[MJARSIGNER] verbose mode shows keystore password in clear text

2014-02-05 Thread Marco Speranza
Hi all guys,

I'm using Maven Jar signer ver. 1.3.1 plugin and for security reasons I've
encrypted the key store password with Maven encryption mechanism. All works
fine, but if I enable verbose output, it print out the command line with
the keystore password in clear text.

here is an example:

[INFO] cmd.exe /X /C C:\Program
Files\Java\jdk1.7.0_51\jre\..\bin\jarsigner.exe -verbose -keystore
mc-keystore -storepass mypassword


is it possible to obfuscate the password?

thanks a lot

--
Marco Speranza marcospera...@apache.org

http://code.google.com/u/marco.speranza79/


Re: [MJARSIGNER] verbose mode shows keystore password in clear text

2014-02-05 Thread Tony Chemit
On Wed, 5 Feb 2014 12:38:04 +
Marco Speranza marcospera...@apache.org wrote:

 Hi all guys,

hi Marco,

 
 I'm using Maven Jar signer ver. 1.3.1 plugin and for security reasons I've
 encrypted the key store password with Maven encryption mechanism. All works
 fine, but if I enable verbose output, it print out the command line with
 the keystore password in clear text.
 
 here is an example:
 
 [INFO] cmd.exe /X /C C:\Program
 Files\Java\jdk1.7.0_51\jre\..\bin\jarsigner.exe -verbose -keystore
 mc-keystore -storepass mypassword
 
 
 is it possible to obfuscate the password?


Can you create the issue for this; I will have a look at it.

thanks,

tony.
 
 thanks a lot
 
 --
 Marco Speranza marcospera...@apache.org
 
 http://code.google.com/u/marco.speranza79/



-- 
Tony Chemit

tél: +33 (0) 2 40 50 29 28
http://www.codelutin.com
email: che...@codelutin.com
twitter: https://twitter.com/tchemit

-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org



Re: [MJARSIGNER] verbose mode shows keystore password in clear text

2014-02-05 Thread Marco Speranza
2014-02-05 Tony Chemit che...@codelutin.com:

 Can you create the issue for this; I will have a look at it.



done: http://jira.codehaus.org/browse/MJARSIGNER-35

thanks a lot


--
Marco Speranza marcospera...@apache.org
Google Code: http://code.google.com/u/marco.speranza79/