Skip to content

Commit

Permalink
Update instructions on how to set up a dynamic encrypted password (ne…
Browse files Browse the repository at this point in the history
  • Loading branch information
NataliaIvakina authored May 3, 2024
1 parent 0d9ba4e commit 4ade203
Showing 1 changed file with 3 additions and 3 deletions.
6 changes: 3 additions & 3 deletions modules/ROOT/pages/security/ssl-framework.adoc
Original file line number Diff line number Diff line change
Expand Up @@ -997,7 +997,7 @@ If hardcoding of clear text private key password is not feasible due to security
----
echo "password123" > passwordfile
openssl aes-256-cbc -a -salt -in passwordfile -out password.enc -pass file:certificate.crt
base64 -w 0 certificate.crt | openssl aes-256-cbc -a -salt -in passwordfile -out password.enc -pass stdin
----
+
[NOTE]
Expand All @@ -1009,15 +1009,15 @@ Delete the password file and set file permissions for `password.enc` to `400` (e
+
[source]
----
openssl aes-256-cbc -a -d -in password.enc -pass file:certificate.crt
base64 -w 0 certificate.crt | openssl aes-256-cbc -a -d -in password.enc -pass stdin
----

. Set the neo4j.conf `dbms.ssl.policy.<type>.private_key_password` to be able to read out encrypted password.
To adjust paths to cert and encrypted password file, use full paths:
+
[source]
----
dbms.ssl.policy.bolt.private_key_password=$(openssl aes-256-cbc -a -d -in password.enc -pass file:certificate.crt)
dbms.ssl.policy.bolt.private_key_password=$(base64 -w 0 certificate.crt | openssl aes-256-cbc -a -d -in password.enc -pass stdin)
----

[NOTE]
Expand Down

0 comments on commit 4ade203

Please sign in to comment.