Skip to content

Commit 8f4aa67

Browse files
Update instructions on how to set up a dynamic encrypted password (#1593) (#1597)
1 parent c4b182e commit 8f4aa67

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

modules/ROOT/pages/security/ssl-framework.adoc

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -910,7 +910,7 @@ If hardcoding of clear text private key password is not feasible due to security
910910
----
911911
echo "password123" > passwordfile
912912
913-
openssl aes-256-cbc -a -salt -in passwordfile -out password.enc -pass file:certificate.crt
913+
base64 -w 0 certificate.crt | openssl aes-256-cbc -a -salt -in passwordfile -out password.enc -pass stdin
914914
----
915915
+
916916
[NOTE]
@@ -922,15 +922,15 @@ Delete the password file and set file permissions for `password.enc` to `400` (e
922922
+
923923
[source]
924924
----
925-
openssl aes-256-cbc -a -d -in password.enc -pass file:certificate.crt
925+
base64 -w 0 certificate.crt | openssl aes-256-cbc -a -d -in password.enc -pass stdin
926926
----
927927

928928
. Set the neo4j.conf `dbms.ssl.policy.<type>.private_key_password` to be able to read out encrypted password.
929929
To adjust paths to cert and encrypted password file, use full paths:
930930
+
931931
[source]
932932
----
933-
dbms.ssl.policy.bolt.private_key_password=$(openssl aes-256-cbc -a -d -in password.enc -pass file:certificate.crt)
933+
dbms.ssl.policy.bolt.private_key_password=$(base64 -w 0 certificate.crt | openssl aes-256-cbc -a -d -in password.enc -pass stdin)
934934
----
935935

936936
[NOTE]

0 commit comments

Comments
 (0)