You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@activemq.apache.org by "Martin Smerek (JIRA)" <ji...@apache.org> on 2016/06/03 13:37:59 UTC

[jira] [Created] (ARTEMIS-551) ActiveMQ logs truststore password in plain text

Martin Smerek created ARTEMIS-551:
-------------------------------------

             Summary: ActiveMQ logs truststore password in plain text
                 Key: ARTEMIS-551
                 URL: https://issues.apache.org/jira/browse/ARTEMIS-551
             Project: ActiveMQ Artemis
          Issue Type: Bug
          Components: AMQP
    Affects Versions: 1.2.0
            Reporter: Martin Smerek


ActiveMQ logs trust-store-password in plain text during bridge connection.

1. Configure two ActiveMQ servers for data replication over netty-ssl as collocated.
2. Start both servers and check logs for "221027: Bridge ClusterConnectionBridge... is connected" message and trust-store-password parameter.

The problem is in org.apache.activemq.artemis.api.core.TransportConfiguration.toString(), particularly in condition

if (key.equals(TransportConstants.KEYSTORE_PASSWORD_PROP_NAME) || key.equals(TransportConstants.DEFAULT_TRUSTSTORE_PASSWORD))



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)