[
https://issues.apache.org/jira/browse/AMQ-9643?focusedWorklogId=962590&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-962590
]
ASF GitHub Bot logged work on AMQ-9643:
---------------------------------------
Author: ASF GitHub Bot
Created on: 19/Mar/25 21:44
Start Date: 19/Mar/25 21:44
Worklog Time Spent: 10m
Work Description: kenliao94 commented on PR #1400:
URL: https://github.com/apache/activemq/pull/1400#issuecomment-2738220275
> I would suggest to mimic what I did in Apache Karaf
(https://github.com/apache/karaf/blob/main/jaas/modules/src/main/java/org/apache/karaf/jaas/modules/encryption/EncryptionSupport.java).
Basically, I have on thread that scan the properties file, and if it detects
non encrypted password (e.g without the prefix), then it does the encryption
and "flag" the password with the prefix (indicating it's a hash).
Hey @jbonofre thanks for the review. I am not following. If a password
doesn't have the prefix, then we assume it is just plaintext.
Issue Time Tracking
-------------------
Worklog Id: (was: 962590)
Time Spent: 0.5h (was: 20m)
> Support storing hashed credential in PropertiesLoginModule
> ----------------------------------------------------------
>
> Key: AMQ-9643
> URL: https://issues.apache.org/jira/browse/AMQ-9643
> Project: ActiveMQ Classic
> Issue Type: Improvement
> Components: Plugin
> Affects Versions: 5.18.5, 6.1.4
> Reporter: Ken Liao
> Assignee: Ken Liao
> Priority: Major
> Fix For: 6.2.0
>
> Time Spent: 0.5h
> Remaining Estimate: 0h
>
> Currently the JAAS plugin for PropertiesLoginModule only support storing
> password in plain text. This feature request is about letting the user to
> choose what secure hashing algorithm to use to hash the password before
> storing on the properties file.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
For further information, visit: https://activemq.apache.org/contact
