[
https://issues.apache.org/jira/browse/CAMEL-10869?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15875773#comment-15875773
]
Mikael Grevsten commented on CAMEL-10869:
-----------------------------------------
OK, but for a configuration where you have properties file with accounts and
using jasypt for encrypting passwords it would be easy to change the logging
level to TRACE and rerun and then reveal the password…
> TRACE on ftp component reveals password
> ---------------------------------------
>
> Key: CAMEL-10869
> URL: https://issues.apache.org/jira/browse/CAMEL-10869
> Project: Camel
> Issue Type: Improvement
> Components: camel-ftp
> Affects Versions: 2.18.2
> Reporter: Mikael Grevsten
> Labels: ftp, trace
>
> When TRACE level is on using a ftp component the password is displayed in
> plain text.
> {{2017-02-21 11:26:28:361 o.a.c.c.f.remote.RemoteFileProducer DEBUG - Not
> already connected/logged in. Connecting to:
> ftp://192.168.170.33/mgr/out?allowNullBody=false&consumer.bridgeErrorHandler=true&disconnect=true&password=xxxxxx&pollStrategy=%23defaultPollStrategy&throwExceptionOnConnectFailed=true&username=mgr
> 2017-02-21 11:26:28:361 o.a.c.c.file.remote.FtpOperations TRACE - Connecting
> using FTPClient: org.apache.commons.net.ftp.FTPClient@456abb66
> 2017-02-21 11:26:28:361 o.a.c.c.file.remote.FtpOperations TRACE - Connecting
> to ftp://[email protected]:21 using connection timeout: 10000
> 2017-02-21 11:26:28:377 o.a.c.c.file.remote.FtpOperations TRACE - Using
> SoTimeout=300000
> 2017-02-21 11:26:28:377 o.a.c.c.file.remote.FtpOperations TRACE - Attempting
> to login user: mgr using password: gsxr1100
> 2017-02-21 11:26:28:845 o.a.c.c.file.remote.FtpOperations TRACE - User mgr
> logged in: true}}
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
