Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > comp.lang.java.programmer > #39904
| From | Andreas Leitgeb <avl@logic.at> |
|---|---|
| Newsgroups | comp.lang.java.programmer |
| Subject | Re: Alternative for properties like javax.net.ssl.trustStorePassword ... |
| Date | 2023-01-31 23:30 +0000 |
| Organization | A noiseless patient Spider |
| Message-ID | <slrnttj940.pa7s.avl@logic.at> (permalink) |
| References | <slrntt5jd0.pa7s.avl@logic.at> <98e07321-e56e-4546-b62b-9d614deedf79n@googlegroups.com> |
e.d.pro...@gmail.com <e.d.programmer@gmail.com> wrote: >> Any ideas? Is passing a password as argument to a process nothing to worry >> about? > first result https://docs.oracle.com/javadb/10.8.3.0/adminguide/cadminsslclient.html > shows setting the password as system property right before making > your first database connection. How and when are you making your > database connection? It is a web-application running in tomcat, and tomcat itself is currently configured in "bin/setenv.sh" to start with those "-D..." options, setting key- & truststore file and their password. > I normally make database connections using datasource in the tomcat > config files with the password in the config as an encrypted string > and reference a decryption jar. That sounds like a promising solution... Could I set them e.g. in the server.xml ? The tomcat-config is already readable only by the user running it, which would be a huge advantage to current state where the password shows up in process list visible even for other users.
Back to comp.lang.java.programmer | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Alternative for properties like javax.net.ssl.trustStorePassword ... Andreas Leitgeb <avl@logic.at> - 2023-01-26 18:59 +0000
Re: Alternative for properties like javax.net.ssl.trustStorePassword ... "e.d.pro...@gmail.com" <e.d.programmer@gmail.com> - 2023-01-26 12:50 -0800
Re: Alternative for properties like javax.net.ssl.trustStorePassword ... Andreas Leitgeb <avl@logic.at> - 2023-01-31 23:30 +0000
Re: Alternative for properties like javax.net.ssl.trustStorePassword ... "e.d.pro...@gmail.com" <e.d.programmer@gmail.com> - 2023-02-01 04:25 -0800
Re: Alternative for properties like javax.net.ssl.trustStorePassword ... Arne Vajhøj <arne@vajhoej.dk> - 2023-01-26 16:50 -0500
Re: Alternative for properties like javax.net.ssl.trustStorePassword ... Andreas Leitgeb <avl@logic.at> - 2023-01-31 23:51 +0000
Re: Alternative for properties like javax.net.ssl.trustStorePassword ... Daniele Futtorovic <da.futt.news@laposte-dot-net.invalid> - 2023-02-08 15:37 +0100
csiph-web