How do I store a Java KeyStore password?

Posted by Anthony D on Stack Overflow See other posts from Stack Overflow or by Anthony D
Published on 2010-06-14T15:43:03Z Indexed on 2010/06/14 16:02 UTC
Read the original article Hit count: 418

Filed under:

j2ee

|

jee6

|

jee5

|

keystore

|

privatekey

In my web application I access a private key that is stored in a Java KeyStore. I would like to know what is the best/recommended way to store the password for the KeyStore and private key.

I've considered using a properties file but that does not seem very secure for use in a production environment (storing password in a plain text file). Also, hard-coding the password in my code is not an option I'm willing to entertain.

Thanks.

© Stack Overflow or respective owner

Related posts about j2ee

Java EE 6????????????????! ??????????????????????J2EE??????????J2EE??????JavaOne Tokyo 2012?????

as seen on Oracle Blogs - Search for 'Oracle Blogs'
Java EE???????Java EE???????????????·????????????Core J2EE Patterns(J2EE????)?????????????????????10???????????????? “????????????”?????????????Java EE??????6?????????WebLogic Server?????????????·???????????????J2EE???????????????????????????????2012?4???????JavaOne Tokyo 2012??????????Java EE 6?… >>> More
Project based on J2EE

as seen on Stack Overflow - Search for 'Stack Overflow'
Would you start J2EE project nowadays if you have other alternatives? UPDATE: I think little clarification is needed: Is it worth investing in J2EE if practically everything it claims to offer can be achieved by using other technologies? To be honest, J2EE scares me by its monstrosity and I foresee… >>> More
Noftification between J2EE components.

as seen on Stack Overflow - Search for 'Stack Overflow'
Hi There! I have a design problem . My application has multiple J2EE components ,In simple terms one acts as a service provider(Non UI) and others are consumers(UI webapp) . The consumer gets the configuration data from the service provider(this basically reads the data from DB) during the start… >>> More
Notification between J2EE components.

as seen on Stack Overflow - Search for 'Stack Overflow'
Hi There! I have a design problem . My application has multiple J2EE components ,In simple terms one acts as a service provider(Non UI) and others are consumers(UI webapp) . The consumer gets the configuration data from the service provider(this basically reads the data from DB) during the start… >>> More
Jdeveloper vs java/j2ee/js+extjs ?

as seen on Stack Overflow - Search for 'Stack Overflow'
Hi All, i am new to the web development environment, having came from a unix/c environment. i've been recently asked to create a web app, which i thought would require postgresql, java/j2ee, and javascript for the client interface. as i had wanted a nicer gui, i've been reading up on extjs, which… >>> More

Related posts about jee6

JEE6 vs. Spring 3 stack

as seen on Stack Overflow - Search for 'Stack Overflow'
I'm starting a new project now. I have to choose technologies. I need something light, so no EJB or Seam. On the other hand I need JPA(Hibernate or alternative) and JSF with IceFaces. Do you think that such stack on Spring 3 deployed on Tomcat is a good choice? Or a JEE6 web application could be better… >>> More
JEE6 Advice - how viable is it?

as seen on Stack Overflow - Search for 'Stack Overflow'
Hello! A friend and I are trying to start our own UK based business. We both know Java and thought we'd try to implement it using JEE6 and JSP. Can anyone offer some advice on how viable it would be and provide us with resources to consult? >>> More
EJB3 + JEE6: What is a persistent Timer?

as seen on Stack Overflow - Search for 'Stack Overflow'
I'm just about to use the new EJB3 TimerService (as part of Java EE 6), and as usual, I'm impressed by the brevity of JavaDoc :) Do you know what is the effect of the persistent property of the TimerConfig object? JavaDoc TimerConfig says: The persistent property determines whether the corresponding… >>> More
JEE6 Global JNDI Name and Maven Deployment

as seen on Stack Overflow - Search for 'Stack Overflow'
I'm having some problems with the global JNDI names of my EJB resources which is (or at least will) cause my JNDI look ups to fail. The project is being developed on Netbeans and is a standard Maven Web Application. When my application is deployed to GF3.0 the application name is set to something… >>> More
JEE6 Tutorial samples not found

as seen on Stack Overflow - Search for 'Stack Overflow'
in this page of tutorial : http://java.sun.com/javaee/6/docs/tutorial/doc/bnadu.html discuss about hello2 application on samples folder. i download samples from this link and installed correctly: https://glassfish-samples.dev.java.net/servlets/ProjectDocumentList?folderID=5214&expandFolder=5214&folderID=0 but… >>> More