Sane Mode and in our test environment, bootPassword gets written out in plain text to service.properties

• Key: DERBY-236
• Type: Bug
• Status: Closed
• Resolution: Fixed
• Priority: Minor
• Assignee: Sunitha Kambhampati
• Reporter: Sunitha Kambhampati
• Component/s: Store
• Affects Version/s: 10.1.1.0
• Fix Version/s: 10.1.1.0

Description

In org.apache.derby.impl.store.RawStore

in boot(), if we run a test using our testharness and with sane jars, the boot password gets written out to service.properties in plain text. This is incorrect, should not happen even for a sane and test harness combination..


Code :-
if (SanityManager.DEBUG)
{
if (!databaseEncrypted)
{
// check for system property if running under sanity - this
// gives more test coverage for those that that hard code
// connection URL in the test or somehow go thru the test
// harness in a strange way.
String testEncryption =
PropertyUtil.getSystemProperty("testDataEncryption");

if (testEncryption != null)
{
properties.put(Attribute.DATA_ENCRYPTION, "true");
properties.put(Attribute.BOOT_PASSWORD, testEncryption);
databaseEncrypted = true;
                    }
}
}