flowvisor
flowvisor copied to clipboard
SSL parameters are on the command line including password!
Status: Open Project: Flowvisor Component/s: None Affects Version/s: None Fix Version/s: None
Type: Bug Priority: Major Reporter: Rob Sherwood Assignee: Rob Sherwood Resolution: Unresolved Votes: 0 Labels: None Remaining Estimate: Not Specified Time Spent: Not Specified Original Estimate: Not Specified
Description
ps auxww |grep -i flowvisor
:
[snip]
-Djavax.net.ssl.keyStore=/usr/local/etc/flowvisor/mySSLKeyStore
-Djavax.net.ssl.keyStorePassword=CHANGEME_PASSWD
it's not really that bad because the file is read-only by the flowvisor user and the password is only for the key in the ssl file which isn't used by anything, but still... should be coded up as an internally listed property with maybe the password in the config file.
Original issue: https://openflow.stanford.edu/bugs/browse/FLOWVISOR-115