Dear Tomcat developers,
I would like to implement context config file encryption. It is a pretty useful
feature since passwords to various resources are stored in those files
Unfortunately the way how context config files are read is hard coded
(InputSource for Digester is created from FileInputStream) and does not let me
do so.
It would be great if tomcat 5.5 provided some pluggable ConfigFileLoader in
HostConfig (and may be on Engine level as well) to return InputStream for a
given config file name (or decorator for FileInputStream ).
It would be also great if it were possible to register context config file
extensions other then *.xml - it would allow to use *.exml for encrypted XML
config files (will save us a test of the file to se if it is encrypted or plain
text)
If it is not possible to make this enhancement may be you could re-factor
ContextConfig class so it can be effectively subclassed and its input stream
logic altered
All you would need to do is to factor out
��� protected void processContextConfig(InputStream) {
���
��� }
from
��� protected void processContextConfig(File file) {
�������
������� if (log.isDebugEnabled())
����������� log.debug("Processing context [" + context.getName() + "]
configuration file " + file);
�������
������� // Add as watched resource so that cascade reload occurs if a default
������� // config file is modified/added/removed
������� context.addWatchedResource(file.getAbsolutePath());
������� InputSource source = null;
������� InputStream stream = null;
������� try {
����������� if (file.exists()) {
��������������� stream = new FileInputStream(file);
��������������� source =
������������������� new InputSource("file://" + file.getAbsolutePath());
�� ���������} else if (log.isDebugEnabled()) {
��������������� log.debug("Context [" + context.getName() + "] configuration
file " + file + " not found");
����������� }
������� } catch (Exception e) {
����������� log.error(sm.getString("contextConfig.defaultMissing") + file);
������� }
������� if (source == null)
����������� return;
������� if (contextDigester == null){
����������� contextDigester = createContextDigester();
������� }
������� synchronized (contextDigester) {
����������� try {
��������������� source.setByteStream(stream);
.....
If processContextConfig(InputStream) is available, we can override this method,
read from encrypted stream, decrypt create decrypted stream in memory and pass
it to the original (superclass) �processContextConfig(InputStream)
Thank you very much for your assistance
Alex Roytman
[EMAIL PROTECTED]
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
