cloudstack-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Ron Wheeler (JIRA)" <j...@apache.org>
Subject [jira] [Created] (CLOUDSTACK-4151) 4.5.5. About Password and Key Encryption unclear
Date Wed, 07 Aug 2013 14:30:48 GMT
Ron Wheeler created CLOUDSTACK-4151:
---------------------------------------

             Summary: 4.5.5. About Password and Key Encryption unclear
                 Key: CLOUDSTACK-4151
                 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-4151
             Project: CloudStack
          Issue Type: Improvement
      Security Level: Public (Anyone can view this level - this is the default.)
          Components: Doc
    Affects Versions: 4.1.1
         Environment: all
            Reporter: Ron Wheeler


4.5.5. About Password and Key Encryption

The purpose of this section is a bit obcure. What is the reader supposed to do with this information?
There seems to be a lot of magical activities here wherein keys and secrets get stored in
databases without any mention of how they get there.
There seems to be a list of items that are incrypted but no explaination about what is the
reader\'s role in this or who creates them or why you are telling the reader this at this
point in the process.


It might be clearer if " The data values are encrypted and decrypted using a database secret
key, which is stored in one of CloudStack’s internal properties files along with the database
password. The other encrypted values listed above, such as SSH keys, are in the CloudStack
internal database."  included some mention about how this happens and when and whether the
reader has to do something to make any of this happen correctly.

If it is really only informational and has nothing to do with the installation process, it
could be moved out of the flow and referenced as something that terminally curious might wish
to know.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Mime
View raw message