Uploaded image for project: 'Red Hat Fuse'
  1. Red Hat Fuse
  2. ENTESB-7459

System property encrypted password in profile is logged as decrypted clear text by fabric agent

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Major Major
    • fuse-6.x-GA
    • jboss-fuse-6.3
    • Fabric8 v1
    • None
    • % %

      When encrypting a system property in a profile like this

      system.javax.net.ssl.trustStore=/keystores/test.jks
      system.javax.net.ssl.trustStorePassword=${crypt:34tPFod1/zoPA3Aqm80zi/SkUNhHJIZE}
      system.javax.net.ssl.keyStore=/keystores/test.jks
      system.javax.net.ssl.keyStorePassword=${crypt:34tPFod1/zoPA3Aqm80zi/SkUNhHJIZE}
      

      the decrypted system property is logged at INFO level when the profile is added to the container.

      15:15:05,620 | INFO | o.fabric8.agent) | DeploymentAgent | 174 - io.fabric8.fabric-agent - 1.2.0.redhat-630310 | DeploymentAgent fabric-agent-174.0.2 updated with {attribute.abstract=false, attribute.hidden=true, attribute.parents=fabric fabric-ensemble-0000-1 jboss-fuse-full, bundle.pax-url-war=mvn:org.ops4j.pax.url/pax-url-war/2.5.2/jar/uber, config.org.apache.aries.blueprint.synchronous=true, fabric.zookeeper.encrypted.values=system.javax.net.ssl.trustStorePassword, system.javax.net.ssl.keyStorePassword, fabric.zookeeper.pid=io.fabric8.agent,
      .
      .
      .
      resolve.optional.imports=true, service.pid=io.fabric8.agent, system.javax.net.ssl.keyStore=/keystores/test.jks, system.javax.net.ssl.keyStorePassword=changeit, system.javax.net.ssl.keyStorePassword.encrypted=crypt:34tPFod1/zoPA3Aqm80zi/SkUNhHJIZE, system.javax.net.ssl.trustStore=/keystores/test.jks, system.javax.net.ssl.trustStorePassword=changeit, system.javax.net.ssl.trustStorePassword.encrypted=crypt:34tPFod1/zoPA3Aqm80zi/SkUNhHJIZE}

              johnpoth John Poth
              rhn-support-qluo Joe Luo
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

                Created:
                Updated:
                Resolved: