Re: Ant tasks to encrypt or decrypt passwords from property files

2006-06-20 Thread Steve Loughran
Dominique Devienne wrote: we would be interested in encrypting. But then it's a chicken-and-egg problem, no? Where are you going to store the passwords to decrypt the passwords read from properties files? --DD I keep my password properties out of SCM, in a bit of the filesystem that is

Re: Ant tasks to encrypt or decrypt passwords from property files

2006-06-20 Thread Antoine Levy-Lambert
Hello Alexey, I have written something based on your code. Actually, I wrote an ant task to create the key first. I wanted to create filters (pluggable into filterchains) to encrypt and decrypt, but I do not get that to work. I might do an ant task to encrypt and a sort of loadproperties clone

Re: Re: Ant tasks to encrypt or decrypt passwords from property files

2006-06-20 Thread Antoine Levy-Lambert
[EMAIL PROTECTED] An: Ant Users List user@ant.apache.org Betreff: Re: Ant tasks to encrypt or decrypt passwords from property files Dominique Devienne wrote: we would be interested in encrypting. But then it's a chicken-and-egg problem, no? Where are you going to store the passwords

Ant tasks to encrypt or decrypt passwords from property files

2006-06-19 Thread Antoine Levy-Lambert
Hi, I am looking for ant tasks which can be used to encrypt or to decrypt passwords stored in property files. The reason is that I am going to develop an ant script which will start an Oracle SQL*Plus batch or a stored procedure, and the DBA does not want that we hard code the password in

Re: Ant tasks to encrypt or decrypt passwords from property files

2006-06-19 Thread Jeffrey E Care
or decrypt passwords from property files Hi, I am looking for ant tasks which can be used to encrypt or to decrypt passwords stored in property files. The reason is that I am going to develop an ant script which will start an Oracle SQL*Plus batch or a stored procedure, and the DBA does not want

Re: Re: Ant tasks to encrypt or decrypt passwords from property files

2006-06-19 Thread Antoine Levy-Lambert
cc Subject Ant tasks to encrypt or decrypt passwords from property files Hi, I am looking for ant tasks which can be used to encrypt or to decrypt passwords stored in property files. The reason is that I am going to develop an ant script which will start an Oracle SQL

Re: Re: Ant tasks to encrypt or decrypt passwords from property files

2006-06-19 Thread Jeffrey E Care
:29 -0400 Von: Jeffrey E Care [EMAIL PROTECTED] An: Ant Users List user@ant.apache.org Betreff: Re: Ant tasks to encrypt or decrypt passwords from property files Encrypt or encode? If you just need them to not be in clear-text you could always use a simple encoding: rot13, base64, etc

Re: Re: Ant tasks to encrypt or decrypt passwords from property files

2006-06-19 Thread Dominique Devienne
we would be interested in encrypting. But then it's a chicken-and-egg problem, no? Where are you going to store the passwords to decrypt the passwords read from properties files? --DD - To unsubscribe, e-mail: [EMAIL

Re: Ant tasks to encrypt or decrypt passwords from property files

2006-06-19 Thread Alexey N. Solofnenko
This can be done by requiring a key store in user home. Only people that have some special certificates, can encrypt/decrypt date (SSH style security). The decryption can be easily done with scriptdef. This is a corresponding Java code: SecretKeySpec skeySpec=new

Re: Ant tasks to encrypt or decrypt passwords from property files

2006-06-19 Thread Dominique Devienne
OK, I see your point, although the key store has to remain 'secret' somehow, using file-system dependent permissions I guess, otherwise it's exposed as well. --DD On 6/19/06, Alexey N. Solofnenko [EMAIL PROTECTED] wrote: This can be done by requiring a key store in user home. Only people that

Re: Re: Ant tasks to encrypt or decrypt passwords from property files

2006-06-19 Thread Antoine Levy-Lambert
of passphrases by agents is supported by BouncyCastle. Regards, Antoine Original-Nachricht Datum: Mon, 19 Jun 2006 13:20:26 -0700 Von: Alexey N. Solofnenko [EMAIL PROTECTED] An: Ant Users List user@ant.apache.org Betreff: Re: Ant tasks to encrypt or decrypt passwords from property

RE: Ant tasks to encrypt or decrypt passwords from property files

2006-06-19 Thread Anderson, Rob (Global Trade)
: Re: Ant tasks to encrypt or decrypt passwords from property files This can be done by requiring a key store in user home. Only people that have some special certificates, can encrypt/decrypt date (SSH style security). The decryption can be easily done with scriptdef

Re: Ant tasks to encrypt or decrypt passwords from property files

2006-06-19 Thread danch
The classic response to the classic topic: if you can protect the decryption key adequately, why not simply protect the password adequately? Using encryption to enhance data security isn't a simple matter of turning it on - you have to consider these sorts of issues or all you'll be doing is

Re: Ant tasks to encrypt or decrypt passwords from property files

2006-06-19 Thread danch
And if you can keep the keystore secret and protected, couldn't you keep the password secret and protected? Dominique Devienne wrote: OK, I see your point, although the key store has to remain 'secret' somehow, using file-system dependent permissions I guess, otherwise it's exposed as well.