[jboss-user] [Security & JAAS/JBoss] - Jboss doubt

[akshay_ajmani]

I have a piece of code that parses an XML defined as follows:
      
  | <service name="INT_Trip_PingRQ">
  |       <url></url>
  | <action>Trip_PingRQ</action>
  |       <payload></payload>
  |       <failurecount>3</failurecount>
  |        <alerts>
  |         <alert ref="Log4j" />
  |       </alerts>
  | 	      <username>206041</username>
  | 		 <password>nbcb3172</password>
  | 		 <organization>Employees</organization>
  | 		 <domain>Sabre</domain>	  
  |     </service>
  | 


  |     ServiceObject service=new ServiceObject();
  |     service.setPassword(); <!-- this is nbcb3172 that comes from this xml-->
  | 
If you see the xml, it has a password tag in it.This password is used in a soap request by the application to generate token.This piece of code is application specific and has got nothing to do with Jboss.

My requirement is that , I want this password to be encrypted i.e the encrypted password should be stored in Jboss and encryption and decryption to be done by Jboss.
My xml should just have a reference to the encrypted password as shown below.
      
  | <service name="INT_Trip_PingRQ">
  |       <url>https://cert.webservices.sabre.com/tsts</url>
  |       <action>Trip_PingRQ</action>
  |       <payload><![CDATA[<Trip_PingRQ Version="1.0" xmlns="http://webservices.sabre.com/triprecord" />]]></payload>
  |       <failurecount>3</failurecount>
  |        <alerts>
  |         <alert ref="Log4j" />
  |       </alerts>
  | 	      <username>206041</username>
  | 		 <reference-to-password>reference2</reference-to-password>
  | 		 <organization>Employees</organization>
  | 		 <domain>Sabre</domain>	  
  |     </service>
  |       
    Here reference 2 should point to encrypted password which should be decrypted back to nbcb3172 so that I can use it further
I went through the following link but it is used for datasources.I mean Jboss can do the encryption but how to I ensure that  my java code that parses the xml has an access to this decrypted password.

View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4242978#4242978

Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=4242978