Re: How to hide the keystorePass at the server.xml

2006-06-02 Thread Bill Barker
TC 3.3.x had an optional module to do this. It never got ported. I generally agree with most of the people that say that this is the least of your problems. If you are usings a self-signed cert, then you are just getting what you deserve. Otherwise, you simply contact the CA and revoke the

Re: How to hide the keystorePass at the server.xml

2006-06-02 Thread Leon Rosenberg
On 6/2/06, Bill Barker [EMAIL PROTECTED] wrote: TC 3.3.x had an optional module to do this. It never got ported. I generally agree with most of the people that say that this is the least of your problems. If you are usings a self-signed cert, then you are just getting what you deserve.

Re: How to hide the keystorePass at the server.xml

2006-06-02 Thread David Wall
Leon Rosenberg wrote: On 6/2/06, Bill Barker [EMAIL PROTECTED] wrote: TC 3.3.x had an optional module to do this. It never got ported. I generally agree with most of the people that say that this is the least of your problems. If you are usings a self-signed cert, then you are just

Re: How to hide the keystorePass at the server.xml

2006-05-30 Thread Shankar Unni
Robert Harper wrote: One thing to think of is that if you have to do that to protect it, then everything else on that system is suspect. Yeah, yeah. I used to use this argument a lot, too. But that's like saying: if your harness isn't secure, then why bother with an additional safety net

Re: How to hide the keystorePass at the server.xml

2006-05-30 Thread David Wall
Shankar Unni wrote: Robert Harper wrote: One thing to think of is that if you have to do that to protect it, then everything else on that system is suspect. Yeah, yeah. I used to use this argument a lot, too. But that's like saying: if your harness isn't secure, then why bother with an