[jira] [Created] (CLOUDSTACK-4151) 4.5.5. About Password and Key Encryption unclear

["Ron Wheeler (JIRA)" <ji...@apache.org>]

Ron Wheeler created CLOUDSTACK-4151:
---------------------------------------

             Summary: 4.5.5. About Password and Key Encryption unclear
                 Key: CLOUDSTACK-4151
                 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-4151
             Project: CloudStack
          Issue Type: Improvement
      Security Level: Public (Anyone can view this level - this is the default.)
          Components: Doc
    Affects Versions: 4.1.1
         Environment: all
            Reporter: Ron Wheeler


4.5.5. About Password and Key Encryption

The purpose of this section is a bit obcure. What is the reader supposed to do with this information?
There seems to be a lot of magical activities here wherein keys and secrets get stored in databases without any mention of how they get there.
There seems to be a list of items that are incrypted but no explaination about what is the reader\'s role in this or who creates them or why you are telling the reader this at this point in the process.


It might be clearer if " The data values are encrypted and decrypted using a database secret key, which is stored in one of CloudStack’s internal properties files along with the database password. The other encrypted values listed above, such as SSH keys, are in the CloudStack internal database."  included some mention about how this happens and when and whether the reader has to do something to make any of this happen correctly.

If it is really only informational and has nothing to do with the installation process, it could be moved out of the flow and referenced as something that terminally curious might wish to know.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira