File tree Expand file tree Collapse file tree 1 file changed +3
-3
lines changed
modules/ROOT/pages/security Expand file tree Collapse file tree 1 file changed +3
-3
lines changed Original file line number Diff line number Diff line change @@ -921,7 +921,7 @@ If hardcoding of clear text private key password is not feasible due to security
921921----
922922echo "password123" > passwordfile
923923
924- openssl aes-256-cbc -a -salt -in passwordfile -out password.enc -pass file:certificate.crt
924+ base64 -w 0 certificate.crt | openssl aes-256-cbc -a -salt -in passwordfile -out password.enc -pass stdin
925925----
926926+
927927[NOTE]
@@ -933,15 +933,15 @@ Delete the password file and set file permissions for `password.enc` to `400` (e
933933+
934934[source]
935935----
936- openssl aes-256-cbc -a -d -in password.enc -pass file:certificate.crt
936+ base64 -w 0 certificate.crt | openssl aes-256-cbc -a -d -in password.enc -pass stdin
937937----
938938
939939. Set the neo4j.conf `dbms.ssl.policy.<type>.private_key_password` to be able to read out encrypted password.
940940To adjust paths to cert and encrypted password file, use full paths:
941941+
942942[source]
943943----
944- dbms.ssl.policy.bolt.private_key_password=$(openssl aes-256-cbc -a -d -in password.enc -pass file:certificate.crt )
944+ dbms.ssl.policy.bolt.private_key_password=$(base64 -w 0 certificate.crt | openssl aes-256-cbc -a -d -in password.enc -pass stdin )
945945----
946946
947947[NOTE]
You can’t perform that action at this time.
0 commit comments