Hi Andrea, On Fri, Aug 19, 2011 at 7:57 AM, Andrea Aime <andrea.a...@geo-solutions.it> wrote: > Hi Ian, > just added my plus one on the wiki page. Btw, the list of PSC members > is rather old, use a recent GSIP to get an up to date one.
Thanks, will do. >> Your question was thought provoking and helped me prevent a bug. A >> client that PUTs the encrypted password back will corrupt the password >> since it will be re-encrypted. > > So rest clients will see the pwd as encrypted when doing get operations? At the moment, that is the behavior. >> This is fixed in my local code now, but >> with one little oddity - the persister will write out the encrypted >> password but decrypt it for the StoreInfo. This doesn't seem like >> appropriate persister behavior and it probably belongs in the catalog. >> Thoughts? > > Don't have a good idea here. If we keep the pwd encrypted in the catalog, > and decrypt them only when connecting to the store, we are going to have > troubles with the GUI, that needs the unencrypted as well I thought about this idea early on, but it seemed to spread the responsibility of knowing about passwords' encryption state all around the code. The way it is now is transparent to other parts of the code (except tests). Thanks, -Ian > > Cheers > Andrea > > > -- > ------------------------------------------------------- > Ing. Andrea Aime > GeoSolutions S.A.S. > Tech lead > > Via Poggio alle Viti 1187 > 55054 Massarosa (LU) > Italy > > phone: +39 0584 962313 > fax: +39 0584 962313 > > http://www.geo-solutions.it > http://geo-solutions.blogspot.com/ > http://www.youtube.com/user/GeoSolutionsIT > http://www.linkedin.com/in/andreaaime > http://twitter.com/geowolf > > ------------------------------------------------------- > -- Ian Schneider OpenGeo - http://opengeo.org Enterprise support for open source geospatial. ------------------------------------------------------------------------------ Get a FREE DOWNLOAD! and learn more about uberSVN rich system, user administration capabilities and model configuration. Take the hassle out of deploying and managing Subversion and the tools developers use with it. http://p.sf.net/sfu/wandisco-d2d-2 _______________________________________________ Geoserver-devel mailing list Geoserver-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-devel
