manifoldcf-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Aurélien (JIRA) <j...@apache.org>
Subject [jira] [Created] (CONNECTORS-1327) Put obfuscation password in an external file
Date Fri, 22 Jul 2016 14:13:20 GMT
Aurélien created CONNECTORS-1327:
------------------------------------

             Summary: Put obfuscation password in an external file
                 Key: CONNECTORS-1327
                 URL: https://issues.apache.org/jira/browse/CONNECTORS-1327
             Project: ManifoldCF
          Issue Type: Improvement
          Components: Framework core
    Affects Versions: ManifoldCF 2.4
            Reporter: Aurélien
            Priority: Minor


It seems that the obfuscation tool uses a symmetric encoding with password and salt to obfuscate/deobfuscate
passwords. I can see that there is a way to change the salt with a property, but it seems
that the password is hardcoded in the source code.In order to try to improve security in MCF,
I would like to be able to store the password (that is currently hardcoded) used for obfuscation
in a specific configuration file. The aim of this approach is to be able to change it but
also to be able to add specific linux access right on it. 



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message