Skip to content

Commit

Permalink
Passwords can be de-referenced from the environment
Browse files Browse the repository at this point in the history
And eventually picked off an HSM. So this implementation is
safe enough for production.
  • Loading branch information
ar committed Jul 26, 2022
1 parent d9904a4 commit 8ad3ff6
Showing 1 changed file with 0 additions and 6 deletions.
6 changes: 0 additions & 6 deletions doc/src/asciidoc/ch05/ssl_channels.adoc
Original file line number Diff line number Diff line change
Expand Up @@ -65,12 +65,6 @@ child element.

[NOTE]
====
While `GenericSSLSocketFactory` can be used to demonstrate SSL support
in jPOS, production-grade installations should consider it just
a reference/sample implementation. It uses `${user.home}/.keystore`
with a default password, so *at the very least* you
want to override its +getPassword()+ method.
For backward compatibility, we also have a `SunJSSESocketFactory` implementation
that uses `com.sun.net.ssl.internal.ssl.Provider`.
====
Expand Down

0 comments on commit 8ad3ff6

Please sign in to comment.