Re: Key store password via console

2007-06-13 Thread Bill Barker
"Moritz" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] > Hi, > > I have defined a TLS connector, but I don't want to write the password for > my key store in plain text into the server.xml file. Is it possible to > enter the password via the console during startup? Or is there any

Re: Key store password via console

2007-06-13 Thread David Wall
Moritz wrote: But still I think it's never a good idea to write a password in plain text in any file. If the password is stored in plain text and something goes wrong an attacker could be able to steal my private key and use it. And this would be really bad. Obviously, this depends on your web

Re: Key store password via console

2007-06-13 Thread Moritz
I agree with you that only those userids that actually need to access the server.xml file should be able to read it. But still I think it's never a good idea to write a password in plain text in any file. If the password is stored in plain text and something goes wrong an attacker could be abl

RE: Key store password via console

2007-06-13 Thread Caldarale, Charles R
> From: Moritz [mailto:[EMAIL PROTECTED] > Subject: Key store password via console > > I have defined a TLS connector, but I don't want to > write the password for my key store in plain text into > the server.xml file. Are you saying that your server.xml file is open to anyone? If so, you've go