0004810: <database//password> encryption

Viewing Issue Advanced Details [ Jump to Notes ]

[ View Simple ] [ Issue History ] [ Print ]

Category

Severity

Reproducibility

Date Submitted

Last Update

0004810

[Resin]

minor

always

10-17-11 09:34

12-08-11 13:18

Reporter

alex

View Status

public

Assigned To

ferg

Priority

normal

Resolution

fixed

Platform

Status

closed

Projection

none

OS Version

ETA

none

Fixed in Version

4.0.25

Product Version

4.0.23

Product Build

Summary

0004810: <database//password> encryption

Description

rep by Leonid, Kaminsky
It is a request for security improvement.

Right now all database passwords are stored like a clear text.

Federal Government is moving toward new security standards, specially to protect PII.

Please modify your /resin-admin/ application in such way that it will be able to set encrypted password in the resin.xml for each of database sources.

Please let me know if you have any questions.

Steps To Reproduce

Additional Information

Attached Files

Relationships

Notes
(0005657) ferg 12-08-11 13:18	server/4351 resinctl password-encrypt [password] <resin:Password>[encrypted password]</resin:Password>

Issue History
Date Modified	Username	Field	Change
10-17-11 09:34	alex	New Issue
12-08-11 13:18	ferg	Note Added: 0005657
12-08-11 13:18	ferg	Assigned To	=> ferg
12-08-11 13:18	ferg	Status	new => closed
12-08-11 13:18	ferg	Resolution	open => fixed
12-08-11 13:18	ferg	Fixed in Version	=> 4.0.25

Mantis 1.0.0rc3[^]

29 total queries executed.
26 unique queries executed.