Plain text SSL passwords in Log file

2018-03-28 Thread Vinay Patil
Hi, I see plain text SSL passwords in log file (printed by GlobalConfiguration) , because of which we cannot deploy our pipeline to NR environment. I am able to avoid this by having ERROR log level for this class but the security team still think it is a risk. Is this taken care in the new

Re: Plain text SSL passwords in Log file

2018-03-28 Thread Greg Hogan
.com/user/encryption-keys/] at a cost of added complexity. On Wed, Mar 28, 2018 at 4:38 PM, Vinay Patil wrote: > Hi, > > I see plain text SSL passwords in log file (printed by > GlobalConfiguration) , because of which we cannot deploy our pipeline to NR > environment. > > I am ab

Re: Plain text SSL passwords in Log file

2018-03-28 Thread Vinay Patil
tently logged. > > Perhaps we could implement something like TravisCI's encryption keys [ > https://docs.travis-ci.com/user/encryption-keys/] at a cost of added > complexity. > > On Wed, Mar 28, 2018 at 4:38 PM, Vinay Patil > wrote: > >> Hi, >> >> I

Re: Plain text SSL passwords in Log file

2018-03-29 Thread Vinay Patil
ly logged. >> >> Perhaps we could implement something like TravisCI's encryption keys [ >> https://docs.travis-ci.com/user/encryption-keys/] at a cost of added >> complexity. >> >> On Wed, Mar 28, 2018 at 4:38 PM, Vinay Patil >> wrote: >> &g

Re: Plain text SSL passwords in Log file

2018-03-29 Thread Vinay Patil
at the key name is >>> mistyped and inadvertently logged. >>> >>> Perhaps we could implement something like TravisCI's encryption keys [ >>> https://docs.travis-ci.com/user/encryption-keys/] at a cost of added >>> complexity. >>> >>&g

Re: Plain text SSL passwords in Log file

2018-03-29 Thread Szymon Szczypiński
<https://docs.travis-ci.com/user/encryption-keys/>] at a cost of added complexity. On Wed, Mar 28, 2018 at 4:38 PM, Vinay Patil mailto:vinay18.pa...@gmail.com>> wrote: Hi, I see plain text SSL passw