You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@activemq.apache.org by "Jean-Baptiste Onofré (Jira)" <ji...@apache.org> on 2025/08/21 15:55:00 UTC
[jira] [Updated] (AMQ-9752) Be able to read SSL keystore password from a file or env variable or use encrypted password in the conf
[ https://issues.apache.org/jira/browse/AMQ-9752?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Jean-Baptiste Onofré updated AMQ-9752:
--------------------------------------
Summary: Be able to read SSL keystore password from a file or env variable or use encrypted password in the conf (was: Be able to read SSL keystore password from a file or env variable)
> Be able to read SSL keystore password from a file or env variable or use encrypted password in the conf
> -------------------------------------------------------------------------------------------------------
>
> Key: AMQ-9752
> URL: https://issues.apache.org/jira/browse/AMQ-9752
> Project: ActiveMQ Classic
> Issue Type: Improvement
> Components: Security/JAAS
> Reporter: Jean-Baptiste Onofré
> Assignee: Jean-Baptiste Onofré
> Priority: Major
> Fix For: 6.2.0, 6.1.8
>
>
> Today, a classic way to setup SSL is to add the SSL context in the activemq.xml like this:
> {code:java}
> <sslContext>
> <sslContext keyStore="org/apache/activemq/security/broker1.ks"
> keyStorePassword="password"
> trustStore="org/apache/activemq/security/activemq-revoke.jks"
> trustStorePassword="password"
> crlPath="org/apache/activemq/security/activemq-revoke.crl"/>
> </sslContext> {code}
> The keyStorePassword and trustStorePassword have to be in clear (or we have to use Jasypt encryption).
> Jasypt encryption needs extra setup in the activemq.xml.
> I'm proposing to simplify to deal with password in activemq.xml by having "external" password placeholder, like keyStorePassword="file://foo" or keyStorePassword="env:bar".
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@activemq.apache.org
For additional commands, e-mail: issues-help@activemq.apache.org
For further information, visit: https://activemq.apache.org/contact