[
http://jira.codehaus.org/browse/MNG-4611?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=217010#action_217010
]
Brendan Lawlor commented on MNG-4611:
-------------------------------------
I've raised MNG-4626 as a more general but related point. I think the notion of
encrypting 'properly' as suggested above is a problem in the first place. The
encryption mechanism used by Dale and provided for by Yoav in Artifactory is
clearly the sensible approach to password protection in maven, and maven/nexus
should really be doing the same thing.
> 3.0-alpha7 password decryption log verbosity
> --------------------------------------------
>
> Key: MNG-4611
> URL: http://jira.codehaus.org/browse/MNG-4611
> Project: Maven 2 & 3
> Issue Type: Bug
> Reporter: Dale Wyttenbach
> Assignee: Benjamin Bentmann
>
> The log verbosity of password decryption in 3.0-alpha7 that makes the mvn -X
> option effectively unusable. The password I've got in my settings.xml file
> looks like this:
> <password>{DESede}y+qq...==</password>
> This is an Artifactory setup password and it does work, however mvn -X logs
> exceptions about it so frequently that it makes -X almost impossible to use.
> Is there some way I can suppress this behavior through configuration? The
> exception that it logs over and over again is:
> [DEBUG] Failed to decrypt password for server central:
> org.sonatype.plexus.components.cipher.PlexusCipherException:
> java.lang.ArrayIndexOutOfBoundsException
> org.sonatype.plexus.components.sec.dispatcher.SecDispatcherException:
> org.sonatype.plexus.components.cipher.PlexusCipherException:
> java.lang.ArrayIndexOutOfBoundsException
> ...
> Caused by: java.lang.ArrayIndexOutOfBoundsException
> at java.lang.System.arraycopy(Native Method)
> at
> org.sonatype.plexus.components.cipher.PBECipher.decrypt64(PBECipher.java:175)
> ... 47 more
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
