SSL OutboundPrivateKeyPassPhrase Property Displayed in Clear Text in WLST and JMX (Doc ID 2005349.1)

Last updated on AUGUST 09, 2017

Applies to:

Oracle WebLogic Server - Version 10.3.6 to 12.1.3.0.0
Information in this document applies to any platform.

Symptoms

When using WLST to display the  server's SSL configuration, the ServerPrivateKeyPassPhrase property will be displayed as ****** but the OutboundPrivateKeyPassPhrase property will be displayed in clear text.

java weblogic.WLST
wls:/offline> connect()
wls:/mydomain/serverConfig> edit()
wls:/mydomain/edit> cd("Servers/myserver/SSL/myserver")
wls:/mydomain/edit/Servers/myserver/SSL/myserver> ls()

Output:

ClientCertPrivateKeyPassPhrase ******
ClientCertPrivateKeyPassPhraseEncrypted ******
OutboundPrivateKeyPassPhrase cleartext
ServerPrivateKeyPassPhrase ******
ServerPrivateKeyPassPhraseEncrypted ****

 

Changes

 

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms