Split off secrets into separate property file
Description
Environment
Activity
Rod Widdowson January 3, 2020 at 5:34 PM
Tested a new install with LDAP password on Windows (which flushed two bugs).
I think this is now complete
Scott Cantor December 30, 2019 at 1:17 PM
Changes look good/sane to me.
Rod Widdowson December 28, 2019 at 4:37 PM
secrets.properties is now created on the fly for new installs.
I've moved the "conf" file into the test directory to stop it getting into the distribution by accident and undid all the stuff I added to populate it.
Tested on a non windows install. I need to do full windows testing yet.
Rod Widdowson December 23, 2019 at 3:42 PM
I'll take a run at it in the new year...
Most of the structure is in place already, Its just a matter or wiring
Scott Cantor December 23, 2019 at 1:20 PM
The testbed's no issue at all because of how it works, we can add files there that are not in the main idp-conf side, just on the test side.
I definitely think it needs to be in credentials, that's really the best place for it. That should make conf/ safe for people to check-in in the majority of cases and avoid accidents.
If we could generate it, it is purely on new installs, I don't see that changing. I figured that would apply to everything we're putting in credentials, so we should be able to remove it from the distribution as you wanted, and treat all of that as applying only on initial install.
The original organization of properties was not done with much forethought and needs to be revisited to split off the secrets into a separate file.