Skip to content

Commit 2360dc2

Browse files
Update instructions on how to set up a dynamic encrypted password (#1… (neo4j#1596)
…593)
1 parent a7f28b5 commit 2360dc2

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

modules/ROOT/pages/security/ssl-framework.adoc

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -918,7 +918,7 @@ If hardcoding of clear text private key password is not feasible due to security
918918
----
919919
echo "password123" > passwordfile
920920
921-
openssl aes-256-cbc -a -salt -in passwordfile -out password.enc -pass file:certificate.crt
921+
base64 -w 0 certificate.crt | openssl aes-256-cbc -a -salt -in passwordfile -out password.enc -pass stdin
922922
----
923923
+
924924
[NOTE]
@@ -930,15 +930,15 @@ Delete the password file and set file permissions for `password.enc` to `400` (e
930930
+
931931
[source]
932932
----
933-
openssl aes-256-cbc -a -d -in password.enc -pass file:certificate.crt
933+
base64 -w 0 certificate.crt | openssl aes-256-cbc -a -d -in password.enc -pass stdin
934934
----
935935

936936
. Set the neo4j.conf `dbms.ssl.policy.<type>.private_key_password` to be able to read out encrypted password.
937937
To adjust paths to cert and encrypted password file, use full paths:
938938
+
939939
[source]
940940
----
941-
dbms.ssl.policy.bolt.private_key_password=$(openssl aes-256-cbc -a -d -in password.enc -pass file:certificate.crt)
941+
dbms.ssl.policy.bolt.private_key_password=$(base64 -w 0 certificate.crt | openssl aes-256-cbc -a -d -in password.enc -pass stdin)
942942
----
943943

944944
[NOTE]

0 commit comments

Comments
 (0)