You are viewing a plain text version of this content. The canonical link for it is here.
Posted to derby-dev@db.apache.org by "Sunitha Kambhampati (JIRA)" <de...@db.apache.org> on 2005/04/26 19:00:29 UTC

[jira] Updated: (DERBY-236) Sane Mode and in our test environment, bootPassword gets written out in plain text to service.properties

     [ http://issues.apache.org/jira/browse/DERBY-236?page=all ]

Sunitha Kambhampati updated DERBY-236:
--------------------------------------

    Priority: Minor  (was: Major)

> Sane Mode and in our test environment, bootPassword gets written out in plain text to service.properties
> --------------------------------------------------------------------------------------------------------
>
>          Key: DERBY-236
>          URL: http://issues.apache.org/jira/browse/DERBY-236
>      Project: Derby
>         Type: Bug
>   Components: Store
>     Versions: 10.1.0.0
>  Environment: All
>     Reporter: Sunitha Kambhampati
>     Priority: Minor
>      Fix For: 10.1.0.0

>
> In org.apache.derby.impl.store.RawStore
> in boot(), if we run a test using our testharness and with sane jars, the boot password gets written out to service.properties in plain text. This is incorrect, should not happen even for a sane and test harness combination.. 
> Code :-
> 			if (SanityManager.DEBUG)
> 			{
> 				if (!databaseEncrypted)
> 				{
> 					// check for system property if running under sanity - this
> 					// gives more test coverage for those that that hard code
> 					// connection URL in the test or somehow go thru the test
> 					// harness in a strange way.
> 					String testEncryption =
> 						PropertyUtil.getSystemProperty("testDataEncryption");
> 					if (testEncryption != null)
> 					{
> 						properties.put(Attribute.DATA_ENCRYPTION, "true");
> 						properties.put(Attribute.BOOT_PASSWORD, testEncryption);
> 						databaseEncrypted = true;
>                     }
> 				}
> 			}

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira