Rob Gregory wrote:

Good comments, but how would you encrypt the config files when Struts needs
these to run out code (hence before I can decrypt). While I personally
prefer Cocoon over struts these are pretty much 'Sister' projects so the
same solution would help me also.

This is a valid question. You would have to override some of Struts functionality, locate where it loads config files and add a hook for decryption. Not a trivial task, but should not be impossible. The biggest issue with this is that by doing so, you're creating your own Struts port/branch and you would have to maintain it plus all upgrades. Switching over to a newer release of Struts would require you to build your Struts again, with the your changes.

Not something I would recomend. And again, it is not impossible to crack. In my oppinion, it is not worth the time, unless your securtity requirements are really high. But then, the machine's security is probably more important than encrypting config files.

Nix.

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to