Miroslav Novak created ARTEMIS-2284:
---------------------------------------
Summary: Artemis 2.7.0 logs password for STOMP protocol in clear
text in debug logs
Key: ARTEMIS-2284
URL: https://issues.apache.org/jira/browse/ARTEMIS-2284
Project: ActiveMQ Artemis
Issue Type: Bug
Components: Broker
Affects Versions: 2.7.0
Reporter: Miroslav Novak
If TRACE log is enabled for {{org.apache.activemq.artemis}} then StompProtoco
is logging password in clear text:
{code}
13:48:06,488 DEBUG [org.apache.commons.beanutils.BeanUtils] (ServerService
Thread Pool -- 86)
BeanUtils.populate(org.apache.activemq.artemis.core.protocol.stomp.StompProtocolManager@2aa25516,
{needClientAuth=tru
e, trustStorePassword=hornetqexample, keyStorePassword=hornetqexample,
port=6445, sslEnabled=true, host=127.0.0.1,
trustStorePath=/home/hudson/hudson_workspace/workspace/eap-7.x-messaging-weekly-common-ssl/eap-t
estsuite/jboss-hornetq-testsuite/tests-eap7/src/test/resources/org/jboss/qa/hornetq/test/transportprotocols/hornetq.example.truststore,
keyStorePath=/home/hudson/hudson_workspace/workspace/eap-7.x-messaging-week
ly-common-ssl/eap-testsuite/jboss-hornetq-testsuite/tests-eap7/src/test/resources/org/jboss/qa/hornetq/test/transportprotocols/hornetq.example.keystore})
...
13:48:06,488 TRACE [org.apache.commons.beanutils.BeanUtils] (ServerService
Thread Pool -- 86)
setProperty(org.apache.activemq.artemis.core.protocol.stomp.StompProtocolManager@2aa25516,
trustStorePassword, horn
etqexample)
...
13:48:06,489 TRACE [org.apache.commons.beanutils.BeanUtils] (ServerService
Thread Pool -- 86)
setProperty(org.apache.activemq.artemis.core.protocol.stomp.StompProtocolManager@2aa25516,
keyStorePassword, hornet
qexample)
{code}
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
