Re: AW: AW: Use Apache Derby Network Server with encrypted database

2016-08-25 Thread John English
On 25/08/2016 15:58, Hohl, Gerrit wrote: Yes, but an attacker can't access the database if that person is not on the machine itself. Exactly. And in this case I also don't have to encrypt it, right? ;-) As long as you don't allow remote shells or anything stupid like that. And if an

Re: AW: Use Apache Derby Network Server with encrypted database

2016-08-25 Thread John English
On 25/08/2016 10:58, Hohl, Gerrit wrote: But if that person sniffs the IP traffic on 127.0.0.1, he/she may be able to read the boot password as well as user and password. And of course IP traffic to 127.0.0.1 should *never* go outside the local machine, according to the spec. So any sniffer

AW: Use Apache Derby Network Server with encrypted database

2016-08-25 Thread Hohl, Gerrit
Betreff: Re: Use Apache Derby Network Server with encrypted database Just a note on "If a person is already on the machine and would be able to sniff the local IP traffic, that person may also have access on the files of Derby.". To prevent this you encrypt the database and carefu

Re: Use Apache Derby Network Server with encrypted database

2016-08-25 Thread Peter Ondruška
ely would > recommend using SSL, of course. > > > > Thanks for your mails again. :-) > > > > Gruß > > Gerrit > > > > *Von:* toma.georg...@yahoo.com [mailto:toma.georg...@yahoo.com] > *Gesendet:* Mittwoch, 24. August 2016 22:13 > *An:* derby-user@db.apac

AW: Use Apache Derby Network Server with encrypted database

2016-08-25 Thread Hohl, Gerrit
] Gesendet: Mittwoch, 24. August 2016 22:13 An: derby-user@db.apache.org Betreff: Re: Use Apache Derby Network Server with encrypted database Hi Gerrit, Based on Apache Derby page, between the embedded mode and network mode there is no difference, https://db.apache.org/derby/docs/10.0

Re: Use Apache Derby Network Server with encrypted database

2016-08-24 Thread toma.george89
Hi Gerrit, Based on Apache Derby page, between the embedded mode and network mode there is no difference, https://db.apache.org/derby/docs/10.0/manuals/admin/hubprnt19.html#Differences+between+running+Derby+in+embedded+mode+and+using+the+Network+Server Have you tried to create an

Re: Use Apache Derby Network Server with encrypted database

2016-08-24 Thread Peter Ondruška
Dear Gerrit, from my understanding the only difference with Derby network server and embedded is relevant part of connection string. The rest where you put parameters after semicolon and where you would specify encryption properties is the same. Just start network server and then connect using

Use Apache Derby Network Server with encrypted database

2016-08-24 Thread Hohl, Gerrit
Hello everyone, I've used Apache Derby for years now as an embedded RDBMS. BTW: Thanks to all developer doing a great job developing this database system. :-D But now I want to use it as a separate service running on Ubuntu Linux. This is no problem. But I haven't found any