[jira] (SOLR-10076) Hiding keystore and truststore passwords from /admin/info/* outputs

[Mano Kovacs (JIRA)]

Title: Message Title

Mano Kovacs created an issue   Solr / SOLR-10076 Hiding keystore and truststore passwords from /admin/info/* outputs Issue Type: Improvement Assignee: Unassigned Created: 31/Jan/17 14:38 Priority: Major Reporter: Mano Kovacs Security Level: Public (Default Security Level. Issues are Public) Passing keystore and truststore password is done by system properties, via cmd line parameter. As result, /admin/info/properties and /admin/info/system will print out the received password. Proposing solution to automatically redact value of any system property before output, containing the word password, and replacing its value with ******. Add Comment   This message was sent by Atlassian JIRA (v6.3.15#6346-sha1:dbc023d)