2014-02-05 22 views
0

我正在使用wso2esb4.8.0 如何使用安全保險庫選項來處理密碼隱藏。 我無法找到合適的文檔。wso2carbon服務器和wso2esb之間的連接是什麼。 如果我想在wso2esb使用安全庫我需要安裝wso2carbon服務器也或者我們直接使用 我做了以下變化我們如何在wso2esb中使用安全保險庫

/repository/conf/security/secret-config.properties 

我在這個文件的變化,下面進行,但沒有用

# 
#keystore.identity.location=/home/youtility2/Desktop/ESB/wso2/wso2esb-4.8.0/repository/resources/security/wso2carbon.jks 
#keystore.identity.type=JKS 
#keystore.identity.alias=wso2carbon 
#keystore.identity.store.password=identity.store.password 
#keystore.identity.store.secretProvider=com.sample.password.callback.handler.HardCodedSecretCallbackHandler 
#secretRepositories.file.provider=org.wso2.securevault.secret.repository.FileBaseSecretRepositoryProvider 

#secretRepositories.file.location=repository/conf/security/cipher-text.properties 

#secretRepositories=file 

#keystore.identity.key.password=identity.key.password 

#carbon.secretProvider=org.wso2.securevault.secret.handler.SecretManagerSecretCallbackHandler 

#keystore.identity.key.secretProvider=com.sample.password.callback.handler.HardCodedSecretCallbackHandler 

#keystore.identity.alias=wso2carbon 

#keystore.identity.key.password=wso2carbon 
##keystore.identity.key.secretProvider=<any implementation of org.apache.synapse.commons.security.secret.SecretCallbackHandler> 
##keystore.identity.parameters=enableHostnameVerifier=false;keyStoreCertificateFilePath=/home/esb.cer 
# 
#keystore.trust.location=repository/resources/security/client-truststore.jks 
#keystore.trust.type=JKS 
#keystore.trust.alias=wso2carbon 
#keystore.trust.store.password=wso2carbon 
##keystore.trust.store.secretProvider=<any implementation of org.apache.synapse.commons.security.secret.SecretCallbackHandler> 
# 

並重新啓動ESB,但我無法使用安全庫

vault key="my.pwd.login" 
pwd="****" 
repeat="****" 

得到錯誤從控制檯這樣

ERROR - CipherInitializer No secret repositories have been configured 
[2014-02-05 14:50:50,547] ERROR - CipherInitializer Either Configuration properties can not be loaded or No secret repositories have been configured please check PRODUCT_HOME/repository/conf/security refer links related to configure WSO2 Secure vault 
[2014-02-05 14:50:50,547] ERROR - MediationSecurityAdminService Either Configuration properties can not be loaded or No secret repositories have been configured please check PRODUCT_HOME/repository/conf/security refer links related to configure WSO2 Secure vault 
[2014-02-05 14:50:50,548] ERROR - MediationSecurityAdminService Failed to load security key store information ,Configure secret-conf.properties properly by referring to http://docs.wso2.org/display/Carbon402/WSO2+Carbon+Secure+Vault 
org.apache.axis2.AxisFault: Failed to load security key store information ,Configure secret-conf.properties properly by referring to http://docs.wso2.org/display/Carbon402/WSO2+Carbon+Secure+Vault 
    at org.wso2.carbon.mediation.security.vault.MediationSecurityAdminService.handleException(MediationSecurityAdminService.java:83) 
    at org.wso2.carbon.mediation.security.vault.MediationSecurityAdminService.doEncrypt(MediationSecurityAdminService.java:54) 

* *

由於提前, 費薩爾。

回答

0

WSO2產品(如ESB,API Manager)建立在WSO2 Carbon框架之上。所以,我們可以將ESB,APIM等稱爲基於碳的服務器。因此,請按照ESB中carbon docs page on secure vault中提供的配置步驟操作。我認爲這本指南非常具有描述性。

請注意,以符號'#'開頭的行意味着它是一條評論。因此,應該從/repository/conf/security/secret-conf.properties文件中適當地刪除'#'符號。

+0

其詢問有關class ::::::::錯誤 - SecretCallbackHandlerFactory無法找到類名稱的SecretCallbackHandler:com.sample.password.callback.handler.HardCodedSecretCallbackHandler java.lang.ClassNotFoundException:com.sample.password .callback.handler.HardCodedSecretCallbackHandler \t at java.net.URLClassLoader $ 1.run(URLClassLoader.java:217) –

+0

這是因爲您已經在secretct-conf中爲屬性'keystore.identity.key.secretProvider'設置了該類。 .properties文件。您需要從該類中創建一個jar,並將其複製到repository/components/lib。然後,然後重新啓動服務器。 –

+0

但我沒有寫任何我希望使用默認類....的類,錯誤是這樣的錯誤 - JKSKeyStoreLoader IOError從'/home/youti/Desktop/ESB/wso2/wso2esb-4.8.0/repository加載密鑰庫/resources/security/wso2carbon.jks' java.io.IOException:密鑰庫被篡改或密碼不正確 –

0

您可以使用安全保管庫保護可在/ repository/conf目錄(axis2.xml,master-datasource.xml和user-mgt.xml等)中找到的配置文件的預定義密碼。第一,我想你需要確定你想要保護的密碼。然後請在cipher-text.properties文件中針對別名配置您的實際密碼。您可以運行ciphertool.sh腳本以自動方式執行其他配置。請參閱this瞭解更多詳情。請注意,在默認實現中,密碼使用wso2carbon.jks文件加密。

相關問題