Gary Gregory created LOG4J2-1896:
------------------------------------
Summary: Update
org.apache.logging.log4j.core.net.ssl.StoreConfiguration<T> from a String to
char[] to represent its password
Key: LOG4J2-1896
URL: https://issues.apache.org/jira/browse/LOG4J2-1896
Project: Log4j 2
Issue Type: Improvement
Components: Configurators
Reporter: Gary Gregory
Assignee: Gary Gregory
Update {{org.apache.logging.log4j.core.net.ssl.StoreConfiguration}} from a
{{String}} to {{char[]}} to represent its password.
The goal is to reduce the security risk of using a String for a password. See
https://stackoverflow.com/questions/8881291/why-is-char-preferred-over-string-for-passwords
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
