Bug 1164299 - tomcat.security.[keystore,truststore].password properties not getting encrypted/obfuscated
Summary: tomcat.security.[keystore,truststore].password properties not getting encrypt...
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: JBoss Operations Network
Classification: JBoss
Component: Agent
Version: JON 3.3.0
Hardware: Unspecified
OS: Unspecified
unspecified
urgent
Target Milestone: CR03
: JON 3.3.0
Assignee: Stefan Negrea
QA Contact: Mike Foley
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2014-11-14 15:25 UTC by Garik Khachikyan
Modified: 2015-01-04 22:00 UTC (History)
2 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2014-12-11 14:01:16 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)

Description Garik Khachikyan 2014-11-14 15:25:59 UTC
Description of problem:
reference: https://bugzilla.redhat.com/show_bug.cgi?id=1070262#c56

Version-Release number of selected component (if applicable):
JON 3.3.GA

How reproducible:
always

Steps to Reproduce:
1.see the referenced comment.
2.
3.

Actual results:
2 properties from "~/.java/.userPrefs/rhq-server/default/prefs.xml" not getting masked:
---
rhq.server.tomcat.security.keystore.password=secret
rhq.server.tomcat.security.truststore.password=secret


Expected results:
_all_ sensitive password data should get encrypted/obfuscated

Additional info:

Comment 2 Simeon Pinder 2014-11-18 04:14:15 UTC
Moving this to MODIFIED with commit :f8e5a9ec4000 for JON 3.3 CR03 build. Assigning to Stefan.

Comment 3 Simeon Pinder 2014-11-18 04:27:29 UTC
Moving to ON_QA as available to test with latest brew build:
https://brewweb.devel.redhat.com//buildinfo?buildID=399113

Comment 5 Garik Khachikyan 2014-11-19 15:32:05 UTC
# VERIFIED

works!

both files on server side got masked. A hint (and a good note for me to remember) - ~/.java/.userPrefs/rhq-server/default/prefs.xml gets "fixed" with masking passwords once the server starts :) and it does the job (masks all passwords).

thanks.


Note You need to log in before you can comment on or make changes to this bug.