Skip to main content Skip to complementary content

Encrypting clear text parameters and passwords

About this task

The Talend ESB Runtime provides a utility to enable you to encrypt your desired clear text parameters and passwords. You can there after use the encrypted values in your configuration and property files.

Follow these steps to use this utility:

Procedure

  1. Set the environment variable TESB_ENV_PASSWORD in esb/container/bin/setenv.bat as follows:
    SET TESB_ENV_PASSWORD=pwd
    Where pwd can be anything you specified.
    This is the master password used by the container to encrypt all the desired parameters and passwords.
  2. Start the Talend Runtime Container.
  3. Install the tesb-encryptor-command feature in the container:
    karaf@trun()>feature:install tesb-encryptor-command
  4. Get an encrypted string for 'tadmin' for example by entering the following command in the container:
    karaf@trun()> tesb:encrypt-text tadmin
    You will get the following result:
    ENC(nfTSDFdyRe3QUDucWhzpOUDBQQsYQnKgqnTdy334bs4=)
    In case the password is not specified, it will be taken from the system environment variable TESB_ENV_PASSWORD. This helper uses PBEWITHSHA256AND256BITAES-CBC-BC hardcoded algorithm.
    Encryption algorithm can be configured by setting the environment variable TESB_ENV_ALGORITHM in esb/container/bin/setenv.bat as follows:
    SET TESB_ENV_ALGORITHM=<ALGORITHM>
    Information noteWarning: All versions of Java from 1.8.0_161 enable the unlimited strength policy files by default, see https://www.oracle.com/technetwork/java/javase/8u161-relnotes-4021379.html for more information. If JCE security extensions are missing from JRE/JDK installation, you may face the error message, "Error executing command: java.lang.SecurityException: JCE cannot authenticate the provider BC". Those extensions are typically not installed by default because of the US export restrictions placed on "strong cryptography". Download them at http://www.oracle.com/technetwork/java/javase/downloads/jce8-download-2133166.html for Java 8 or http://www.oracle.com/technetwork/java/javase/downloads/jce-7-download-432124.html for Java 7.

Did this page help you?

If you find any issues with this page or its content – a typo, a missing step, or a technical error – please let us know!