Mailing-List: contact users-help@felix.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@felix.apache.org
From: peter.kriens@aqute.biz
Content-Type: text/plain;
	charset=utf-8
Content-Transfer-Encoding: quoted-printable
Mime-Version: 1.0 (1.0)
Subject: Re: Plaintext password in configuration files for Jetty and
 Webconsole
Message-Id: <DC59A9DE-C622-40F9-89CA-2CDAAFAEF2FC@aqute.biz>
Date: Sat, 23 Apr 2016 12:12:24 -0400
References: <57179B34.7090100@hupie.com>
 <4DBDB53F-D2D5-489D-8118-DEC54D92ED47@adobe.com>
 <571B9234.5020800@apache.org>
In-Reply-To: <571B9234.5020800@apache.org>
To: users@felix.apache.org

You could adjust cm to recognize a macro and expand that macro to something l=
ocal like a file, a system property, or an environment variable.

That is how I solved it in the Configurer. Works very well on Travis that al=
lows you to configure with encrypted data that is decrypted as environment v=
ariables.

Peter Kriens

Sent from my iPhone

> On Apr 23, 2016, at 11:18 AM, Carsten Ziegeler <cziegeler@apache.org> wrot=
e:
>=20
> Antonio Sanso wrote
>> hi,
>>=20
>> I would actually have the same question?
>>=20
>> Is there anything can be done here ? If not there is any plan to improve t=
his?
>> I might try to help out in this area providing a patch=E2=80=A6
>>=20
>> Anyone :)?
>=20
> Didn't we discuss some time back to have a crypt service and leave it up
> to every component to use this service to decrypt configuration properties=
?
>=20
> Automatic decryption e.g. in configuration admin is not really a good
> idea, as this would mean everyone can get the configuration decrypted
> and it's visible in the web console, in the status zip etc.
>=20
> Regards
> Carsten
> --=20
> Carsten Ziegeler
> Adobe Research Switzerland
> cziegeler@apache.org
>=20
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@felix.apache.org
> For additional commands, e-mail: users-help@felix.apache.org
>=20

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@felix.apache.org
For additional commands, e-mail: users-help@felix.apache.org