Mailing-List: contact user-help@karaf.apache.org; run by ezmlm
Precedence: bulk
Reply-To: user@karaf.apache.org
Received-SPF: pass (nike.apache.org: domain of bengt.rodehav@gmail.com
 designates 209.85.214.176 as permitted sender)
MIME-Version: 1.0
Sender: bengt.rodehav@gmail.com
In-Reply-To: <7BED83CE-112D-46A3-836F-74D7983BFDA1@code-house.org>
References: 
 <CAJ0TPG+4M+XVFs5OooOFDRaP8SBMz9SfOQca4A-HnzK03M12fw@mail.gmail.com>
	<7BED83CE-112D-46A3-836F-74D7983BFDA1@code-house.org>
Date: Wed, 4 Jan 2012 23:42:43 +0100
Message-ID: 
 <CAJ0TPGKZbiw+NFe1+aeMA2s63-srecaW3Cz1v8-z86Xkrm2gRQ@mail.gmail.com>
Subject: Re: Encryption of passwords
From: Bengt Rodehav <bengt@rodehav.com>
To: user@karaf.apache.org
Content-Type: multipart/alternative; boundary=f46d0447f2d8b3a43704b5bb88f1

--f46d0447f2d8b3a43704b5bb88f1
Content-Type: text/plain; charset=ISO-8859-2
Content-Transfer-Encoding: quoted-printable

Thanks for you suggestion Lukasz but I already read that part.

Looking at it again, it seems like encryption is only supported in JAAS
configurations. I was hoping that it could be used in any configuration
file managed by config admin (or rather fileinstall). E g we configure a
lot of camel routes using e g ftp. In that case we need to configure the
route with the correct user and password. We currently do that using config
admin. I was hoping that Karaf's encryption support could make the
passwords in those configuration files encrypted. They would of course have
to be decrypted before the config admin feeds a service with the
configuration.

Did I completely misunderstand the encryption service?

/Bengt

2012/1/4 =A3ukasz Dywicki <luke@code-house.org>

> Please reffer the documentation:
>
>
> http://karaf.apache.org/manual/latest-2.2.x/developers-guide/security-fra=
mework.html#Encryptionservice
>
> For stronger security use a Jaspyt.
>
> =A3ukasz Dywicki
> --
> Code-House
> http://code-house.org
>
> Wiadomo=B6=E6 napisana przez Bengt Rodehav w dniu 2012-01-04, o godz. 21:=
22:
>
> I've seen that Karaf provides an encryption service but I haven't figured
> out how to use it.
>
> In our case we sometimes have to store passwords in configuration files.
> Can the encryption service be used to encrypt them and then decrypt them
> when configuration admin passes a configuration to a service? If so, how =
do
> I accomplish this?
>
> /Bengt
>
>
>
>
>
>

--f46d0447f2d8b3a43704b5bb88f1
Content-Type: text/html; charset=ISO-8859-2
Content-Transfer-Encoding: quoted-printable

Thanks for you suggestion Lukasz but I already read that part.<div><br></di=
v><div>Looking at it again, it seems like encryption is only supported in J=
AAS configurations. I was hoping that it could be used in any configuration=
 file managed by config admin (or rather fileinstall). E g we configure a l=
ot of camel routes using e g ftp. In that case we need to configure the rou=
te with the correct user and password. We currently do that using config ad=
min. I was hoping that Karaf&#39;s encryption support could make the passwo=
rds in those configuration files encrypted. They would of course have to be=
 decrypted before the config admin feeds a service with the configuration.<=
/div>
<div><br></div><div>Did I completely misunderstand the encryption service?<=
/div><div><br></div><div>/Bengt<br><br><div class=3D"gmail_quote">2012/1/4 =
=A3ukasz Dywicki <span dir=3D"ltr">&lt;<a href=3D"mailto:luke@code-house.or=
g">luke@code-house.org</a>&gt;</span><br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex"><div style=3D"word-wrap:break-word"><div>Ple=
ase reffer the documentation:</div><div><br></div><div><a href=3D"http://ka=
raf.apache.org/manual/latest-2.2.x/developers-guide/security-framework.html=
#Encryptionservice" target=3D"_blank">http://karaf.apache.org/manual/latest=
-2.2.x/developers-guide/security-framework.html#Encryptionservice</a></div>
<div><br></div><div>For stronger security use a Jaspyt.</div><span class=3D=
"HOEnZb"><font color=3D"#888888"><div><br></div><div>=A3ukasz Dywicki</div>=
</font></span><div><span class=3D"HOEnZb"><font color=3D"#888888"><div>--</=
div><div>
Code-House</div><div><a href=3D"http://code-house.org" target=3D"_blank">ht=
tp://code-house.org</a></div><div><br></div></font></span><div><span class=
=3D"HOEnZb"><font color=3D"#888888"><div>Wiadomo=B6=E6 napisana przez Bengt=
 Rodehav w dniu 2012-01-04, o godz. 21:22:</div>
</font></span><div class=3D"im"><br><blockquote type=3D"cite">I&#39;ve seen=
 that Karaf provides an encryption service but I haven&#39;t figured out ho=
w to use it.<div><br></div><div>In our case we sometimes have to store pass=
words in configuration files. Can the encryption service be used to encrypt=
 them and then decrypt them when configuration admin passes a configuration=
 to a service? If so, how do I accomplish this?</div>

<div><br></div><div>/Bengt</div>
</blockquote></div></div><div><br><div><br></div><br>
</div>
<br></div></div></blockquote></div><br></div>

--f46d0447f2d8b3a43704b5bb88f1--