Do not try to unobfuscate clear text passwords 26/76226/1
authorSerban Popescu <serban.popescu@amdocs.com>
Wed, 23 Jan 2019 15:58:12 +0000 (10:58 -0500)
committerSerban Popescu <serban.popescu@amdocs.com>
Wed, 23 Jan 2019 18:56:48 +0000 (13:56 -0500)
The keystore password does not need to be decrypted if in clear text

Change-Id: Ia0d8591e1d5ca6890fcb77295de9573921f6652f
Issue-ID: AAI-2072
Signed-off-by: Serban Popescu <serban.popescu@amdocs.com>
src/main/java/org/onap/aai/babel/BabelApplication.java

index 868cff3..9cf1078 100644 (file)
@@ -31,6 +31,8 @@ import org.springframework.context.annotation.ImportResource;
 @ImportResource("classpath:babel-beans.xml")
 public class BabelApplication extends SpringBootServletInitializer {
 
+    private static final String OBFS_PATTERN = "OBF:";
+
     /**
      * Spring Boot Initialization.
      * 
@@ -42,7 +44,8 @@ public class BabelApplication extends SpringBootServletInitializer {
             throw new IllegalArgumentException("Env property KEY_STORE_PASSWORD not set");
         }
         HashMap<String, Object> props = new HashMap<>();
-        props.put("server.ssl.key-store-password", Password.deobfuscate(keyStorePassword));
+        String decryptedValue = keyStorePassword.startsWith(OBFS_PATTERN)? Password.deobfuscate(keyStorePassword) : keyStorePassword;
+        props.put("server.ssl.key-store-password", decryptedValue);
         new BabelApplication().configure(new SpringApplicationBuilder(BabelApplication.class).properties(props))
                 .run(args);
     }