[
https://issues.jboss.org/browse/AS7-1102?page=com.atlassian.jira.plugin.s...
]
Darran Lofthouse commented on AS7-1102:
---------------------------------------
We now have a vault implementation, enhancments such as this should be re-visited
post-7.1
Create PKCS#11 Compitable Cryptographic Services for Domain
Management
----------------------------------------------------------------------
Key: AS7-1102
URL:
https://issues.jboss.org/browse/AS7-1102
Project: Application Server 7
Issue Type: Task
Components: Domain Management, Security
Reporter: Darran Lofthouse
Assignee: Darran Lofthouse
Within domain management there are occasions where passwords need to be stored or
keystores accessed either for encryption / decryption of password or to load the keys used
for SSL exchanges.
Commonly a password within code is used for password based encryption of other passwords,
this obfuscates the password but does not over complicate the process of recovering the
password, alternatively a local keystore can be used for the encryption but again
everything is available on the local disk to recover the password.
PKCS#11 will allow the cryptographic to be delegated to hardware which contains it's
own protection against keys being made available.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see:
http://www.atlassian.com/software/jira