Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

add mysql server password security #989

Open
wants to merge 1 commit into
base: 1.6
Choose a base branch
from
Open

Conversation

llzx373
Copy link

@llzx373 llzx373 commented Jul 18, 2016

目前不支持在xml中配置加密密码,新增该功能,替换明文密码的设置,同时也可以支持非标准字符的密码设置

@HashJang
Copy link
Contributor

密文密码是支持的

@llzx373
Copy link
Author

llzx373 commented Jul 18, 2016

源代码FrontendAuthenticator以及SecurityUtil里面没有见到相关痕迹,麻烦给下代码位置拜读,代码分支1.6

@HashJang
Copy link
Contributor

是这样,在schemaloader里面

io.mycat.config.loader.xml. XMLSchemaLoader的599行:String passwordEncryty= DecryptUtil.DBHostDecrypt(usingDecrypt, nodeHost, user, password);

XMLServerLoader的183行String passwordDecrypt = DecryptUtil.mycatDecrypt(usingDecrypt,name,password);

@llzx373
Copy link
Author

llzx373 commented Jul 18, 2016

这个是对密码的加密,但需要额外的RSA支持,我的修改是,可以支持直接用mysql的password字段的密文,使用上更直观一些。

@magicdoom
Copy link
Contributor

你这样的修改兼容之前的加密方式吗

@magicdoom
Copy link
Contributor

你这个是对mycat本身的密码进行加密的吧

@dikang123
Copy link

后端db的密码是不是不能有特殊字符呀,加密之后,mycat无法解密。报错,user passwrod need to decrype ,but decrype password is wrong !

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants