How to pass SSL keystore password?

Question

I am writing a little web framework and I want to enable SSL encryption with a SSL key which will be supplied by the user.

This might seem overly cautious, but is it common to pass the password for the keystore file as a String passed in the parameters of a method?

This is what I had in mind:

public void enableSSL(String keystorePath, String keystorePassword) {
    // ... do things
}

score 3 · Answer 1 · edited May 23 '17 at 11:58

3

It is always safer to store the password into character array than a string.

edited May 23 '17 at 11:58

Community

answered Sep 08 '15 at 22:50

Vasu

2

Please mark this question as duplicate rather than trying to feed off someone elses's answer. – Vince Sep 08 '15 at 22:53

1 Answers1