File tree Expand file tree Collapse file tree 1 file changed +3
-3
lines changed
modules/ROOT/pages/security Expand file tree Collapse file tree 1 file changed +3
-3
lines changed Original file line number Diff line number Diff line change @@ -910,7 +910,7 @@ If hardcoding of clear text private key password is not feasible due to security
910910----
911911echo "password123" > passwordfile
912912
913- openssl aes-256-cbc -a -salt -in passwordfile -out password.enc -pass file:certificate.crt
913+ base64 -w 0 certificate.crt | openssl aes-256-cbc -a -salt -in passwordfile -out password.enc -pass stdin
914914----
915915+
916916[NOTE]
@@ -922,15 +922,15 @@ Delete the password file and set file permissions for `password.enc` to `400` (e
922922+
923923[source]
924924----
925- openssl aes-256-cbc -a -d -in password.enc -pass file:certificate.crt
925+ base64 -w 0 certificate.crt | openssl aes-256-cbc -a -d -in password.enc -pass stdin
926926----
927927
928928. Set the neo4j.conf `dbms.ssl.policy.<type>.private_key_password` to be able to read out encrypted password.
929929To adjust paths to cert and encrypted password file, use full paths:
930930+
931931[source]
932932----
933- dbms.ssl.policy.bolt.private_key_password=$(openssl aes-256-cbc -a -d -in password.enc -pass file:certificate.crt )
933+ dbms.ssl.policy.bolt.private_key_password=$(base64 -w 0 certificate.crt | openssl aes-256-cbc -a -d -in password.enc -pass stdin )
934934----
935935
936936[NOTE]
You can’t perform that action at this time.
0 commit comments