[activemq-website] branch main updated: Add section on being able to configure the algorithm for encrypted passwords

[ma...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

mattrpav pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/activemq-website.git


The following commit(s) were added to refs/heads/main by this push:
     new 23c3b7a  Add section on being able to configure the algorithm for encrypted passwords
     new c61ae6e  Merge pull request #49 from coheigea/encrypted_passwords
23c3b7a is described below

commit 23c3b7a4f8e5a17db1561b0359bb6129049d0b32
Author: Colm O hEigeartaigh <co...@apache.org>
AuthorDate: Thu May 6 16:48:22 2021 +0100

    Add section on being able to configure the algorithm for encrypted passwords
---
 src/encrypted-passwords.md | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/src/encrypted-passwords.md b/src/encrypted-passwords.md
index f2cb78e..fd197a6 100644
--- a/src/encrypted-passwords.md
+++ b/src/encrypted-passwords.md
@@ -22,6 +22,16 @@ Decrypted text: mypassword
 ```
 **Note:** It is recommended that you use only alphanumeric characters for the password. Special characters, such as `$/^&`, are not supported.
 
+As of the 5.16.0 release, support has been added to specify an algorithm
+parameter to the "encrypt" and "decrypt" commands. By default, the algorithm
+that is used is "PBEWithMD5AndDES". To use a more modern encryption algorithm
+you can specify:
+```
+$ bin/activemq encrypt --password activemq --input mypassword --algorithm PBEWITHHMACSHA256ANDAES_256
+...
+Encrypted text: h/cWj/ZZelMt3Y7NSzUG2vHYSnfWK561qjNg9Ywyr9yT72ru7pR4IEUnHLIdLSOb
+```
+
 The next step is to add the password to the appropriate configuration file, `$ACTIVEMQ_HOME/conf/credentials-enc.properties` by default.
 ```
 activemq.username=system
@@ -97,4 +107,4 @@ If you want to run the broker with this configuration, you need to do the follow
     $ unset ACTIVEMQ\_ENCRYPTION\_PASSWORD
     ```
 
-In this way your encryptor secret is never saved on your system and your encrypted passwords are safely stored in the configuration files.
\ No newline at end of file
+In this way your encryptor secret is never saved on your system and your encrypted passwords are safely stored in the configuration files.