Solved

JKS to store upstart data

Posted on 2016-08-23
2
65 Views
Last Modified: 2016-08-29
I'm wondering if its possible to use JKS as an alternative to zookeeper or databases..
im writing an app that has some important information that needs to be created upon startup, this information should be kept safe/secure/encrypted.  upon shutting down the app, i'd like the created info to be stored on disk, and next time server starts back up to load this info from .jks file... im pretty sure its possible but i've yet experience a situation where someoen stored more then just a hash/pw/private key in a .jks file...

i've read " The keystore a database which holds encrypted information and the information about how to decrypt it. If you do not specify a keystore, the default keystore to use is a file called .keystore in your home directory." from https://access.redhat.com/documentation/en-US/JBoss_Enterprise_Application_Platform/6/html/Administration_and_Configuration_Guide/Create_a_Java_Keystore_to_Store_Sensitive_Strings.html so hence my question.

thx for the feedback
0
Comment
Question by:Squadless
2 Comments
 
LVL 86

Accepted Solution

by:
CEHJ earned 500 total points
ID: 41768363
Certainly using a keystore is the wrong tool for the job. But there's a bigger problem: you can't encrypt and store data securely in the same location you're proposing to keep the keys to do that. That's the main reason why professional applications do not have client-side databases

One way of doing it securely would be to make the user enter the secret into the gui on startup and then connect over SSL to the entity that would supply the data for the rest of the gui. The secret would not be stored anywhere on the client
0
 
LVL 1

Author Closing Comment

by:Squadless
ID: 41774775
on point as usual
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

Suggested Solutions

Title # Comments Views Activity
Dentrix G4 1 30
What is the latest versions eclipse neon 2 117
Moving web servers into a DMZ? 3 25
Software to generate custom JPGs 12 55
The article will include the best Data Recovery Tools along with their Features, Capabilities, and their Download Links. Hope you’ll enjoy it and will choose the one as required by you.
International Data Corporation (IDC) prognosticates that before the current the year gets over disbursing on IT framework products to be sent in cloud environs will be $37.1B.
Using Adobe Premiere Pro, the viewer will learn how to set up a sequence with proper settings, importing pictures, rendering, and exporting the finished product.
Viewers will learn how to properly install Eclipse with the necessary JDK, and will take a look at an introductory Java program. Download Eclipse installation zip file: Extract files from zip file: Download and install JDK 8: Open Eclipse and …

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now