Details
-
Bug
-
Status: Resolved
-
Major
-
Resolution: Fixed
-
None
-
None
Description
The control utility shows passwords in the output.
For instance, the "activate" command produces the following output:
Control utility [ver. 2.10.0-SNAPSHOT#20201117-sha1:DEV] 2020 Copyright(C) Apache Software Foundation User: Vyacheslav Koptilin Time: 2020-11-18T01:24:44.699 Warning: --keystore-password is insecure. Whenever possible, use interactive prompt for password (just discard --keystore-password option). Command [ACTIVATE] started Arguments: --keystore C:\projects\incubator-ignite\modules\clients\src\test\keystore\node01.jks --keystore-password 123456 --ssl-cipher-suites TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 --activate --yes -------------------------------------------------------------------------------- Command deprecated. Use --set-state instead. Cluster activated Command [ACTIVATE] finished with code: 0 Control utility has completed execution at: 2020-11-18T01:24:45.998 Execution time: 1299 ms
All passwords should be hidden.
Attachments
Issue Links
- links to