maven-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Marco Speranza (JIRA)" <j...@codehaus.org>
Subject [jira] (MJARSIGNER-35) verbose mode shows keystore password in clear text
Date Wed, 05 Feb 2014 12:50:57 GMT
Marco Speranza created MJARSIGNER-35:
----------------------------------------

             Summary: verbose mode shows keystore password in clear text
                 Key: MJARSIGNER-35
                 URL: https://jira.codehaus.org/browse/MJARSIGNER-35
             Project: Maven Jar Signer Plugin
          Issue Type: Bug
    Affects Versions: 1.3.1
            Reporter: Marco Speranza


If is enabled verbose output, is printed out to the command line the keystore password in
clear text.

here is an example:

[INFO] cmd.exe /X /C ""C:\Program Files\Java\jdk1.7.0_51\jre\..\bin\jarsigner.exe" -verbose
-keystore mc-keystore -storepass mypassword




--
This message was sent by Atlassian JIRA
(v6.1.6#6162)

Mime
View raw message