Quantcast
Channel: GlassFish Related Items on Java.net
Viewing all articles
Browse latest Browse all 1091

how to securely provide an aliased password to my application?

$
0
0

I would like to securely pass an aliased password to my application.

1) I have setup a password alias:

asadmin> create-password-alias
Enter the value for the aliasname operand> my_password_alias
Enter the alias password> *******
Enter the alias password again> ******

2) I have configured the password in domain.xml for a jvm option

-Dmy_password=${ALIAS=my_password_alias}

3) My application accesses the decrypted password through the jvm arg:

String password = System.getEnv("my_password")
...
// use password to access resource, for example a password protected keystore

4) However, password returned from the getEnv call was `null`

Question:

Will glassfish allow me to provide the password through the JVM arg? If not, do I have another option for securely passing the aliased password?


Viewing all articles
Browse latest Browse all 1091

Trending Articles