search

PILLUTLAAVINASH / google-enterprise-connector-manager

Automatically exported from code.google.com/p/google-enterprise-connector-manager
0 stars 0 forks source link

Encrypt property with 'password' case insensitive #81

Closed GoogleCodeExporter closed 8 years ago

GoogleCodeExporter commented 8 years ago 
EncryptedProperytPlaceholderConfigurer currently only encrypts properties
named "Password".  I would be better modify it to encrypt any property that
contained the word 'password' (case-insensitive) in it.

Original issue reported on code.google.com by jeffreyl...@gmail.com on 21 Apr 2008 at 9:46

GoogleCodeExporter commented 8 years ago

Original comment by jl1615@gmail.com on 10 Jul 2008 at 9:53

GoogleCodeExporter commented 8 years ago

Original comment by Brett.Mi...@gmail.com on 19 Aug 2008 at 6:48

GoogleCodeExporter commented 8 years ago 
Fixed in revision r927

This set of changes addresses Connector Manager Issue 81 -
Encrypt all properties with (case insensitive) 'password' in the key.

This makes no attempt to encrypt password properties in the spring XML files.
It also makes no attempt to make sense of the property key name, so 
  useTrespassWordList=false
will get encrypted simply because it contains the substring 'password'.

As a side effect, we now version the properties files with the version of 
the CM that wrote the file.  This makes it easier to determine which
properties to decrypt vs. not.

Change Log:
----------

M 
connector-manager/source/java/com/google/enterprise/connector/instantiator/Insta
nceInfo.java
   - Calls EncryptedPropertyPlaceholderConfigurer to encrypt and decrypt properties.   

M 
connector-manager/source/java/com/google/enterprise/connector/instantiator/Encry
ptedPropertyPlaceholderConfigurer.java
   - Moved the logic to encrypt and decrypt password properties here,
     rather than duplicate it here and in InstanceInfo.
   - Uses a version stamp added to the Propeties, that allows us to diffentiate
     older style password encryption and newer style password encryption.

Original comment by Brett.Mi...@gmail.com on 28 Aug 2008 at 7:36

GoogleCodeExporter commented 8 years ago

Original comment by jl1615@gmail.com on 12 Jan 2009 at 3:40

GoogleCodeExporter commented 8 years ago 
Google bug #891613 is a duplicate of this bug.

Original comment by jl1615@gmail.com on 2 Feb 2009 at 10:00