Commit Graph

5 Commits

Author SHA1 Message Date
Carlos Ruiz 47aee6fb02
IDEMPIERE-4602 Encrypt passwords on properties files (FHCA-1982) (#498)
* backward compatible with the previous idempiere.properties and idempiereEnv.properties version
* when the setup/console-setup is executed again the secret keys are stored obfuscated in a different file .idpass
  * Secret keys are ADEMPIERE_DB_PASSWORD, ADEMPIERE_DB_SYSTEM, ADEMPIERE_MAIL_PASSWORD
  * to add more is just adding keys to array ConfigurationData.secretVars
* the previous (unobfuscated) approach is still preserved passing -DIDEMPIERE_SECURE_PROPERTIES=false to the JVM in setup and server
* the approach just run on Linux - as is implemented using shell script, windows is out of the initial scope, but could be possible to implement .bat files to do similar
* the default approach is to use getVar.sh and setVar.sh that writes in .idpass obfuscated
  * is possible to extend and use custom secret managers implementing customSetVar.sh and customGetVar.sh
  * samples for amazon AWS secretsmanager are included
* avoid the email sent on setup sending the secret keys
* enclose all variables in myEnvironment.sh within quotes (this avoids problems with variables containing spaces)
* add coreutils as required for debian installer (as we use base64 now to obfuscate passwords)
* swing client is not affected as it saves the idempiere.properties encrypted in user home folder
2021-01-03 22:19:49 +08:00
Carlos Ruiz 970936d08c
IDEMPIERE-4441 FreeBSD find utility requires a target directory in postgresql/SyncDB.sh (#245)
Verify all scripts with shellcheck
https://www.shellcheck.net/
2020-09-08 19:37:00 +02:00
Carlos Ruiz 58df7a7405 IDEMPIERE-3451 IDEMPIERE_JAVA_OPTIONS property not work - general changes in setup process
- enable back the ability to configure the IDEMPIERE_JAVA_OPTIONS in idempiereEnv.properties and preserve it between setups (as suggested in patch from Vinicius and Eduardo)
- fix a minor issue on Console Setup - not assuming correctly the default database type
- implement update-prd.sh - so other products can be updated (not just org.adempiere.server.product)
2017-08-26 19:21:17 +02:00
Heng Sin Low 668e61686f IDEMPIERE-166 Rebranding of logo and product name 2012-06-06 22:13:34 +08:00
Heng Sin Low c2955c03ac Fixed platform specific build to include only script file that is relevant for that particular platform. Fixed folder layout and script for setup. 2010-11-04 18:05:01 +08:00