Uploaded image for project: 'ModeShape'
  1. ModeShape
  2. MODE-1688

All passwords added in 3.1 should be encrypted

    XMLWordPrintable

Details

    • Feature Request
    • Resolution: Won't Do
    • Major
    • None
    • 3.1.0.Final
    • Federation, JCR
    • None

    Description

      Note: 3.0 did not include any passwords in the configuration file nor in ModeShape-defined content. There is no security issue in 3.0.

      However, in 3.1 we'll likely need to add configure passwords for the new connectors, and we need an AES-accepted way of using only encrypted passwords in the configuration file and storing all passwords in encrypted form.

      This mechanism should work outside of AS7, but should also be compatible with the AS7 security subsystem.

      Attachments

        Issue Links

          Activity

            People

              Unassigned Unassigned
              rhauch Randall Hauch (Inactive)
              Votes:
              2 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: