纹之心
纹之心
前端用户密码等敏感信息会进行RSA加密传输到后台处理。 后台解密会用到如bcprov-jdk15on包,但此包是带签名的,加密时,这类jar包能不能不重新打包,重新打包签名会失效报错。 直接替换掉加密后的bcprov-jdk15on包,启动会报错 `Exception in thread "main" java.lang.IllegalStateException: Failed to get nested archive for entry BOOT-INF/lib/bcprov-jdk15on-1.60.jar at org.springframework.boot.loader.archive.JarFileArchive.getNestedArchive(JarFileArchive.java:108) at org.springframework.boot.loader.archive.JarFileArchive.getNestedArchives(JarFileArchive.java:87) at org.springframework.boot.loader.ExecutableArchiveLauncher.getClassPathArchives(ExecutableArchiveLauncher.java:69) ` 能不能给个提示如何处理?
明文做成密文,这样即使在插件中存在密文,也相对安全,并且也会减少实施人员泄露密码的可能性。
redmine 4.1.1 4.0.4 If there is a problem with the path, click "difference" to go in, directly click the "pencil" button, and add a task, then there will be problems...