Groups > comp.lang.java.programmer > #39897

Alternative for properties like javax.net.ssl.trustStorePassword ...

Path	csiph.com!news.swapon.de!eternal-september.org!reader01.eternal-september.org!.POSTED!not-for-mail
From	Andreas Leitgeb <avl@logic.at>
Newsgroups	comp.lang.java.programmer
Subject	Alternative for properties like javax.net.ssl.trustStorePassword ...
Date	Thu, 26 Jan 2023 18:59:44 -0000 (UTC)
Organization	A noiseless patient Spider
Lines	23
Message-ID	<slrntt5jd0.pa7s.avl@logic.at> (permalink)
Reply-To	avl@logic.at
Injection-Date	Thu, 26 Jan 2023 18:59:44 -0000 (UTC)
Injection-Info	reader01.eternal-september.org; posting-host="9481629feea367234aa831c80c06dfc8"; logging-data="1386676"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1+v1qa9bFvbU+hxMCDi+DIu"
User-Agent	slrn/1.0.3 (Linux)
Cancel-Lock	sha1:C58U/EvuiBYJ/pcXrDs8g+e/JpE=
Xref	csiph.com comp.lang.java.programmer:39897

Show key headers only | View raw

If some java appliation is supposed to use a trustStore, then apparently
all hits on google for the obvious words will suggest to start the application
with an option "-Djavax.net.ssl.trustStorePassword=..." passed to the java
executable... 

Assuming I do not want everyone on the machine to see the password in clear
text in the "ps -ef" output, what would be "safer" alternatives?

The most obvious one might be to set the property from my own code, (after
reading the pw from a file that not everyone on the machine has access to)
but my code comes too late: some beans already got initialized and didn't
see the property, before the program gets to set the properties. --
I'm not a master of beans... maybe I could just add another bean that
would do the "setProperty" as a sideeffect just in time before the other
bean needs the property...  haven't thought this through, yet.

Maybe I'm still in the stone-age, and there is already some new property that
would allow me to just specify another file holding the relevant passwords,
or something else?

Any ideas?  Is passing a password as argument to a process nothing to worry
about?

Back to comp.lang.java.programmer | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

Alternative for properties like javax.net.ssl.trustStorePassword ... Andreas Leitgeb <avl@logic.at> - 2023-01-26 18:59 +0000
  Re: Alternative for properties like javax.net.ssl.trustStorePassword ... "e.d.pro...@gmail.com" <e.d.programmer@gmail.com> - 2023-01-26 12:50 -0800
    Re: Alternative for properties like javax.net.ssl.trustStorePassword ... Andreas Leitgeb <avl@logic.at> - 2023-01-31 23:30 +0000
      Re: Alternative for properties like javax.net.ssl.trustStorePassword ... "e.d.pro...@gmail.com" <e.d.programmer@gmail.com> - 2023-02-01 04:25 -0800
  Re: Alternative for properties like javax.net.ssl.trustStorePassword ... Arne Vajhøj <arne@vajhoej.dk> - 2023-01-26 16:50 -0500
    Re: Alternative for properties like javax.net.ssl.trustStorePassword ... Andreas Leitgeb <avl@logic.at> - 2023-01-31 23:51 +0000
  Re: Alternative for properties like javax.net.ssl.trustStorePassword ... Daniele Futtorovic <da.futt.news@laposte-dot-net.invalid> - 2023-02-08 15:37 +0100

csiph-web