Package com.evolveum.midpoint.init
Class ProtectorConfiguration
java.lang.Object
com.evolveum.midpoint.init.ProtectorConfiguration
- Author:
- lazyman
-
Constructor Summary
ConstructorDescriptionProtectorConfiguration
(org.apache.commons.configuration2.Configuration configuration) -
Method Summary
Modifier and TypeMethodDescriptionReturns fixed salt value, used for all salt-hashed values.void
setEncryptionKeyAlias
(String encryptionKeyAlias) void
setFixedSalt
(String fixedSalt) Sets the fixed salt value, used for all salt-hashed values.void
setKeyStorePassword
(String keyStorePassword) void
setKeyStorePath
(String keyStorePath) void
setXmlCipher
(String xmlCipher)
-
Constructor Details
-
ProtectorConfiguration
public ProtectorConfiguration(org.apache.commons.configuration2.Configuration configuration)
-
-
Method Details
-
getEncryptionKeyAlias
-
setEncryptionKeyAlias
-
getKeyStorePassword
-
setKeyStorePassword
-
getKeyStorePath
-
setKeyStorePath
-
getXmlCipher
-
setXmlCipher
-
getFixedSalt
Returns fixed salt value, used for all salt-hashed values. WARNING: USE OF FIXED SALT IS DANGEROUS. Fixed salt makes all the salting ineffective. DO NOT USE unless you really know what you are doing, and if you want to sacrifice security for convenience. Fixed salt was implemented to allow new scenarios when using hashed password storage. E.g. with fixed salt passive-cached credentials in ShadowTypes can be compared to password history in UserType as hashes for same password values are equivalent. New config.xml option keystore/fixedSalt need to be set to any arbitrary value and is used globally as single fixed salt for all hashed values in midPoint. -
setFixedSalt
Sets the fixed salt value, used for all salt-hashed values. WARNING: USE OF FIXED SALT IS DANGEROUS. Fixed salt makes all the salting ineffective. DO NOT USE unless you really know what you are doing, and if you want to sacrifice security for convenience. Fixed salt was implemented to allow new scenarios when using hashed password storage. E.g. with fixed salt passive-cached credentials in ShadowTypes can be compared to password history in UserType as hashes for same password values are equivalent. New config.xml option keystore/fixedSalt need to be set to any arbitrary value and is used globally as single fixed salt for all hashed values in midPoint.
-