Re: [jetty-users] Question regd jetty ssl configuration.

2021-07-16 Thread John English
On 16/07/2021 00:25, Greg Wilkins wrote: John, Not secure at all, nor is it intended to be. The issue is that if the server is to be started automatically without the need to enter a passphrase, then encryption cannot be used since the server needs to provide the keystore passwords at

Re: [jetty-users] Question regd jetty ssl configuration.

2021-07-15 Thread TSmitha
Hello Joakin, John and Greg, Thanks a lot for your prompt reply, this has helped me a great deal. I will go ahead with using the OBF format in my configurations. Thanks, Smita On Fri, Jul 16, 2021 at 2:55 AM Greg Wilkins wrote: > > John, > > Not secure at all, nor is it intended to be. > > The

Re: [jetty-users] Question regd jetty ssl configuration.

2021-07-15 Thread Greg Wilkins
John, Not secure at all, nor is it intended to be. The issue is that if the server is to be started automatically without the need to enter a passphrase, then encryption cannot be used since the server needs to provide the keystore passwords at runtime.OBF is simply a way to put the pass

Re: [jetty-users] Question regd jetty ssl configuration.

2021-07-15 Thread John English
On 15/07/2021 18:27, Joakim Erdfelt wrote: The `MD5:` format Credential / Password is what's known as a 1-way hash (this is not encryption) You can take a password and generate a MD5. Then later, when a password is provided, you can run the hash again and compare the resulting MD5 to know if

Re: [jetty-users] Question regd jetty ssl configuration.

2021-07-15 Thread Joakim Erdfelt
The `MD5:` format Credential / Password is what's known as a 1-way hash (this is not encryption) You can take a password and generate a MD5. Then later, when a password is provided, you can run the hash again and compare the resulting MD5 to know if the password that was provided is a match.