You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@activemq.apache.org by "Justin Bertram (JIRA)" <ji...@apache.org> on 2016/06/03 13:48:59 UTC

[jira] [Assigned] (ARTEMIS-551) ActiveMQ logs truststore password in plain text

     [ https://issues.apache.org/jira/browse/ARTEMIS-551?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Justin Bertram reassigned ARTEMIS-551:
--------------------------------------

    Assignee: Justin Bertram

> ActiveMQ logs truststore password in plain text
> -----------------------------------------------
>
>                 Key: ARTEMIS-551
>                 URL: https://issues.apache.org/jira/browse/ARTEMIS-551
>             Project: ActiveMQ Artemis
>          Issue Type: Bug
>          Components: AMQP
>    Affects Versions: 1.2.0
>            Reporter: Martin Smerek
>            Assignee: Justin Bertram
>
> ActiveMQ logs trust-store-password in plain text during bridge connection.
> 1. Configure two ActiveMQ servers for data replication over netty-ssl as collocated.
> 2. Start both servers and check logs for "221027: Bridge ClusterConnectionBridge... is connected" message and trust-store-password parameter.
> The problem is in org.apache.activemq.artemis.api.core.TransportConfiguration.toString(), particularly in condition
> if (key.equals(TransportConstants.KEYSTORE_PASSWORD_PROP_NAME) || key.equals(TransportConstants.DEFAULT_TRUSTSTORE_PASSWORD))



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)