Activiti db password encryption

[sagitsofan]

Hey,
Don't you have an infrastructure for encryption db password inside Avctiviti engine?
In this guide: https://www.activiti.org/assets/pdf/Alfresco_Content_Services_Administration_Guide_2017.pdf"
page 360 you explain about how to encrypt the password inside the db.properties file.

But when i am looking at the source code i cant see any decryption of the password key.
File: "DbSchemaExport.java" line: 48, the code is just reading the value without any support to decryption.

[balsarori]

Hey @sagitsofan
Thats specific to ACS not the Activiti engine. In Activiti engine there is no encryption/decryption done. However, you can encrypt and decrypt values yourself and set the password to Activiti engine configuration (ProcessEngineConfiguration) directly.

[sagitsofan]

Thank you for the answer.
Can you please explain on how to enc / dec using the ProcessEngineConfiguration ?

[balsarori]

If you are using spring boot then you can use this lib to automatically encrypt/decrypt properties for you https://github.com/ulisesbocchio/jasypt-spring-boot
Then set the properties to ProcessEngineConfiguration instance.

[sagitsofan]

I am already using the "jasypt-spring-boot lib"
But i don't know where can i add the encryption/decryption logic for the db password.
Can you guide me where exactly can i add the change? in which line / class?
Thanks!

[balsarori]

what version of Activiti are you using?

In 5.22 and 6.0, you just get the password property (which should have been already decrypted) and set it to
https://www.activiti.org/javadocs/org/activiti/engine/processengineconfiguration#setJdbcPassword-java.lang.String-

[sagitsofan]

I am using Activiti version 5.18.

I want to add a piece of code in the rest api that handles the decryption (using jasypt lib) of the password from db.properties before connecting to db.
Where is exactly the place i need to add this logic?
I can't find the class that takes "jdbc.password" property from db.properties file.

[salaboy]

Guys, this sounds more like a user question than an issue. Can you guys move the conversation to the forums?

[balsarori]

@sagitsofan you can post your question here -> https://community.alfresco.com/community/bpm