How to encrypt/decrypt the password

imlalit · August 7th, 2009, 03:06 AM

Hi

Our DB connection information is stroe in server.xml file. so how to call decryption code.We are not using any autogenerated key.

I was thinking of building a simple class where user could type in their desired password, get an encrypted version of the password, then paste the encrypted version into the xml configuration file. Then the
application would read encrypted password, decrypt the password back into a string, and move on.

please suggest/ideas for helping for the same.

thanks
lalit

iamrakesh22 · October 5th, 2009, 01:41 AM

one way of doing it is have an extra column to store digested password, when user's signup, digest it and store it that column. As per your question i think you are using realms for authentication. Extend the realm class you are using and write your code to check the digest password column [digest the password entered by the user and use it in query] instead of password column.

Hope it gives a start!