Hi!

I am using Hibernate for the first time and I have a pretty basic question.

What are the options that are available to me in ensuring that Hibernate allows for encrypted storage of DB passwords in xml files?

I noticed that hibernate.connection.password accepts passwords in clear-text. Is there a different encrypted password parameter that could be set appropriately?

I am using a WebLogic server and an Oracle DB.

Any help would be greatly appreciated.

Thanks,
Kumaran

The simple answer would be no, from what I know.

What you really want is an obfuscated password correct, not an encrypted one?

Most likely, or perhaps you 'should' be using c3p0 for your connection pooling, this is what the hibernate docs recommend.

Perhaps you could look at extending C3P0's configuration to take an 'obfuscated' password and 'de-crypt' before it is used to create a connection?

Seems like over-kill to me really. If a user owns your box (being able to see your files), you really are already in trouble!

Justin

jasypt could be solution, i `ve never used it but looks like thing u need:

http://www.jasypt.org/encrypting-configuration.html

Hi

you can set your databse password in your java class file. Don't store it in xml or property file.


Amila
(Don't forget to rate if helps)