As a system admin, I would like to be able to encrypt sensitive data in my properties file

• Type: Story
• Status: Open
• Priority: Minor
• Resolution: Unresolved
• Affects Version/s: None
• Fix Version/s: None
• Component/s: Application Security
• Labels:
  • out-of-scope

Our properties file is used to store many types of sensitive data including: jdbc passwords, ldap login, CSRF token for WSRP, SMTP, default admin password.

Portlets can also store sensitive data in their own portlet.properties

We need a mechanism to be able to generate an encrypted value and also decrypt it to use later on.