[jira] Commented: (GERONIMO-3668) monitoring client should encrypt all passwords

["Erik B. Craig (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/GERONIMO-3668?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12548384 ] 

Erik B. Craig commented on GERONIMO-3668:
-----------------------------------------

Committed revision 601062.

Thanks Viet

> monitoring client should encrypt all passwords
> ----------------------------------------------
>
>                 Key: GERONIMO-3668
>                 URL: https://issues.apache.org/jira/browse/GERONIMO-3668
>             Project: Geronimo
>          Issue Type: Improvement
>      Security Level: public(Regular issues) 
>          Components: monitoring
>    Affects Versions: 2.1
>         Environment: ubuntu
>            Reporter: Viet Hung Nguyen
>            Assignee: Viet Hung Nguyen
>            Priority: Critical
>         Attachments: geronimo-3668.patch
>
>
> We need to encrypt all passwords that are stored in the DB. Right now, they are not encrypted in any way. I suggest we use the EncryptionManager to encrypt/decrypt these passwords.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.