How to encrypt the CORBA passwords in $SPECROOT and Context.xml

Products

• Network Observability
• Spectrum

Issue/Introduction

By default the passwords in the $SPECROOT/.corbarc, .corbrc, .jcorbarc, and .jcorbrc files are not encrypted but in plain text.

This also includes the META-INF/context.xml

Resolution

The $SPECROOT/bin/CryptoWrapper utility can be used to encrypt the passwords and update the files for you.

Syntax:

CryptoWrapper Usage: [encrypt|decrypt|encode|decode|config-update|mysql|corba] [options]
  encrypt <value> - encrypts the value
  decrypt <value> - decrypts the value
  encrypt file <inputfile> - encrypts the file content
  decrypt file <inputfile> - decrypts the file content
  encode <value> - obfuscates the value
  decode <value> - deobfuscates the value
  config-update <SPECROOT> - updates tomcat/webtomcat server.xml and webswing-admin.properties files with encrypted passwords 
  mysql <SPECROOT> update - configure mysql
  corba <SPECROOT> update - configure corba files

For CORBA:

./CryptoWrapper corba /Spectrum update

It will prompt for the password, please enter the actual password to the certs.

Once complete the output will confirm they were updated.  Restart Processd and Tomcat.