encrypt datasource password in wildfly configuration file

cd ~/wildfly-10.1.0.Final/modules/

~/jdk1.8.0_131/bin/java -cp ./system/layers/base/org/jboss/logging/main/jboss-logging-3.3.0.Final.jar:./system/layers/base/org/picketbox/main/picketbox-4.9.6.Final.jar org.picketbox.datasource.security.SecureIdentityLoginModule your-password-string

Encoded password:

-224b0dffed3998dfd6eb091793d10850b2ef7287d7b50175

 

edit wildfly configuration file such as standalone.xml as follows:

1. add security domain with the above generated encoded password

                <security-domain name=”encrypted-ds-name” cache-type=”default”>

                    <authentication>

                        <login-module code=”org.picketbox.datasource.security.SecureIdentityLoginModule” flag=”required”>

                            <module-option name=”username” value=”user-name”/>

                            <module-option name=”password” value=”

-224b0dffed3998dfd6eb091793d10850b2ef7287d7b50175

“/>

                        </login-module>

                    </authentication>

                </security-domain>

2. add data source

                <datasource jndi-name=”java:jboss/datasources/db-oracle” pool-name=”db-oracle” enabled=”true” use-java-context=”true”>

                    <connection-url>jdbc:oracle:thin:@xxx.com:1521/testdb</connection-url>

                    <driver>oracle</driver>

                    <security>

                        <security-domain>encrypted-ds-name</security-domain>

                    </security>

                </datasource>

Read Full Post »