Make it easier and more secure to encrypt properties for property files

Mandiax / soi-toolkit

Automatically exported from code.google.com/p/soi-toolkit

0 stars 0 forks source link

Make it easier and more secure to encrypt properties for property files #329

Closed GoogleCodeExporter closed 8 years ago

GoogleCodeExporter commented 8 years ago

The current approach for encrypting properties, decribed in:
http://code.google.com/p/soi-toolkit/wiki/UG_PropertyFile#Encrypted_passwords

has these negative aspects:
1. requires local installation and usage of commandline tools
2. the master-pw is exposed every time a password is to be encrypted

Proposed improvement
===============
Provide a simple mule-based webapp that can encrypt passwords.
Let the mule-app read the master-pw from the environment (where the master-pw 
must be configured anyway for runtime decryption of properties).
In this way, no local installation is needed and we have minimal exposure of 
the master-pw.

Original issue reported on code.google.com by hakan.d...@gmail.com on 21 Jan 2013 at 9:28

GoogleCodeExporter commented 8 years ago

This issue was updated by revision r2016.

Adding mule-webapp tool for property encryption

Original comment by hakan.d...@gmail.com on 21 Jan 2013 at 9:37

GoogleCodeExporter commented 8 years ago

Original comment by hakan.d...@gmail.com on 21 Jan 2013 at 9:38

Added labels: Milestone-Release0.6.1
Removed labels: Milestone-Release0.6.2

GoogleCodeExporter commented 8 years ago

This issue was updated by revision r2017.

Adding soitoolkit-encryption-web-tool to build

Original comment by hakan.d...@gmail.com on 21 Jan 2013 at 9:40

GoogleCodeExporter commented 8 years ago

Remains to add SSL for the app.
Earlier Mule version (3.2) had a bug that prevented SSL for this kind of 
mule-webapp, but it seems to be resolved now: 
http://www.mulesoft.org/jira/browse/MULE-5811

Original comment by hakan.d...@gmail.com on 21 Jan 2013 at 12:09

GoogleCodeExporter commented 8 years ago

This issue was updated by revision r2019.

Added channel security. App can now only be accessed via SSL/TLS.
See soitoolkit-encryption-web-tool/README.txt for config and deploy details.

Original comment by hakan.d...@gmail.com on 21 Jan 2013 at 2:04

GoogleCodeExporter commented 8 years ago

Remains: update wiki-page, add the mule-webapp as an alternative to the 
command-line tool for encryption.

Original comment by hakan.d...@gmail.com on 21 Jan 2013 at 2:06

GoogleCodeExporter commented 8 years ago

Original comment by magnus.l...@gmail.com on 18 Mar 2013 at 10:55

Added labels: Milestone-Release0.6.1-M2
Removed labels: Milestone-Release0.6.1

GoogleCodeExporter commented 8 years ago

This issue was updated by revision r2028.

Added wiki-docs

Original comment by hakan.d...@gmail.com on 18 Mar 2013 at 11:11

GoogleCodeExporter commented 8 years ago

Original comment by hakan.d...@gmail.com on 18 Mar 2013 at 11:13

Changed state: Fixed

GoogleCodeExporter commented 8 years ago

This issue was updated by revision r2032.

Added missing <relativePath>../../pom.xml</relativePath>

Original comment by magnus.l...@gmail.com on 18 Mar 2013 at 11:38