[OFBIZ-6494] New implementation of the two-way cryptographic services of OFBiz based on Apache Shiro

• Type: New Feature
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 16.11.01
• Component/s: framework
• Assignee: Jacopo Cappellato
• Reporter: Jacopo Cappellato
• Created: 10/Jun/15 12:23
• Updated: 10/Jun/15 19:58
• Resolved: 10/Jun/15 12:23

Description

New implementation of the two-way cryptographic services of OFBiz based on Apache Shiro:

• two-way encryption is now delegated to Apache Shiro, with stronger initialization vectors
• the mechanism is backward compatible
• new tools to update the encryption of private keys, useful to upgrade older versions of OFBiz and most of all to replace old keys with new ones (this is critical to implement stronger security practices as requested by PCI)
• unit tests