Maven 2 & 3

Password encryption CLI switches should prompt for password if missing

Details

  • Type: Improvement Improvement
  • Status: Open Open
  • Priority: Trivial Trivial
  • Resolution: Unresolved
  • Affects Version/s: 2.1.0
  • Fix Version/s: 3.x / Backlog
  • Component/s: Command Line
  • Labels:
    None
  • Complexity:
    Intermediate
  • Number of attachments :
    0

Description

The -emp and -ep CLI switches should prompt for a password if the user omits it. This would help to avoid having to escape shell characters in strong passwords.

Note that the docs mention that these switches prompt for a password when they do not:
http://maven.apache.org/guides/mini/guide-encryption.html

Issue Links

This issue is duplicated by:
MNG-4928 mvn --encrypt-master-password is insecure Major Closed
MNG-4841 "--encrypt-password" and "--encrypt-master-password" should be interactive Major Closed

Activity

Ascending order - Click to sort in descending order
Hide
Permalink
Brett Porter added a comment -

Arnaud has improved the documentation for this, will file this for a future enhancement.

Show
Brett Porter added a comment - Arnaud has improved the documentation for this, will file this for a future enhancement.
Hide
Permalink
Julien Nicoulaud added a comment -

It is a security issue too, passing passwords in the command line is not secure as one could browse shell history afterwards. Most commands such as ssh do not allow it.

Show
Julien Nicoulaud added a comment - It is a security issue too, passing passwords in the command line is not secure as one could browse shell history afterwards. Most commands such as ssh do not allow it.

People

Vote (2)
Watch (3)

Dates

  • Created:
    Updated:
Atlassian JIRA (v4.4.3#663-r165197) | Report a problem
Powered by a free Atlassian JIRA open source license for Codehaus. Try JIRA - bug tracking software for your team.