Solved

JKS to store upstart data

Posted on 2016-08-23
2
85 Views
Last Modified: 2016-08-29
I'm wondering if its possible to use JKS as an alternative to zookeeper or databases..
im writing an app that has some important information that needs to be created upon startup, this information should be kept safe/secure/encrypted.  upon shutting down the app, i'd like the created info to be stored on disk, and next time server starts back up to load this info from .jks file... im pretty sure its possible but i've yet experience a situation where someoen stored more then just a hash/pw/private key in a .jks file...

i've read " The keystore a database which holds encrypted information and the information about how to decrypt it. If you do not specify a keystore, the default keystore to use is a file called .keystore in your home directory." from https://access.redhat.com/documentation/en-US/JBoss_Enterprise_Application_Platform/6/html/Administration_and_Configuration_Guide/Create_a_Java_Keystore_to_Store_Sensitive_Strings.html so hence my question.

thx for the feedback
0
Comment
Question by:Squadless
2 Comments
 
LVL 86

Accepted Solution

by:
CEHJ earned 500 total points
ID: 41768363
Certainly using a keystore is the wrong tool for the job. But there's a bigger problem: you can't encrypt and store data securely in the same location you're proposing to keep the keys to do that. That's the main reason why professional applications do not have client-side databases

One way of doing it securely would be to make the user enter the secret into the gui on startup and then connect over SSL to the entity that would supply the data for the rest of the gui. The secret would not be stored anywhere on the client
0
 
LVL 1

Author Closing Comment

by:Squadless
ID: 41774775
on point as usual
0

Featured Post

New My Cloud Pro Series - organize everything!

With space to keep virtually everything, the My Cloud Pro Series offers your team the network storage to edit, save and share production files from anywhere with an internet connection. Compatible with both Mac and PC, you're able to protect your content regardless of OS.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

If your app took Google’s lash recently, here are the 5 most likely reasons.
Meet the world's only “Transparent Cloud™” from Superb Internet Corporation. Now, you can experience firsthand a cloud platform that consistently outperforms Amazon Web Services (AWS), IBM’s Softlayer, and Microsoft’s Azure when it comes to CPU and …
This video demonstrates how to use each tool, their shortcuts, where and when to use them, and how to use the keyboard to improve workflow.
An overview on how to enroll an hourly employee into the employee database and how to give them access into the clock in terminal.

863 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now