scottk/wlan-cloud-opensync-controller
1
0
Fork 0
mirror of https://github.com/Telecominfraproject/wlan-cloud-opensync-controller.git synced 2025-11-02 19:47:52 +00:00
Code Issues Packages Projects Releases 1 Wiki Activity

addressed vulnerability reported by sonar: encrypt passwords in application.properties files with bcrypt

Browse Source
This commit is contained in:
Dmitry Toptygin
2020-06-19 17:21:53 -04:00
parent 6f440e6002
commit 127592d0c6
2 changed files with 6 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
opensync-gateway-cloud-process/src/main/resources/application.properties
View File

@@ -81,7 +81,9 @@ spring.profiles.include=use_ssl_with_client_cert_and_basic_auth,client_certifica
tip.wlan.httpClientConfig=classpath:httpClientConfig.json tip.wlan.httpClientConfig=classpath:httpClientConfig.json
#this user/password is used together with http_digest_auth and http_basic_auth spring profiles #this user/password is used together with http_digest_auth and http_basic_auth spring profiles
tip.wlan.serviceUser=user tip.wlan.serviceUser=user
tip.wlan.servicePassword=password # The value in here is bcrypt-encoded string "password", generated with the following command
# htpasswd -nBC 10 "" | cut -d ':' -f2
tip.wlan.servicePassword=$2y$10$rXnaSR5q2PsFWs8WEfJAguKAPh0oHLFkAJFqd7Pf7PVa3cOIClGoS
spring.main.show-banner=false spring.main.show-banner=false
server.port=9096 server.port=9096

4
opensync-gateway-static-process/src/main/resources/application.properties
View File

@@ -81,7 +81,9 @@ tip.wlan.httpClientConfig=classpath:httpClientConfig.json
#this user/password is used together with http_digest_auth and http_basic_auth spring profiles #this user/password is used together with http_digest_auth and http_basic_auth spring profiles
tip.wlan.serviceUser=user tip.wlan.serviceUser=user
tip.wlan.servicePassword=password # The value in here is bcrypt-encoded string "password", generated with the following command
# htpasswd -nBC 10 "" | cut -d ':' -f2
tip.wlan.servicePassword=$2y$10$rXnaSR5q2PsFWs8WEfJAguKAPh0oHLFkAJFqd7Pf7PVa3cOIClGoS
spring.main.show-banner=false spring.main.show-banner=false
server.port=9096 server.port=9096