BlogJava-paulwong-随笔分类-JASYPThttp://www.blogjava.net/paulwong/category/55366.htmlzh-cnSun, 16 Jan 2022 11:40:56 GMTSun, 16 Jan 2022 11:40:56 GMT60SPRING 中YAML文件密码不以明文保存http://www.blogjava.net/paulwong/archive/2020/10/20/435697.htmlpaulwongpaulwongTue, 20 Oct 2020 06:59:00 GMThttp://www.blogjava.net/paulwong/archive/2020/10/20/435697.htmlhttp://www.blogjava.net/paulwong/comments/435697.htmlhttp://www.blogjava.net/paulwong/archive/2020/10/20/435697.html#Feedback0http://www.blogjava.net/paulwong/comments/commentRss/435697.htmlhttp://www.blogjava.net/paulwong/services/trackbacks/435697.htmlUpdate: for production environment, to avoid exposing the password in the command line, since you can query the processes with ps, previous commands with history, etc etc. You could:

  • Create a script like this: touch setEnv.sh
  • Edit setEnv.sh to export the JASYPT_ENCRYPTOR_PASSWORD variable

    #!/bin/bash

    export JASYPT_ENCRYPTOR_PASSWORD=supersecretz

  • Execute the file with . setEnv.sh
  • Run the app in background with mvn spring-boot:run &
  • Delete the file setEnv.sh
  • Unset the previous environment variable with: unset JASYPT_ENCRYPTOR_PASSWORD

https://stackoverflow.com/questions/37404703/spring-boot-how-to-hide-passwords-in-properties-file



paulwong 2020-10-20 14:59 发表评论
]]>