tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Harris, Jeffrey E." <Jeffrey.Har...@ManTech.com>
Subject RE: Need to Specify keystorePass on Command Line
Date Mon, 11 Feb 2013 23:04:41 GMT


> -----Original Message-----
> From: Christopher Schultz [mailto:chris@christopherschultz.net]
> Sent: Saturday, February 09, 2013 8:29 AM
> To: Tomcat Users List
> Subject: Re: Need to Specify keystorePass on Command Line
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
>
> Jeffrey,
>
> On 2/8/13 5:03 PM, Harris, Jeffrey E. wrote:
> > For our implementation, it does not matter whether another process
> can
> > read the startup parameters - as long as the password is not stored
> in
> > a file and disappears when the Tomcat's host server is shutdown.
>
> What about virtual memory? The OS can page anything any time it wants?
> Are you using whole-disk encryption? If you don't you are surely
> wasting your time.
>
> - -chris
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
> Comment: GPGTools - http://gpgtools.org
> Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
>
> iEYEAREIAAYFAlEWTwEACgkQ9CaO5/Lv0PDYXgCfd/vOLTfTWdMw9aIpACJPZe4U
> nlQAnR8BKHvTYtXWcjqx3F3ZYHAjXLOr
> =K3YE
> -----END PGP SIGNATURE-----
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org

All,

I understand that there is no good, secure solution.  However, my hands are tied on this matter,
and I would appreciate if you would focus on providing technical assistance in implementing
a solution within the constraints I have been given.

I will post my current status shortly.

Thank you,

Jeffrey Harris

This e-mail and any attachments are intended only for the use of the addressee(s) named herein
and may contain proprietary information. If you are not the intended recipient of this e-mail
or believe that you received this email in error, please take immediate action to notify the
sender of the apparent error by reply e-mail; permanently delete the e-mail and any attachments
from your computer; and do not disseminate, distribute, use, or copy this message and any
attachments.
Mime
View raw message