Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add support for encrypted expressions in the wildfly-config.xml #610

Open
bstansberry opened this issue Sep 25, 2024 · 0 comments
Open

Add support for encrypted expressions in the wildfly-config.xml #610

bstansberry opened this issue Sep 25, 2024 · 0 comments
Labels
feature A proposed new WildFly feature

Comments

@bstansberry
Copy link
Contributor

Description

WildFly includes a common configuration framework that can be used to configure multiple clients, rather than relying on each client having their own configuration file. The configuration can be defined using a wildfly-config.xml file, where there are multiple configuration sections containing elements whose values determine the configuration of the WildFly clients.

Attribute values for client configuration can include sensitive information. And while credential references can be used for some of them, others still need to be defined using plaintext. As a result, those elements are still exposed and make the application vulnerable. Additionally, the password for the credential store needs to be defined as clear-text, which is not ideal.

This feature adds support for encrypted expressions for elements in the wildfly-config.xml file, which allows users to avoid specifying sensitive information using plaintext.

Issue Contact

fjuma

@bstansberry bstansberry added the feature A proposed new WildFly feature label Sep 25, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
feature A proposed new WildFly feature
Projects
Status: No status
Development

No branches or pull requests

1 participant