Java password encryption

[oupellamspc]

Hi,

I've got Amq installed with a Fuse Camel route listening to a queue and a standalone Java Client that uses JMS to inject messages on the queue. All well and good!

I've enabled encryption of Amq with Jasypt and the can see the password for the admin id is encrypted in my users.properties file (Jaas configuration).

Everything works and I can log in and out of the Admin console etc.

In my Java app, I can only get it to connect using the Plain Text password. If I generate an encrypted password and use it with the JMS connector, I get a:

javax.jms.JMSSecurityException: User name [admin] or password is invalid.

I'm setting up the ActiveMQ producer with:

public ActiveMQ(String uri, String userid, String password, String queue) throws JMSException {
  connectionFactory = new ActiveMQConnectionFactory(uri);
  connection = connectionFactory.createConnection(userid, password);
  session = connection.createSession(false, Session.AUTO_ACKNOWLEDGE);
  Destination destination = session.createQueue(queue);
  producer = session.createProducer(destination);
  connection.start();
}

What are the steps I need to follow to encrypt the password in the Java file (well, it's props file)?

Is it possible?

I've generated the jasypt encrypted password and tried passing as:

(ENC)....(ENC)

ENC(.....)

(ENC)....

None of these patterns work with the password value. I'm beginning to worry as to whether this is possible; which would be most odd if not.

Thanks and kind regards

Carl

[oupellamspc]

Well, I've googled an awful lot today and found nothing to help. Is there anybody ought there that can point me in the right direction??? Thanks.

[oupellamspc]

I've still yet to find a way to encrypt the password in the Java file or a property file that it reads. I've posted to the activeMQ forum too.

Is this possible?

Is there anyone willing to make comment?

[maxandersen]

first hit on google: http://activemq.apache.org/encrypted-passwords.html

[oupellamspc]

Thanks Max,

I'll go back through the article. Nothing in there helped, so I guess it must be user issue. For a start, the options aren't the same from the Fuse console, i.e.

$ bin/activemq encrypt --password activemq --input mypassword

isn't a command with those paramaters, there is an encrypt command, but it ONLY takes the password. There is no secret seed key. So scratched my head as to how to map the context over.