
QA Contact: Mike Foley
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2014-02-26 14:31 UTC by Heiko W. Rupp
Modified: 2014-03-06 05:53 UTC (History)
1 user (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2014-03-06 05:50:45 UTC
Type: Enhancement
Embargoed:


Attachments (Terms of Use)

Description Heiko W. Rupp 2014-02-26 14:31:27 UTC
Currently keystore and truststore passwords are stored in plaintext in the files so they can be viewed by people simply browsing the file

The values stored in the rhq-server.properties and agent-configuration.xml files should be encrypted/obfuscated - we should have script similar to the generate-db-password.sh that will do this.

See also Bug 1070262 and Bug 577239 (RHQ)

Comment 1 Larry O'Leary 2014-03-06 05:50:45 UTC

*** This bug has been marked as a duplicate of bug 1070262 ***


Note You need to log in before you can comment on or make changes to this bug.