Applicaton COnfig file encryption

[demaximus]

Hi All,
I am using JASYPT's EncryptableProperties for reading and decryoting properties files in my application. To do this we have to use a password for encrypting the values using th CLI and then use the same password to create an encryptor and pass it to the EncryptableProperties for decrypting the values while they are got form the properties file.

My questions is -- We have a need where we want to deploy our application in to a hosting environement and the properties used by our application might change due to that . The hosting providers have their own properties. In order for them to be able to encrypt the properties we would need to share the password used by the CLI to encrypt the values or they will have to give use the properrtieis to be encrypted and we would have to do the encryption. either way we are compromising information.  
Is there a solution by which we can provide them with some sort of a tool that they can call to encryot their data and not know the password or some other alternative that would allow us to provide a service or something like that which would encrypt the values for them.

[bubenik]

+------------------------+
  Jasypt Users List      
  http://www.jasypt.org 
+------------------------+
Hallo,

That looks like a scenario for asymetric encryption - provide a public key for encryption and use a private key for decryption. But I don't know whether jasypt comes with support for that - I'm not a cryptology expert.

Regards bubenik
 

-----Ursprüngliche Nachricht-----
Von: demaximus [mailto:pushp.abrol@...]
Gesendet: Mittwoch, 1. Juli 2009 17:22
An: jasypt-users@...
Betreff: [jasypt-users] Applicaton COnfig file encryption

+------------------------+
  Jasypt Users List      
  http://www.jasypt.org 
+------------------------+

Hi All,
I am using JASYPT's EncryptableProperties for reading and decryoting
properties files in my application. To do this we have to use a password for
encrypting the values using th CLI and then use the same password to create
an encryptor and pass it to the EncryptableProperties for decrypting the
values while they are got form the properties file.

My questions is -- We have a need where we want to deploy our application in
to a hosting environement and the properties used by our application might
change due to that . The hosting providers have their own properties. In
order for them to be able to encrypt the properties we would need to share
the password used by the CLI to encrypt the values or they will have to give
use the properrtieis to be encrypted and we would have to do the encryption.
either way we are compromising information.  
Is there a solution by which we can provide them with some sort of a tool
that they can call to encryot their data and not know the password or some
other alternative that would allow us to provide a service or something like
that which would encrypt the values for them.
--
View this message in context: http://www.nabble.com/Applicaton-COnfig-file-encryption-tp24291721s21332p24291721.html
Sent from the Jasypt - Users mailing list archive at Nabble.com.


------------------------------------------------------------------------------
_______________________________________________
jasypt-users mailing list
jasypt-users@...
https://lists.sourceforge.net/lists/listinfo/jasypt-users

------------------------------------------------------------------------------
Enter the BlackBerry Developer Challenge  
This is your chance to win up to $100,000 in prizes! For a limited time,
vendors submitting new applications to BlackBerry App World(TM) will have
the opportunity to enter the BlackBerry Developer Challenge. See full prize
details at: http://p.sf.net/sfu/blackberry
_______________________________________________
jasypt-users mailing list
jasypt-users@...
https://lists.sourceforge.net/lists/listinfo/jasypt-users