Return-Path: Delivered-To: apmail-tomcat-users-archive@www.apache.org Received: (qmail 65065 invoked from network); 28 Feb 2011 16:03:00 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.3) by minotaur.apache.org with SMTP; 28 Feb 2011 16:03:00 -0000 Received: (qmail 64546 invoked by uid 500); 28 Feb 2011 16:02:56 -0000 Delivered-To: apmail-tomcat-users-archive@tomcat.apache.org Received: (qmail 64346 invoked by uid 500); 28 Feb 2011 16:02:53 -0000 Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: "Tomcat Users List" Delivered-To: mailing list users@tomcat.apache.org Received: (qmail 64337 invoked by uid 99); 28 Feb 2011 16:02:52 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 28 Feb 2011 16:02:52 +0000 X-ASF-Spam-Status: No, hits=0.7 required=5.0 tests=RCVD_IN_DNSWL_NONE,SPF_NEUTRAL X-Spam-Check-By: apache.org Received-SPF: neutral (nike.apache.org: local policy) Received: from [76.96.59.211] (HELO QMTA11.westchester.pa.mail.comcast.net) (76.96.59.211) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 28 Feb 2011 16:02:43 +0000 Received: from omta07.westchester.pa.mail.comcast.net ([76.96.62.59]) by QMTA11.westchester.pa.mail.comcast.net with comcast id DTwR1g0041GhbT85BU2NtB; Mon, 28 Feb 2011 16:02:22 +0000 Received: from [192.168.1.201] ([69.143.109.145]) by omta07.westchester.pa.mail.comcast.net with comcast id DU2K1g02838FjT13TU2LY2; Mon, 28 Feb 2011 16:02:20 +0000 Message-ID: <4D6BC70C.4000502@christopherschultz.net> Date: Mon, 28 Feb 2011 11:02:20 -0500 From: Christopher Schultz User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101207 Thunderbird/3.1.7 MIME-Version: 1.0 To: Tomcat Users List Subject: Re: [OT] Memory Leak in Tomcat References: <4D644B1D.6050704@ice-sa.com> <4D6526D8.9020604@christopherschultz.net> <4D65291C.80900@christopherschultz.net> <4D652C1F.8080700@christopherschultz.net> <4D6531AC.2050602@christopherschultz.net> <7215BA462D00D343B2837F9113F0131F0702C7@POSTOFFICE02.polydyne.com> <4D66281C.7010603@ice-sa.com> <7215BA462D00D343B2837F9113F0131F0704E3@POSTOFFICE02.polydyne.com> <4D66D7BC.9000003@ice-sa.com> <4D67CEFA.1060806@ice-sa.com> <4D67F2EC.1030900@christopherschultz.net> In-Reply-To: X-Enigmail-Version: 1.2a1pre Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Virus-Checked: Checked by ClamAV on apache.org -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 הילה, On 2/28/2011 5:17 AM, הילה wrote: > How can I encrypt the password inside the xml file? 0. $file = conf/server.xml 1. Use your favorite encryption tool to encrypt the password and shove it into $file 2. Use that same tool in some code you hack-into Tomcat to read it back out. 3. Store the key to your favorite-tool encryption package in another file (say, s3cr3t.key) 4. $file = s3cr3t.key 5. Go to step 1. Repeat this process until you feel like you're safe. (Hint: you are still not safe). Scratch that: repeat this process until your boss or your auditor feel like they are safe. - -chris -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk1rxwwACgkQ9CaO5/Lv0PCtGQCgtxVxV9+N0AvRuYw0U6mi9ki1 ikgAn1xQNqRRtSKby531xKRHizxzEFwD =uuFd -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org For additional commands, e-mail: users-help@tomcat.apache.org