Skip to content

Commit 4dac8b6

Browse files
Update instructions on how to set up a dynamic encrypted password (neo4j#1593) (neo4j#1598)
1 parent ecff3de commit 4dac8b6

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

modules/ROOT/pages/security/ssl-framework.adoc

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -921,7 +921,7 @@ If hardcoding of clear text private key password is not feasible due to security
921921
----
922922
echo "password123" > passwordfile
923923
924-
openssl aes-256-cbc -a -salt -in passwordfile -out password.enc -pass file:certificate.crt
924+
base64 -w 0 certificate.crt | openssl aes-256-cbc -a -salt -in passwordfile -out password.enc -pass stdin
925925
----
926926
+
927927
[NOTE]
@@ -933,15 +933,15 @@ Delete the password file and set file permissions for `password.enc` to `400` (e
933933
+
934934
[source]
935935
----
936-
openssl aes-256-cbc -a -d -in password.enc -pass file:certificate.crt
936+
base64 -w 0 certificate.crt | openssl aes-256-cbc -a -d -in password.enc -pass stdin
937937
----
938938

939939
. Set the neo4j.conf `dbms.ssl.policy.<type>.private_key_password` to be able to read out encrypted password.
940940
To adjust paths to cert and encrypted password file, use full paths:
941941
+
942942
[source]
943943
----
944-
dbms.ssl.policy.bolt.private_key_password=$(openssl aes-256-cbc -a -d -in password.enc -pass file:certificate.crt)
944+
dbms.ssl.policy.bolt.private_key_password=$(base64 -w 0 certificate.crt | openssl aes-256-cbc -a -d -in password.enc -pass stdin)
945945
----
946946

947947
[NOTE]

0 commit comments

Comments
 (0)