[WSS-383] Allow encrypted password storage in signaturePropFile

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.6.4
• Fix Version/s: 2.0.0
• Component/s: WSS4J Core
• Labels: encryption password security
• Environment: Any
• Assignee: Colm O hEigeartaigh
• Reporter: Vandan Juvekar
• Created: 31/Mar/12 17:26
• Updated: 06/May/14 09:10
• Resolved: 20/Aug/13 10:46

Description

Currently we have to store keystore passwords in cleartext in WSS4J signaturePropFile. Please allow storing keystore passwords in AES-encrypted and Base64-encoded format in signaturePropFile, such that the symmetric key used to encrypt / decrypt the keystore password can be externalized in another file.