You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@zookeeper.apache.org by "Mate Szalay-Beko (Jira)" <ji...@apache.org> on 2022/01/28 08:29:00 UTC

[jira] [Resolved] (ZOOKEEPER-4396) Read Key/trust store password from file

     [ https://issues.apache.org/jira/browse/ZOOKEEPER-4396?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Mate Szalay-Beko resolved ZOOKEEPER-4396.
-----------------------------------------
    Resolution: Fixed

Issue resolved by pull request 1773
[https://github.com/apache/zookeeper/pull/1773]

> Read Key/trust store password from file
> ---------------------------------------
>
>                 Key: ZOOKEEPER-4396
>                 URL: https://issues.apache.org/jira/browse/ZOOKEEPER-4396
>             Project: ZooKeeper
>          Issue Type: Improvement
>          Components: security
>    Affects Versions: 3.8.0
>            Reporter: Li Wang
>            Priority: Major
>              Labels: pull-request-available
>             Fix For: 3.8.0
>
>          Time Spent: 2h 50m
>  Remaining Estimate: 0h
>
> Key/trust store password is currently specified as plain text via system property or config property. To avoid exposing passwords as plain text and reduce security vulnerability, it would be great if zookeeper can read the password from a file that is protected with restricted permissions.



--
This message was sent by Atlassian Jira
(v8.20.1#820001)