[jira] [Updated] (LOG4J2-1896) Update classes in org.apache.logging.log4j.core.net.ssl from String to char[] to represent passwords

["Gary Gregory (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/LOG4J2-1896?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Gary Gregory updated LOG4J2-1896:
---------------------------------
    Summary: Update classes in org.apache.logging.log4j.core.net.ssl from String to char[] to represent passwords  (was: Update org.apache.logging.log4j.core.net.ssl.StoreConfiguration and Co. from a String to char[] to represent its password)

> Update classes in org.apache.logging.log4j.core.net.ssl from String to char[] to represent passwords
> ----------------------------------------------------------------------------------------------------
>
>                 Key: LOG4J2-1896
>                 URL: https://issues.apache.org/jira/browse/LOG4J2-1896
>             Project: Log4j 2
>          Issue Type: Improvement
>          Components: Configurators
>            Reporter: Gary Gregory
>            Assignee: Gary Gregory
>             Fix For: 2.9
>
>
> Update {{org.apache.logging.log4j.core.net.ssl.StoreConfiguration}} from a {{String}} to {{char[]}} to represent its password.
> The goal is to reduce the security risk of using a String for a password. See https://stackoverflow.com/questions/8881291/why-is-char-preferred-over-string-for-passwords



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)