I have read a bit on the sun forums about this and there was no easy method that I could see, the only solution involved splitting the password into different elements and re-assembling them in the program, so the elements were still visible as strings, but not as the complete password. You would have to search the sun forums for the discussion, I wasnt really happy with this method so did not bother.
The answer posted by most people was to secure the server! If you are running a web application, Tomcat restricts access to the class files, i.e. they are only accessible via jsp, you cannot enter the URL and download them, so, if you have the password in a bean/class it should be as secure as your server!
|