You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@tomee.apache.org by "Jean-Louis MONTEIRO (JIRA)" <ji...@apache.org> on 2009/09/25 10:54:15 UTC

[jira] Created: (OPENEJB-1076) Allow datasource passwords to be ciphered

Allow datasource passwords to be ciphered
-----------------------------------------

                 Key: OPENEJB-1076
                 URL: https://issues.apache.org/jira/browse/OPENEJB-1076
             Project: OpenEJB
          Issue Type: New Feature
         Environment: All
            Reporter: Jean-Louis MONTEIRO
            Assignee: Jean-Louis MONTEIRO
             Fix For: 3.1.2


OpenEJB supports plain text passwords in datasource definition (openejb.xml).

Nowadays, security is more and more important that's why it would be nice to enhance datasources configuration to support ciphered passwords. 
By the way, this feature must be extensible to allow end users to define their own algorithm if needed.



-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Commented: (OPENEJB-1076) Allow datasource passwords to be ciphered

Posted by "David Blevins (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/OPENEJB-1076?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12763715#action_12763715 ] 

David Blevins commented on OPENEJB-1076:
----------------------------------------

I think this will be a popular new feature.  A minimal explantation of how someone would encypt their password would be great.

> Allow datasource passwords to be ciphered
> -----------------------------------------
>
>                 Key: OPENEJB-1076
>                 URL: https://issues.apache.org/jira/browse/OPENEJB-1076
>             Project: OpenEJB
>          Issue Type: New Feature
>         Environment: All
>            Reporter: Jean-Louis MONTEIRO
>            Assignee: Jean-Louis MONTEIRO
>             Fix For: 3.1.2
>
>
> OpenEJB supports plain text passwords in datasource definition (openejb.xml).
> Nowadays, security is more and more important that's why it would be nice to enhance datasources configuration to support ciphered passwords. 
> By the way, this feature must be extensible to allow end users to define their own algorithm if needed.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Commented: (OPENEJB-1076) Allow datasource passwords to be ciphered

Posted by "Jean-Louis MONTEIRO (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/OPENEJB-1076?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12764192#action_12764192 ] 

Jean-Louis MONTEIRO commented on OPENEJB-1076:
----------------------------------------------

commit -m "OPENEJB-1076 Allow end users to use ciphered passwords in datasource configuration (openejb.xml).
--> Avoid code duplication --> refactoring
--> Add a command line tool to use a PasswordCodec" 
    Adding         /org.apache.openejb.openejb/container/openejb-core/src/main/java/org/apache/openejb/config/Codec.java
    Sending        /org.apache.openejb.openejb/container/openejb-core/src/main/java/org/apache/openejb/resource/jdbc/BasicDataSource.java
    Sending        /org.apache.openejb.openejb/container/openejb-core/src/main/java/org/apache/openejb/resource/jdbc/BasicDataSourceUtil.java
    Sending        /org.apache.openejb.openejb/container/openejb-core/src/main/java/org/apache/openejb/resource/jdbc/BasicManagedDataSource.java
    Adding         /org.apache.openejb.openejb/container/openejb-core/src/main/resources/META-INF/org.apache.openejb.cli/codec
    Sending        /org.apache.openejb.openejb/container/openejb-core/src/main/resources/org/apache/openejb/config/Messages.properties
    Adding         /org.apache.openejb.openejb/container/openejb-core/src/test/java/org/apache/openejb/resource/jdbc/PasswordCodecTest.java
    Transmitting file data ...
    Committed revision 823678.

> Allow datasource passwords to be ciphered
> -----------------------------------------
>
>                 Key: OPENEJB-1076
>                 URL: https://issues.apache.org/jira/browse/OPENEJB-1076
>             Project: OpenEJB
>          Issue Type: New Feature
>         Environment: All
>            Reporter: Jean-Louis MONTEIRO
>            Assignee: Jean-Louis MONTEIRO
>             Fix For: 3.1.2
>
>
> OpenEJB supports plain text passwords in datasource definition (openejb.xml).
> Nowadays, security is more and more important that's why it would be nice to enhance datasources configuration to support ciphered passwords. 
> By the way, this feature must be extensible to allow end users to define their own algorithm if needed.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Commented: (OPENEJB-1076) Allow datasource passwords to be ciphered

Posted by "Jean-Louis MONTEIRO (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/OPENEJB-1076?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12764220#action_12764220 ] 

Jean-Louis MONTEIRO commented on OPENEJB-1076:
----------------------------------------------

Thanks David for the hint.
I finally got a shoot to that and use a file under META-INF/org.apache.openejb.resource.jdbc.PasswordCodec to specify the codec implementation.

    Transmitting file data ...
    Committed revision 823709.

> Allow datasource passwords to be ciphered
> -----------------------------------------
>
>                 Key: OPENEJB-1076
>                 URL: https://issues.apache.org/jira/browse/OPENEJB-1076
>             Project: OpenEJB
>          Issue Type: New Feature
>         Environment: All
>            Reporter: Jean-Louis MONTEIRO
>            Assignee: Jean-Louis MONTEIRO
>             Fix For: 3.1.2
>
>
> OpenEJB supports plain text passwords in datasource definition (openejb.xml).
> Nowadays, security is more and more important that's why it would be nice to enhance datasources configuration to support ciphered passwords. 
> By the way, this feature must be extensible to allow end users to define their own algorithm if needed.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Closed: (OPENEJB-1076) Allow datasource passwords to be ciphered

Posted by "David Blevins (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/OPENEJB-1076?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

David Blevins closed OPENEJB-1076.
----------------------------------

    Resolution: Fixed

http://svn.apache.org/viewvc?rev=818889&view=rev

> Allow datasource passwords to be ciphered
> -----------------------------------------
>
>                 Key: OPENEJB-1076
>                 URL: https://issues.apache.org/jira/browse/OPENEJB-1076
>             Project: OpenEJB
>          Issue Type: New Feature
>         Environment: All
>            Reporter: Jean-Louis MONTEIRO
>            Assignee: Jean-Louis MONTEIRO
>             Fix For: 3.1.2
>
>
> OpenEJB supports plain text passwords in datasource definition (openejb.xml).
> Nowadays, security is more and more important that's why it would be nice to enhance datasources configuration to support ciphered passwords. 
> By the way, this feature must be extensible to allow end users to define their own algorithm if needed.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.