Uploaded image for project: 'AMQ Broker'
  1. AMQ Broker
  2. ENTMQBR-908

Support masked passwords in bootstrap.xml

    XMLWordPrintable

Details

    • Story
    • Resolution: Done
    • Major
    • AMQ 7.2.0.GA
    • AMQ 7.0.3.GA
    • configuration
    • None
    • Documentation (Ref Guide, User Guide, etc.), Release Notes
    • You can now mask passwords in the broker.xml configuration file. Previously, password masking was not supported for broker.xml, which meant that the passwords in the file were stored in plain text.
    • Documented as Feature Request

    Description

      User Story:
      As an operator, I have configured SSL for the web admin console and Jolokia REST interface, but the passwords for my SSL resources are in plain text. I need a way to mask these passwords per my company's policy that no passwords should be in plain text.

      We provide a feature to mask passwords in the broker.xml and and ra.xml file [1]. However, it doesn't appear passwords in the bootstrap.xml (when the console is secured with HTTPS) can be masked. This enhancement has been opened to allow passwords in the bootstrap.xml to be masked using the built-in masking feature provided by the broker.

      [1] https://github.com/apache/activemq-artemis/blob/master/docs/user-manual/en/masking-passwords.md#password-masking-in-server-configuration-file

      Attachments

        Issue Links

          Activity

            People

              gaohoward Howard Gao
              rhn-support-jsherman Jason Sherman
              Sean Davey Sean Davey (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              8 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: