[GERONIMO-1135] Keystore password in System.properties

• Type: Bug
• Status: Closed
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 1.0-M5
• Fix Version/s: 1.2, 2.0-M1
• Component/s: security
• Security Level: public (Regular issues)
• Assignee: Vamsavardhana Reddy
• Reporter: Aaron Mulder
• Created: 06/Nov/05 07:46
• Updated: 07/Dec/06 19:21
• Resolved: 07/Dec/06 19:21

Description

If you look at the System properties, the keystore and trust store passwords are in there. I'm not sure who puts them in there, but we need to find a way to stop that – or else prevent applications from reading them?