Uploaded image for project: 'Nuxeo Platform'
  1. Nuxeo Platform
  2. NXP-19528

Password used to generate certificate is not encrypted when stored in directory

    XMLWordPrintable

    Details

      Description

      How to reproduce:

      • install addon nuxeo-signature
      • log in, navigate to HOME > Certificate
      • Enter password and generate certificate

      Password is stored in directory certificate without encryption (see column keypassword):

      Backport in 6.0?

      The following "override" contribution encrypts the password when stored in the directory:

      <?xml version="1.0"?>
      <component name="digital.signature.directory.override">
      	<require>digital.signature.directory</require>
        <extension target="org.nuxeo.ecm.directory.sql.SQLDirectoryFactory"
          point="directories">
      
          <directory name="certificate">
            <schema>cert</schema>
            <dataSource>java:/nxsqldirectory</dataSource>
            <cacheTimeout>3600</cacheTimeout>
            <cacheMaxSize>1000</cacheMaxSize>
            <table>certificate</table>
            <idField>userid</idField>
            <passwordField>keypassword</passwordField>
            <passwordHashAlgorithm>SSHA</passwordHashAlgorithm>
            <autoincrementIdField>false</autoincrementIdField>
            <createTablePolicy>on_missing_columns</createTablePolicy>
          </directory>
        </extension>
      </component>
      

        Attachments

          Activity

            People

            • Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Time Tracking

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0 minutes
                0m
                Logged:
                Time Spent - 2 hours
                2h