Encrypted persistence for HornetQ

[timowe1980]

Is it possible to use encrypted persistence of messages in HornetQ?

Our project security requires to encrypt file persistence. Is standard Java persistence used for HornetQ persistence and what are possibilities to make it more secure (encryption etc)?

[ataylor]

If you mean encrypting the messages before writing them to the journal then no!

If you want your messages encrypted then i would encrypt/decrypt them before/after sending or receiving them.

[timowe1980]

Thanks for the reply. I will then be using encrypted content for the message.

[timfox]

Can't you use an encrypted file system?

In Linux I believe this is possible, although I have never tried it.

[timowe1980]

An encrypted file system doesn't help against access from within the server.

[timfox]

Well.. if you're allowing untrusted people access to the server then they can do pretty much anything anyway - delete the journal, corrupt it, start the server, stop the server etc.

It's normally assumed you'll apply appropriate security on the server to restrict access to the appropriate people.

[timowe1980]

These are just some extra measures. Of course the access to the server is restricted.