spring-cloud / spring-cloud-consul

Spring Cloud Consul
http://cloud.spring.io/spring-cloud-consul/
Apache License 2.0
805 stars 543 forks source link

Spring Cloud Consul not decrypting the tls key-store-password & certificate-password #830

Open mahesh4mahi opened 9 months ago

mahesh4mahi commented 9 months ago

Describe the bug We are running consul with https and when spring boot service trying to connect to consul with SSL using tls encrypted key-store-password & certificate-password it is giving error, same is working when we give plain password

spring.cloud.consul.host=localhost spring.cloud.consul.port=8500 spring.cloud.consul.discovery.hostname=localhost spring.cloud.consul.scheme=https spring.cloud.consul.discovery.prefer-ip-address=false spring.cloud.consul.discovery.scheme=https spring.cloud.consul.tls.key-store-instance-type=PKCS12 spring.cloud.consul.tls.key-store-password=bdksjfsjfsksbfsabfksbb spring.cloud.consul.tls.key-store-path=keystore.p12 spring.cloud.consul.tls.certificate-path=truststore.p12 spring.cloud.consul.tls.certificate-password=bdksjfsjfsksbfsabfksbb spring.cloud.consul.discovery.heartbeat.reregister-service-on-failure=true

Same is working if we provide plain password like below

spring.cloud.consul.tls.key-store-password=Admin@123 spring.cloud.consul.tls.certificate-password=Admin@123

due to security reasons we are not suppose to add plain password in application.properties, kindly provide solution to how we can decrypt this password before Consul Client object is created, thanks in advance