Himanshu Yadav
Himanshu Yadav

Reputation: 13585

Encrypting Datasource password for JBOSS and Tomcat6

Is there any way to encrypt datasource password provided to Tomcat6's context.xml and JBoss's mssql-ds.xml?

I can externalize datasource information in a property file and encrypt the password there using Jasypt. But then how Tomcat and JBoss will access this property file?

Upvotes: 0

Views: 844

Answers (1)

Christopher Schultz
Christopher Schultz

Reputation: 20862

Turns out this is a FAQ in the Tomcat Wiki.

http://wiki.apache.org/tomcat/FAQ/Password

There is no reliable way to truly protect yourself if you want your service to be able to start up unattended. All techniques that allow unattended startups are merely security-by-obscurity.

Upvotes: 2

Related Questions