Encrypting the Web Console password in ActiveMQ

1
votes

I have to get rid of the clear text password in ActiveMQ server in the jetty-realm.properties file as part of the security requirements of our project.

I followed the procedure for encrypting passwords found here: https://activemq.apache.org/encrypted-passwords.html. In Jetty-real.properties I replaced plain password with ${activemq.password}

But I could not login into the web console (http://localhost:8161/admin)

Are there additional config parameters I need to change? Any help would be greatly appreciated.

1
encryptionactivemq

1 Answers

2
votes

For ecrypt password we can use jetty utility. This can be downloaded from http://download.eclipse.org/jetty/.

use:

java -cp lib/jetty-util-$JETTY_VERSION.jar org.eclipse.jetty.util.security.Password admin admin

admin
OBF:1u2a1toa1w8v1tok1u30
MD5:21232f297a57a5a743894a0e4a801fc3
CRYPT:adpexzg3FUZAk

Add in bus\conf\jetty.xml\jetty-realm.properties

admin: MD5:21232f297a57a5a743894a0e4a801fc3, admin