Re: encrypting tmp files generated by CachedOutputStream?

2012-10-22 Thread Aki Yoshida
hi, thanks for all your comments. I seem to have discovered a prerequisite to this feature. Locally, I added this encryption option and it was working for some examples. However, when I ran the entire CXF build using the -D props to enforce this mode everywhere, I saw some test errors. Then, I

encrypting tmp files generated by CachedOutputStream?

2012-10-18 Thread Aki Yoshida
Hi, There is a concern that these temporary files are written out to the file system without any protection. And I was wondering if we can add an option to enable encryption for the stream output and keep the key in the COS instance so that only that COS instance can later read the data from the

Re: encrypting tmp files generated by CachedOutputStream?

2012-10-18 Thread Freeman Fang
Hi Aki, Basically I'm +1 for this good idea. Just a little bit concern about the performance impact. Could we add a flag to enable this encryption behavior? By default the value is false, so keep same behavior as is, and users can explicitly enable it if they need a higher secure runtime.

Re: encrypting tmp files generated by CachedOutputStream?

2012-10-18 Thread Aki Yoshida
Hi Freeman, yes. This should be an option and disabled by default. I am thinking about introducing a system property org.apache.cxf.io.CachedOutputStream.something to set the cipher transformation name to enable this option. regards, aki 2012/10/18 Freeman Fang freeman.f...@gmail.com: Hi Aki,

Re: encrypting tmp files generated by CachedOutputStream?

2012-10-18 Thread Willem jiang
Using the system property will effect CXF instance across the JVM. It could be good if we can do it on the bus level. -- Willem Jiang Red Hat, Inc. FuseSource is now part of Red Hat Web: http://www.fusesource.com | http://www.redhat.com Blog: http://willemjiang.blogspot.com

Re: encrypting tmp files generated by CachedOutputStream?

2012-10-18 Thread Freeman Fang
Yeah, endpoint property should be good. － Freeman(Yue) Fang Red Hat, Inc. FuseSource is now part of Red Hat Web: http://fusesource.com | http://www.redhat.com/ Twitter: freemanfang Blog: http://freemanfang.blogspot.com http://blog.sina.com.cn/u/1473905042 weibo:

Re: encrypting tmp files generated by CachedOutputStream?

2012-10-18 Thread Daniel Kulp
On Oct 18, 2012, at 8:31 AM, Aki Yoshida elak...@gmail.com wrote: Hi, There is a concern that these temporary files are written out to the file system without any protection. And I was wondering if we can add an option to enable encryption for the stream output and keep the key in the COS

Re: encrypting tmp files generated by CachedOutputStream?

2012-10-18 Thread Aki Yoshida
Hi, but using a bus or EP prop, we will need a new method in COS to pass this encryption option. And we will need to change the current code in many places to make sure that this new method is used to prevent an unintended plain output written from somewhere. So, I see some drawbacks. Maybe, we

Re: encrypting tmp files generated by CachedOutputStream?

2012-10-18 Thread Sergey Beryozkin
On 18/10/12 15:38, Aki Yoshida wrote: Hi, but using a bus or EP prop, we will need a new method in COS to pass this encryption option. And we will need to change the current code in many places to make sure that this new method is used to prevent an unintended plain output written from

Re: encrypting tmp files generated by CachedOutputStream?

2012-10-18 Thread Freeman Fang
+1 Freeman － Freeman(Yue) Fang Red Hat, Inc. FuseSource is now part of Red Hat Web: http://fusesource.com | http://www.redhat.com/ Twitter: freemanfang Blog: http://freemanfang.blogspot.com http://blog.sina.com.cn/u/1473905042 weibo: http://weibo.com/u/1473905042 On 2012-10-18, at