(cloudstack) branch 4.20 updated: fix HMAC Signatures and API Keys Logged in Plaintext (#12021)

[dahn]

This is an automated email from the ASF dual-hosted git repository.

dahn pushed a commit to branch 4.20
in repository https://gitbox.apache.org/repos/asf/cloudstack.git


The following commit(s) were added to refs/heads/4.20 by this push:
     new fca928d609b fix HMAC Signatures and API Keys Logged in Plaintext 
(#12021)
fca928d609b is described below

commit fca928d609baffa87750d9de8b3d48e8746d64ce
Author: YoulongChen <30854794+ylchen-...@users.noreply.github.com>
AuthorDate: Mon Jan 5 20:28:48 2026 +0800

    fix HMAC Signatures and API Keys Logged in Plaintext (#12021)
    
    Co-authored-by: chenyoulong...@ict.ac.cn <chenyoulong...@ict.ac.cn>
    Co-authored-by: dahn <daan.hoogl...@gmail.com>
---
 .../main/java/com/cloud/storage/template/HttpTemplateDownloader.java    | 2 +-
 engine/schema/src/main/java/com/cloud/upgrade/DatabaseCreator.java      | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git 
a/core/src/main/java/com/cloud/storage/template/HttpTemplateDownloader.java 
b/core/src/main/java/com/cloud/storage/template/HttpTemplateDownloader.java
index cf49217ef5b..6fe001de72c 100755
--- a/core/src/main/java/com/cloud/storage/template/HttpTemplateDownloader.java
+++ b/core/src/main/java/com/cloud/storage/template/HttpTemplateDownloader.java
@@ -151,7 +151,7 @@ public class HttpTemplateDownloader extends 
ManagedContextRunnable implements Te
                 client.getParams().setAuthenticationPreemptive(true);
                 Credentials defaultcreds = new 
UsernamePasswordCredentials(user, password);
                 client.getState().setCredentials(new 
AuthScope(hostAndPort.first(), hostAndPort.second(), AuthScope.ANY_REALM), 
defaultcreds);
-                logger.info("Added username=" + user + ", password=" + 
password + "for host " + hostAndPort.first() + ":" + hostAndPort.second());
+                logger.info("Added username={}, password=****** for host 
{}:{}", user, hostAndPort.first(), hostAndPort.second());
             } else {
                 logger.info("No credentials configured for host=" + 
hostAndPort.first() + ":" + hostAndPort.second());
             }
diff --git a/engine/schema/src/main/java/com/cloud/upgrade/DatabaseCreator.java 
b/engine/schema/src/main/java/com/cloud/upgrade/DatabaseCreator.java
index 384826227af..cccfbe8a006 100644
--- a/engine/schema/src/main/java/com/cloud/upgrade/DatabaseCreator.java
+++ b/engine/schema/src/main/java/com/cloud/upgrade/DatabaseCreator.java
@@ -99,7 +99,7 @@ public class DatabaseCreator {
             String username = 
dbProperties.getProperty(String.format("db.%s.username", database));
             String password = 
dbProperties.getProperty(String.format("db.%s.password", database));
             String dbName = 
dbProperties.getProperty(String.format("db.%s.name", database));
-            System.out.println(String.format("========> Initializing 
database=%s with host=%s port=%s username=%s password=%s", dbName, host, port, 
username, password));
+            System.out.println(String.format("========> Initializing 
database=%s with host=%s port=%s username=%s password=******", dbName, host, 
port, username));
 
             List<String> queries = new ArrayList<String>();
             queries.add(String.format("drop database if exists `%s`", dbName));