Hello,
We are new to activemq and have read what's in here 
https://activemq.apache.org/encrypted-passwords

To quote:
"
[cid:image001.png@01D88CD3.34E635C0]

Note: It is recommended that you use only alphanumeric characters for the 
password. Special characters, such as $/^&, are not supported.
"
Questions:

  1.  What should not contain special characters? Is it the secret string  
passed to the -password argument OR the real password being passed to -input?



  1.  On the same page I read the portion that talks about setting an 
environment variable to hold the secret value, start activemq and then unset 
that environment variable.  But, how will this work in the case of say a server 
restart? We can't put the secret in the service file.


Our security policies  do not allow for the encryptor "secret" to remain in any 
configuration or settings files especially since the decrypt mechanism is also 
available on the same host via bin/activemq commands. So, if a bad actor gets 
into the host, he can get the secret and decrypt to get the real password.   
Any alternatives?



Thanks.
Sundar

Reply via email to