Martin Smerek created ARTEMIS-551:
-------------------------------------
Summary: ActiveMQ logs truststore password in plain text
Key: ARTEMIS-551
URL: https://issues.apache.org/jira/browse/ARTEMIS-551
Project: ActiveMQ Artemis
Issue Type: Bug
Components: AMQP
Affects Versions: 1.2.0
Reporter: Martin Smerek
ActiveMQ logs trust-store-password in plain text during bridge connection.
1. Configure two ActiveMQ servers for data replication over netty-ssl as
collocated.
2. Start both servers and check logs for "221027: Bridge
ClusterConnectionBridge... is connected" message and trust-store-password
parameter.
The problem is in
org.apache.activemq.artemis.api.core.TransportConfiguration.toString(),
particularly in condition
if (key.equals(TransportConstants.KEYSTORE_PASSWORD_PROP_NAME) ||
key.equals(TransportConstants.DEFAULT_TRUSTSTORE_PASSWORD))
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
