SSL parameters are on the command line including password!

[billsnow]

Status: Open Project: Flowvisor Component/s: None Affects Version/s: None Fix Version/s: None

Type: Bug Priority: Major Reporter: Rob Sherwood Assignee: Rob Sherwood Resolution: Unresolved Votes: 0 Labels: None Remaining Estimate: Not Specified Time Spent: Not Specified Original Estimate: Not Specified

Description
ps auxww |grep -i flowvisor : [snip] -Djavax.net.ssl.keyStore=/usr/local/etc/flowvisor/mySSLKeyStore -Djavax.net.ssl.keyStorePassword=CHANGEME_PASSWD it's not really that bad because the file is read-only by the flowvisor user and the password is only for the key in the ssl file which isn't used by anything, but still... should be coded up as an internally listed property with maybe the password in the config file.

Original issue: https://openflow.stanford.edu/bugs/browse/FLOWVISOR-115