Hi All,
To prevent logging of user password in tomcat logs we would like to enable static encryption in jasper by setting the dynamic encryption to false (security-config.properties file in /jasper-home/apache-tomcat/webapps/jasperserver/WEB-INF/classes/esapi) .we don't want to change the configurations in server.xml file configs as it removes complete log information and doesn't make sense of log definition. we used the below url to generate the encrypted key for user passwords
https://domain.com/jasperserver/encrypt.html
Any Idea on how to get the encryption key for a string entered?
0 Answers:
No answers yet
Have you set encryption.on to "true" on the security-config file?