This Bugzilla instance is a read-only archive of historic NetBeans bug reports. To report a bug in NetBeans please follow the project's instructions for reporting issues.

Bug 180177

Summary: Use Encryption API vs. scrambling algorithm.
Product: db Reporter: gliesian <gliesian>
Component: CodeAssignee: Jiri Rechtacek <jrechtacek>
Status: RESOLVED FIXED    
Severity: normal    
Priority: P3    
Version: 7.0.1   
Hardware: PC   
OS: Windows Vista   
Issue Type: ENHANCEMENT Exception Reporter:

Description gliesian 2010-02-02 16:15:15 UTC 
Text in the Connect to Database Dialog Box help screen reads: 

"Storing a password represents a potential security risk. Connection passwords are stored in an xml file in the config/Databases/Connections directory in the IDE user dir. Passwords are scrambled but they are not encrypted."

I'm not sure why the passwords are scrambled when encrypting the password with a simple API like JASYPT (http://www.jasypt.org/) can be done.

Actually, I did look at the saved 'scambled' password and it looks encrypted to me.  Was the code updated and not the documentation?
Comment 1 Jiri Rechtacek 2010-02-03 03:10:53 UTC 
Also tracked as issue 178169
Comment 2 matthias42 2012-10-06 18:51:55 UTC 
Closing as in netbeans 7.2 the mentioned paragraph is not present anymore.