Uploaded image for project: 'EJBCA'
  1. EJBCA
  2. ECA-2899

Do not display passwords in stdout during build

    Details

    • Type: Improvement
    • Status: Closed
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: EJBCA 4.0.13
    • Fix Version/s: EJBCA 4.0.14
    • Component/s: Install-script
    • Labels:
      None
    • Issue discovered during:
      Community

      Description

      Description:
      During installation of EJBCA (with Ant), some passwords are displayed (database.password, mail.password, httpsserver.password).
      It is not very good for a security application as EJBCA.

      It's better to display « *** » instead of the password values.

      Example:
      ----------------
      database.username = ejbca
      database.password = ***
      [...]
      mail.user = pki
      mail.password = ***
      [...]
      httpsserver.hostname = pki.domain.org
      httpsserver.password = ***
      ----------------

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              dcarella David Carella
              Reporter:
              dcarella David Carella
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: