[jira] [Created] (LOG4J2-1896) Update org.apache.logging.log4j.core.net.ssl.StoreConfiguration from a String to char[] to represent its password

["Gary Gregory (JIRA)" <ji...@apache.org>]

Gary Gregory created LOG4J2-1896:
------------------------------------

             Summary: Update org.apache.logging.log4j.core.net.ssl.StoreConfiguration<T> from a String to char[] to represent its password
                 Key: LOG4J2-1896
                 URL: https://issues.apache.org/jira/browse/LOG4J2-1896
             Project: Log4j 2
          Issue Type: Improvement
          Components: Configurators
            Reporter: Gary Gregory
            Assignee: Gary Gregory


Update {{org.apache.logging.log4j.core.net.ssl.StoreConfiguration}} from a {{String}} to {{char[]}} to represent its password.

The goal is to reduce the security risk of using a String for a password. See https://stackoverflow.com/questions/8881291/why-is-char-preferred-over-string-for-passwords



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)