encrypting jks file password in server.xml

[kamtaot]

Hi all,

I am implementing Knime server at my organization and the security team says that the JKS file password and AD Connection password should not be in plain text. In a similar condition (another application running on Apache Tomcat), they put a jar called “tomcat-decrypt.jar” which extends the method mentioned in the connector tag of server.xml. When I did the same, the server is throwing error. Any suggestions on this? I am doing this because of our internal minimum security baseline standard.

[ztrubow]

Hi @kamtaot ,

Here is an article describing obfuscating the password so it is not in plain text, please let me know if any of these solutions will suffice:

https://cwiki.apache.org/confluence/display/TOMCAT/Password

Thanks,
Zack

[kamtaot]

@kamtaot

pplication running on Apache Tomcat), they put a jar called “to

I exactly followed the steps and cleared the security test. The article was useful. Thank you for pointing me in the right direction.