[CONF] Apache Camel > Jasypt

[confluence]

Jasypt Page edited by Claus Ibsen Changes (6) ... [Jasypt|http://www.jasypt.org/] is a simplified encryption library which makes encryption and decryption easy. Camel integrates with Jasypt to allow sensitive information in [Properties] files to be encrypted. By dropping *{{camel-jasypt}}* on the classpath those encrypted values will automatic be decrypted on-the-fly by Camel. This ensures that human eyes can't easily spot sensitive information such as usernames and passwords. TODO: maven Maven users will need to add the following dependency to their {{pom.xml}} for this component: {code:xml} <dependency> <groupId>org.apache.camel</groupId> <artifactId>camel-jasypt</artifactId> <version>x.x.x</version> <!-- use the same version as your Camel core version --> </dependency> {code} TODO: tooling h3. URI Options The Camel [Jasypt] component offers the following options The options below are exclusive for the [Jasypt] component. {div:class=confluenceTableSmall} || Name || Default Value || Type || Description || | {{password}} | {{null}} | {{String}} | Specifies the master password to use for decrypting. This option is mandatory. See below for more details. | | {{algorithm}} | {{null}} | {{String}} | Name of an optional algorithm to use. | {div} h3. Protecting the master password The master password used by [Jasypt] must be provided, so its capable of decrypting the values. However having this master password out in the opening may not be an ideal solution. Therefore you could for example provided it as a JVM system property or as a OS environment setting. If you decide to do so then the {{password}} option supports prefixes which dictates this. {{sysenv:}} means to lookup the OS system environment with the given key. {{sys:}} means to lookup a JVM system property. For example you could provided the password before you start the application {code} $ export CAMEL_ENCRYPTION_PASSWORD=secret {code} Then start the application, such as running the start script. When the application is up and running you can unset the environment {code} $ unset CAMEL_ENCRYPTION_PASSWORD {code} The {{password}} option is then a matter of defining as follows: {{password=sysenv:CAMEL_ENCRYPTION_PASSWORD}}. h3. Example with Java DSL h3. Example with Spring XML ... Full Content Jasypt component Available as of Camel 2.5 Jasypt is a simplified encryption library which makes encryption and decryption easy. Camel integrates with Jasypt to allow sensitive information in Properties files to be encrypted. By dropping camel-jasypt on the classpath those encrypted values will automatic be decrypted on-the-fly by Camel. This ensures that human eyes can't easily spot sensitive information such as usernames and passwords. Maven users will need to add the following dependency to their pom.xml for this component: <dependency> <groupId>org.apache.camel</groupId> <artifactId>camel-jasypt</artifactId> <version>x.x.x</version> <!-- use the same version as your Camel core version --> </dependency> TODO: tooling URI Options The options below are exclusive for the Jasypt component. Name Default Value Type Description password null String Specifies the master password to use for decrypting. This option is mandatory. See below for more details. algorithm null String Name of an optional algorithm to use. Protecting the master password The master password used by Jasypt must be provided, so its capable of decrypting the values. However having this master password out in the opening may not be an ideal solution. Therefore you could for example provided it as a JVM system property or as a OS environment setting. If you decide to do so then the password option supports prefixes which dictates this. sysenv: means to lookup the OS system environment with the given key. sys: means to lookup a JVM system property. For example you could provided the password before you start the application $ export CAMEL_ENCRYPTION_PASSWORD=secret Then start the application, such as running the start script. When the application is up and running you can unset the environment $ unset CAMEL_ENCRYPTION_PASSWORD The password option is then a matter of defining as follows: password=sysenv:CAMEL_ENCRYPTION_PASSWORD. Example with Java DSL Example with Spring XML See Also Security Properties Change Notification Preferences View Online | View Changes | Add Comment