Replace custom file format of encrypted console password by openssl format #1616
Labels
breaking
breaking change
console
deegree administration console
enhancement
enhancement or improvement
TMC discussion
to be discussed by technical management committee members
Milestone
Currently the file
console.pw
stores the password set for the deegree administration console in a very specific formathex(salt):hex(enc(password))
like:0000018C2B4B62FD:9C53FF924D7CE3A9112EC480116ACA4F9941B9321F47BDBA5528C5DED47EA076
It contains the salt value and the encrypted password using SHA-256 algorithm delimited by
:
.To allow the use of tools such as
openssl
or using common Java API such as Apache Codec to read and write the password file the format shall be changed tosalt$sha256(password)
using$
as the delimiter.An output generated with
openssl
or Apache Commons CodecSha2Crypt.sha256Crypt()
will look like:$5$12345$nxIKX54gpaik7RiymymMEhDou8.9DjFTzFkJxHKQ3D/
Usage scenario:
openssl passwd -salt '01234' -5 mypassword
to write the encrypted password into the fileconsole.pw
when using deegree in a container and providing an environment variable to pass the password.The text was updated successfully, but these errors were encountered: