-
Notifications
You must be signed in to change notification settings - Fork 132
Description
Can passwords and users be removed from the following files in xipki package?
ca-db.properties, caconf-db.properties, keypool-db.properties files of mysql, server-ca.xml, server-gateway.xml, tomcat-gateway/xipki/etc/cmp-gateway.json, /pax-web-features-8.0.22-features.xml, xipki-cli/xipki/client-script/rest-client.sh, xipki-cli/xipki/client-script/scep-client.script, xipki-cli/xipki/client-script/cmp-client.script, /xipki-mgmt-cli/etc/org.xipki.ca.mgmt.client.cfg, xipki-mgmt-cli/xipki/ca-setup/cacert-present-dbbased/setup-p12.script, xipki-mgmt-cli/xipki/ca-setup/cacert-none-dbbased/setup-p12.script?
Our security guidelines require no passwords or users to be configured in a file or as an ENV variable.
Example:
ca-db.properties has:
jdbc:mariadb://:/ca?user=&password=
setup-p12.script has:
CA_P12_PWD = CHANGEIT
Requesting for changes in 5.3.15 and 6.x versions
Thank you