Uploaded image for project: 'Runtime'
  1. Runtime
  2. RUNTIME-1036

Improve the password security

XMLWordPrintable

    • Icon: Improvement Improvement
    • Resolution: Fixed
    • Icon: Major Major
    • 2.7, 3.9
    • None
    • None
    • None

      At this time the password is encrypted with MD5. This is not enough.

      It is suggested to add a salt, for example.

      File: 

      Repository/main/plugin-repositoryapp/src/org/ametys/plugins/repositoryapp/authentificatino/
AdminRepositoryAuthentification.java:108

      Example of resolution

      String salt = "LongStringForExtraSecurity@#$!%^&*(*)1234567890";
String unecryptedPassword = "Secret123";
MessageDigest messageDigest=null;
try {
messageDigest = MessageDigest.getInstance("SHA");
messageDigest.update((unecryptedPassword+salt).getBytes());
} catch (NoSuchAlgorithmException e) {
e.printStackTrace();
}

        1. Ametys - 01 Runtime_v3.patch
          31 kB
        2. Ametys - 07 CMS_v3.patch
          19 kB

          [RUNTIME-1036] Improve the password security

          Frederic Ravetier (Inactive) made changes -
          Status Original: Resolved [ 5 ] New: Closed [ 6 ]
          Laurence Aumeunier made changes -
          Resolution New: Fixed [ 1 ]
          Status Original: Open [ 1 ] New: Resolved [ 5 ]
          Laurence Aumeunier made changes -
          Fix Version/s New: 2.6 [ 11916 ]
          Laurence Aumeunier made changes -
          Fix Version/s New: 3.7_LTE [ 11281 ]
          Fix Version/s Original: 3.6 [ 11785 ]
          Fix Version/s Original: 3.7_LTE [ 11927 ]
          Key Original: CMS-4613 New: RUNTIME-1036
          Project Original: CMS [ 10021 ] New: Runtime [ 10020 ]
          Loïc Bouchet made changes -
          Attachment New: Ametys - 07 CMS_v3.patch [ 14665 ]
          Loïc Bouchet made changes -
          Attachment New: Ametys - 01 Runtime_v3.patch [ 14664 ]
          Laurence Aumeunier made changes -
          Assignee New: Loïc Bouchet [ lbouchet ]
          Laurence Aumeunier made changes -
          Fix Version/s New: 3.6 [ 11785 ]
          Fix Version/s New: 3.7_LTE [ 11927 ]
          Laurence Aumeunier made changes -
          Issue Type Original: Bug [ 1 ] New: Improvement [ 4 ]
          Nicolas Gavalda (Inactive) made changes -
          Link New: This issue Référence RUNTIME-795 [ RUNTIME-795 ]
          Frederic Ravetier (Inactive) created issue -

            lbouchet Loïc Bouchet
            fravetier Frederic Ravetier (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: