Rob Godfrey created QPID-6017:
---------------------------------

             Summary: [Java Broker] Provide a mechanism by which "secure" 
attributes in the configuration can be encrypted
                 Key: QPID-6017
                 URL: https://issues.apache.org/jira/browse/QPID-6017
             Project: Qpid
          Issue Type: Improvement
          Components: Java Broker
            Reporter: Rob Godfrey
            Assignee: Rob Godfrey


Attributes in the configuration which contain confidential information such as 
passwords are annotated as "secure" in their definition.  This is used to 
prevent their disclosure through querying operations.  

However it may be the case that this information needs to be encrypted even 
within the configuration store.  In this case the key material needed to 
decrypt the confidential information must be held outside the configuration 
mechanism (otherwise we are just shifting the problem around).

Deployment environments may have site specific mechanisms my which encryption 
may occur, so the encryption mechanism must be pluggable and configurable at 
the broker (and potentially at the virtual host node) level.



--
This message was sent by Atlassian JIRA
(v6.2#6252)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to