Reputation: 81
In an enterprise java project that uses spring security, what are the ways to keep some private keys secure at the application server such as weblogic?
Upvotes: 0
Views: 77
Reputation: 1740
If you store the credentials in a property file. You could change the permission on the configuration files after they have been deployed. For example you can give readonly access to the application server user, such that nobody else can read the credentials.
Upvotes: 1