I'm trying to secure an installation of Glassfish 3.12 and I noticed that when I change the Glassfish master keystore password the first time, the utility prompts me for the current password (default password changeit). But if I try to change the password after that first time the utility no longer prompts me for the current password. After the keystore password has been changed once anyone with access to the server can change the password since they don't have to know the current password. Has anyone else run into this problem? Does anyone know it this issue has been fixed in later versions?
↧