[jira] [Closed] (OFBIZ-6494) New implementation of the two-way cryptographic services of OFBiz based on Apache Shiro

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

[jira] [Closed] (OFBIZ-6494) New implementation of the two-way cryptographic services of OFBiz based on Apache Shiro

Nicolas Malin (Jira)

     [ https://issues.apache.org/jira/browse/OFBIZ-6494?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jacopo Cappellato closed OFBIZ-6494.
------------------------------------
    Resolution: Fixed

Implemented in rev. 1684608

> New implementation of the two-way cryptographic services of OFBiz based on Apache Shiro
> ---------------------------------------------------------------------------------------
>
>                 Key: OFBIZ-6494
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-6494
>             Project: OFBiz
>          Issue Type: New Feature
>          Components: framework
>            Reporter: Jacopo Cappellato
>            Assignee: Jacopo Cappellato
>             Fix For: Upcoming Branch
>
>
> New implementation of the two-way cryptographic services of OFBiz based on Apache Shiro:
> * two-way encryption is now delegated to Apache Shiro, with stronger initialization vectors
> * the mechanism is backward compatible
> * new tools to update the encryption of private keys, useful to upgrade older versions of OFBiz and most of all to replace old keys with new ones (this is critical to implement stronger security practices as requested by PCI)
> * unit tests



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)