sslPEMKeyPassword Should not be visible in logs and similar

XMLWordPrintableJSON

    • Type: Improvement
    • Resolution: Done
    • Priority: Minor - P4
    • 2.1.2
    • Affects Version/s: 2.0.4, 2.1.0
    • Component/s: Logging, Security
    • None
    • Environment:
      SSL Enabled Build
    • None
    • 3
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      Currently, the sslPEMKeyPassword is visible as plain text. While this is not a direct compromise of the key, it goes against best practices for exposure of passwords in logs and non-privileged commands.

            Assignee:
            Matt Dannenberg (Inactive)
            Reporter:
            Adam Comerford
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: