You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@ofbiz.apache.org by "Jacopo Cappellato (JIRA)" <ji...@apache.org> on 2015/06/10 14:24:00 UTC

[jira] [Created] (OFBIZ-6494) New implementation of the two-way cryptographic services of OFBiz based on Apache Shiro

Jacopo Cappellato created OFBIZ-6494:
----------------------------------------

             Summary: New implementation of the two-way cryptographic services of OFBiz based on Apache Shiro
                 Key: OFBIZ-6494
                 URL: https://issues.apache.org/jira/browse/OFBIZ-6494
             Project: OFBiz
          Issue Type: New Feature
          Components: framework
            Reporter: Jacopo Cappellato
            Assignee: Jacopo Cappellato
             Fix For: Upcoming Branch


New implementation of the two-way cryptographic services of OFBiz based on Apache Shiro:
* two-way encryption is now delegated to Apache Shiro, with stronger initialization vectors
* the mechanism is backward compatible
* new tools to update the encryption of private keys, useful to upgrade older versions of OFBiz and most of all to replace old keys with new ones (this is critical to implement stronger security practices as requested by PCI) 
* unit tests



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)