Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > comp.lang.java.programmer > #39904
| Path | csiph.com!weretis.net!feeder8.news.weretis.net!eternal-september.org!reader01.eternal-september.org!.POSTED!not-for-mail |
|---|---|
| From | Andreas Leitgeb <avl@logic.at> |
| Newsgroups | comp.lang.java.programmer |
| Subject | Re: Alternative for properties like javax.net.ssl.trustStorePassword ... |
| Date | Tue, 31 Jan 2023 23:30:08 -0000 (UTC) |
| Organization | A noiseless patient Spider |
| Lines | 23 |
| Message-ID | <slrnttj940.pa7s.avl@logic.at> (permalink) |
| References | <slrntt5jd0.pa7s.avl@logic.at> <98e07321-e56e-4546-b62b-9d614deedf79n@googlegroups.com> |
| Reply-To | avl@logic.at |
| Injection-Date | Tue, 31 Jan 2023 23:30:08 -0000 (UTC) |
| Injection-Info | reader01.eternal-september.org; posting-host="ce841eb8ff8643107f1a0f63faeeb8de"; logging-data="34098"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX18HN86yKKC7exQQiZcgk54V" |
| User-Agent | slrn/1.0.3 (Linux) |
| Cancel-Lock | sha1:oGWyF6LG6E3WpayeeXE0CvQdJgY= |
| Xref | csiph.com comp.lang.java.programmer:39904 |
Show key headers only | View raw
e.d.pro...@gmail.com <e.d.programmer@gmail.com> wrote: >> Any ideas? Is passing a password as argument to a process nothing to worry >> about? > first result https://docs.oracle.com/javadb/10.8.3.0/adminguide/cadminsslclient.html > shows setting the password as system property right before making > your first database connection. How and when are you making your > database connection? It is a web-application running in tomcat, and tomcat itself is currently configured in "bin/setenv.sh" to start with those "-D..." options, setting key- & truststore file and their password. > I normally make database connections using datasource in the tomcat > config files with the password in the config as an encrypted string > and reference a decryption jar. That sounds like a promising solution... Could I set them e.g. in the server.xml ? The tomcat-config is already readable only by the user running it, which would be a huge advantage to current state where the password shows up in process list visible even for other users.
Back to comp.lang.java.programmer | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Alternative for properties like javax.net.ssl.trustStorePassword ... Andreas Leitgeb <avl@logic.at> - 2023-01-26 18:59 +0000
Re: Alternative for properties like javax.net.ssl.trustStorePassword ... "e.d.pro...@gmail.com" <e.d.programmer@gmail.com> - 2023-01-26 12:50 -0800
Re: Alternative for properties like javax.net.ssl.trustStorePassword ... Andreas Leitgeb <avl@logic.at> - 2023-01-31 23:30 +0000
Re: Alternative for properties like javax.net.ssl.trustStorePassword ... "e.d.pro...@gmail.com" <e.d.programmer@gmail.com> - 2023-02-01 04:25 -0800
Re: Alternative for properties like javax.net.ssl.trustStorePassword ... Arne Vajhøj <arne@vajhoej.dk> - 2023-01-26 16:50 -0500
Re: Alternative for properties like javax.net.ssl.trustStorePassword ... Andreas Leitgeb <avl@logic.at> - 2023-01-31 23:51 +0000
Re: Alternative for properties like javax.net.ssl.trustStorePassword ... Daniele Futtorovic <da.futt.news@laposte-dot-net.invalid> - 2023-02-08 15:37 +0100
csiph-web