Page Comparison

...

1. Write a Secret Callback class. You need to implement the SecretCallbackHandler interface or extend the AbstractSecretCallbackHandler abstract class. For example,
   

   Code Block
   Java Java
   public class HardCodedSecretCallbackHandler extends AbstractSecretCallbackHandler { protected void handleSingleSecretCallback(SingleSecretCallback singleSecretCallback) { singleSecretCallback.setSecret("password"); } }

2. We can set multiple password-based as follows:
   

   Code Block
   public class HardCodedSecretCallbackHandler extends AbstractSecretCallbackHandler { protected void handleSingleSecretCallback(SingleSecretCallback singleSecretCallback) { if("foo".equals(singleSecretCallback.getId())){ singleSecretCallback.setSecret("foo_password"); } else if("bar".equals(singleSecretCallback.getId())){ singleSecretCallback.setSecret("bar_password"); } } }

3. Create a JAR or an OSGI bundle and copy the JAR file to the <PRODUCT_HOME>/repository/component/lib/ directory or the OSGI bundle to the <PRODUCT_HOME>/repository/component/dropins/ directory. 

4. Configure the master-datasources.xml file with an alias name and your Secret Callback handler class name. For example,
   

   Code Block
   XML XML
   <datasource> <name>WSO2_CARBON_DB</name> <description>The datasource used for registry and user manager</description> <jndiConfig> <name>jdbc/WSO2CarbonDB</name> </jndiConfig> <definition type="RDBMS"> <configuration>  <url>jdbc:h2:repository/database/WSO2CARBON_DB;DB_CLOSE_ON_EXIT=FALSE;LOCK_TIMEOUT=60000</url> <username>wso2carbon</username> <password svns:secretAlias="Datasources.WSO2_CARBON_DB.Configuration.Password">password</password> <driverClassName>org.h2.Driver</driverClassName> <maxActive>50</maxActive> <maxWait>60000</maxWait> <testOnBorrow>true</testOnBorrow> <validationQuery>SELECT 1</validationQuery> <validationInterval>30000</validationInterval> </configuration> </definition> </datasource>

    

5. Go to <PRODUCT_HOME>/bin and execute ./ciphertool.sh -Dconfigure

6. Also, replace the secret callback handler class name in Replace the values of two the properties keystore.identity.store.secretProvider and keystore.identity.key.secretProvider in <PRODUCT_HOME>/repository/conf/security/secret-conf.properties file with your Secret Callback handler class name.

7. Restart the server.

...