A new page about how to create a custom password encryption feature

[una-tapa]

Our support team would like this technote to be merged into Liberty doc.

"How to set up a custom password encryption for WebSphere Liberty"
https://www.ibm.com/support/pages/node/6439321

@wrodrig @jacksonleonard-zz

[una-tapa]

@ramkumar-k-9286 I invited you to our private DM on this topic so that we can chat. When you get a chance to work on this issue, please take a look at it. Thank you.

[ramkumar-k-9286]

Hi Hiroko @una-tapa

A new page has been added for the custom password encryption feature:

Draft link: https://docs-draft-openlibertyio.mqj6zf7jocq.us-south.codeengine.appdomain.cloud/docs/latest/custom-password-encryption.html

Please review the same and add comments in the issue for any changes that need to be made.

Regards,
Ramkumar

CC @dmuelle

[ramkumar-k-9286]

Hi Hiroko @una-tapa

Corrections done on the the draft page:

NOTE: All the info added to the page is based on the support page link you provided: "How to set up a custom password encryption for WebSphere Liberty" - https://www.ibm.com/support/pages/node/6439321

Draft link: https://docs-draft-openlibertyio.mqj6zf7jocq.us-south.codeengine.appdomain.cloud/docs/latest/custom-password-encryption.html

Please review the same and add comments in the issue for any changes that need to be made.

Regards,
Ramkumar

CC @dmuelle

[ramkumar-k-9286]

Slack Chat

Michael Schneider 10:22 PM
odd, the numbered bullet points are all "1s"... is that just an artifact of the draft page?

10:23
Hopefully I'll have time later to look at this in more depth.... but so far it looks awesome

Ramkumar K 10:28 PM
Having issues with ascii template - Will fix that in a later draft. ( It’s numbered from 1 to 10)

10:29
You can leave comments on the issue or here. Will take it up on Tuesday. ( Monday we have a holiday in India).

Hiroko Takamiya 10:34 PM
Ramkumar, thanks, Have a nice long weekend. When updates are made, please tag
@mrschnei (WASSEC)
as he has all the comments from his communication with the customer.

Michael Schneider
11:39 PM
Were we planning on adding anything else about how to install a Liberty feature to this document? I think Hiroko's document did mention that (at least via a link at the bottom).

1 reply
Maybe we need to add a blurb here stating that if you don't see it in the list, you may need to install your new code as a feature (via the installFeature command)...
I'm not sure of the best wording here for this as I don't support the installFeature command.
Verify custom password encryption service
Check the messages.log file to confirm that the custom password encryption service has started. Look for entries similar to the following.
[2/11/21 16:56:50:292 EST] 00000020 com.ibm.ws.crypto.util.PasswordCipherUtil I CWWKS1850I: The custom password encryption service has started. The class name is com.ibm.websphere.crypto.sample.customencryption.CustomEncryptionImpl.

[2/11/21 16:56:52:776 EST] 0000002d com.ibm.ws.kernel.feature.internal.FeatureManager A CWWKF0012I: The server installed the following features: [appSecurity-2.0, appSecurity-3.0, beanValidation-2.0, cdi-2.0, distributedMap-1.0, ejbLite-3.2, el-3.0, jaspic-1.1, jaxrs-2.1, jaxrsClient-2.1, jdbc-4.2, jndi-1.0, jpa-2.2, jpaContainer-2.2, jsf-2.3, jsonb-1.0, jsonp-1.1, jsp-2.3, managedBeans-1.0, servlet-4.0, ssl-1.0, usr:customEncryption-1.0, webProfile-8.0, websocket-1.1].

4 days ago View thread

Michael Schneider 11:40 PM
Step 1: Develop code (this document assumes this part is done)
Step 2: Compile code (this document assumes this part is done)
Step 3: Place Jars and manifest files in correct locations (including so that securityUtility can also be used to encode the password) (this is currently in the document)
Step 4: Install the custom feature into Websphere Liberty using installFeature (this doesn't seem to be present)