Re: FTP endpoint is logging my password / proposed patch

2010-09-02 Thread Claus Ibsen
Hi There is a related ticket https://issues.apache.org/activemq/browse/CAMEL-2987 Which can help here as it allows to use encrypted passwords. Then the logging will just be that encrypted password which isn't readable. password=#ENC#4fg48dgh58747f744#ENC# And I wonder if there is any stuff from

Re: FTP endpoint is logging my password / proposed patch

2010-09-01 Thread Hadrian Zbarcea
We are happy to apply patches, thanks for the contribution. The proper way though is to create an issue in jira and attach the patch to it. Please check the "grant license to apache" when you attach the patch, otherwise we will not be able to apply. Coincidentally I was thinking about the very

FTP endpoint is logging my password / proposed patch

2010-09-01 Thread Lorrin Nelson
Hi -- I'm fairly new to Camel, but my impression is that URIs with sensitive data are common and that URIs are frequently logged. I bumped into this myself most recently with an FTP consumer. I ended up with log messages like this: RemoteFileProducer 2010-08-31 16:21:45,459 -- INFO -- Connected