Uploaded image for project: 'Maven Jar Signer Plugin'
  1. Maven Jar Signer Plugin
  2. MJARSIGNER-35

verbose mode shows keystore password in clear text

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Major
    • Resolution: Fixed
    • 1.3.1
    • 1.3.2
    • None

    Description

      If is enabled verbose output, is printed out to the command line the keystore password in clear text.

      here is an example:

      [INFO] cmd.exe /X /C ""C:\Program Files\Java\jdk1.7.0_51\jre\..\bin\jarsigner.exe" -verbose -keystore mc-keystore -storepass mypassword

      Attachments

        Issue Links

          depends upon

          Improvement - An improvement or enhancement to an existing feature or task. MSHARED-321 Mask passwords in logs

          • Major - Major loss of function.
          • Closed

          Activity

            People

              tchemit Tony Chemit
              marco.speranza Marco Speranza
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: