jasypt password visible when passed as argument or System property about jasypt-spring-boot

[ulisesbocchio]

yeah, sorry, I wish Spring Boot property sources would be smart enough to automatically replace _ with . for ENV variables since . is not permitted in ENV variables.
You can solve this quickly by creating application.properties or application.yml and adding:

jasypt.encryptor.password=${JASYPT_ENCRYPTOR_PASSWORD:}

or in YAML

jasypt:
    encryptor:
        password: {${JASYPT_ENCRYPTOR_PASSWORD:}

basically what this does is to define the jasypt.encryptor.password property that points to a different property JASYPT_ENCRYPTOR_PASSWORD that you can inject any way you want (environment or system property). This technique can also be used to translate property name/values for any other library you need.

[japako]

HI,

That will work then. Looks like a good solution.

On 18 December 2015 at 02:03, Ulises Bocchio [email protected]
wrote:

yeah, sorry, I wish Spring Boot property sources would be smart enough to
automatically replace _ with . for ENV variables since . is not permitted
in ENV variables.
You can solve this quickly by creating application.properties or
application.yml and adding:

jasypt.encryptor.password=${JASYPT_ENCRYPTOR_PASSWORD:}

or in YAML

jasypt:
encryptor:
password: {${JASYPT_ENCRYPTOR_PASSWORD:}

basically what this does is to define the jasypt.encryptor.password
property that points to a different property JASYPT_ENCRYPTOR_PASSWORD
that you can inject any way you want (environment or system property). This
technique can also be used to translate property name/values for any other
library you need.

—
Reply to this email directly or view it on GitHub
#17 (comment)
.

Regards,
Bartosz Jablonski