...
- Now, whenever you write
&resources;in the text below, it will be replaced by the content of the file "resources.txt". The file path is relative to the conf directory. - Write your own datasource implementation which wraps your datasource and obscure your brains out (XOR and ROT13 are great candidates for this since their strength matches the protection you'll actually get). See the docs on how to do this.
- Write your own
javax.naming.spi.ObjectFactoryimplementation that creates and configures your datasource. - (Tomcat 7) Write your own
org.apache.tomcat.util.IntrospectionUtils.PropertySourceimplementation to 'decrypt' passwords that are 'encrypted' in catalina.properties and referenced via ${...} in server.xml. You will need to set the system propertyorg.apache.tomcat.util.digester.PROPERTY_SOURCEto point to your PropertySource implementation.- An example of a project that provides such custom PropertySource: PicketLink Vault extension for Apache Tomcat.
- An example of a project that provides such custom PropertySource: PicketLink Vault extension for Apache Tomcat.
A cultural reference:
- It is turtles all the way down (Wikipedia)
...