加密的密码在 activemq 中不起作用

Question

我正在尝试加密用于建立和连接到 activemq 队列的密码。我正在按照步骤 HERE 进行操作，并且能够使用新的 activemq-security.xml 文件启动 activemq。我有一个尝试创建并连接到队列的脚本，但我不断收到用户名或密码无效的错误。

我为消费者用户加密了密码，并将加密后的密码存储在 credentials-enc.properties 文件中，例如：

consumer.password=ENC(awknernfjewnwk)

我尝试了不同的方法，我确信凭据-enc.properties 由于某种原因没有被提取，这是它的定义方式：

        <beans
          xmlns="http://www.springframework.org/schema/beans"
          xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
          xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd
          http://activemq.apache.org/schema/core http://activemq.apache.org/schema/core/activemq-core.xsd">

        <bean id="environmentVariablesConfiguration" class="org.jasypt.encryption.pbe.config.EnvironmentStringPBEConfig">
          <property name="algorithm" value="PBEWithMD5AndDES" />
          <property name="passwordEnvName" value="ACTIVEMQ_ENCRYPTION_PASSWORD" />
        </bean>

        <bean id="configurationEncryptor" class="org.jasypt.encryption.pbe.StandardPBEStringEncryptor">
          <property name="config" ref="environmentVariablesConfiguration" />
        </bean>

        <bean id="propertyConfigurer" class="org.jasypt.spring31.properties.EncryptablePropertyPlaceholderConfigurer">
          <constructor-arg ref="configurationEncryptor" />
          <property name="location" value="file:${activemq.base}/conf/credentials-enc.properties"/>
        </bean>

   <!-- Allows accessing the server log -->
    <bean id="logQuery" class="io.fabric8.insight.log.log4j.Log4jLogQuery"
          lazy-init="false" scope="singleton"
          init-method="start" destroy-method="stop">
    </bean>

    <!--
        The <broker> element is used to configure the ActiveMQ broker.
    -->
    <broker xmlns="http://activemq.apache.org/schema/core" brokerName="localhost" advisorySupport="false" dataDirectory="${activemq.data}">
        <plugins>
             <simpleAuthenticationPlugin>
                    <users>
                        <authenticationUser username="admin" password="admin"
                            groups="admins"/>
                        <authenticationUser username="consumer" password="$(consumer.password)"
                            groups="readers"/>
                        <authenticationUser username="producer" password="$(producer.password)"
                            groups="writers"/>
                    </users>
                </simpleAuthenticationPlugin>
              <authorizationPlugin>
               <map>
                <authorizationMap>
                   <authorizationEntries>
                     <authorizationEntry queue=">" read="readers" write="admins" admin="admins" />
                     <authorizationEntry queue="CLIMATE" read="readers" write="writers" admin="admins" />
                     <authorizationEntry topic=">" read="admins,readers" write="admins,writers" admin="admins" />
                   </authorizationEntries>
                   <tempDestinationAuthorizationEntry>
                     <tempDestinationAuthorizationEntry read="admins" write="admins" admin="admins"/>
                   </tempDestinationAuthorizationEntry>
                </authorizationMap>
              </map>
           </authorizationPlugin>
          </plugins>
        <destinationPolicy>
            <policyMap>
              <policyEntries>
                <policyEntry topic=">" >
                    <!-- The constantPendingMessageLimitStrategy is used to prevent
                         slow topic consumers to block producers and affect other consumers
                         by limiting the number of messages that are retained
                         For more information, see:

                         http://activemq.apache.org/slow-consumer-handling.html

                    -->
                  <pendingMessageLimitStrategy>
                    <constantPendingMessageLimitStrategy limit="1000"/>
                  </pendingMessageLimitStrategy>
                </policyEntry>
              </policyEntries>
            </policyMap>
        </destinationPolicy>

下面是我收到的错误日志的图片：

传输连接器配置

<transportConnectors>
    <!-- DOS protection, limit concurrent connections to 1000 and frame size to 100MB -->
    <transportConnector name="openwire" uri="tcp://0.0.0.0:61617?maximumConnections=1000&amp;wireFormat.maxFrameSize=104857600"/>
    <transportConnector name="amqp" uri="amqp://0.0.0.0:5672?maximumConnections=1000&amp;wireFormat.maxFrameSize=104857600"/>
    <transportConnector name="stomp" uri="stomp://0.0.0.0:61613?maximumConnections=1000&amp;wireFormat.maxFrameSize=104857600"/>
    <transportConnector name="mqtt" uri="mqtt://0.0.0.0:1883?maximumConnections=1000&amp;wireFormat.maxFrameSize=104857600"/>
    <transportConnector name="ws" uri="ws://0.0.0.0:61614?maximumConnections=1000&amp;wireFormat.maxFrameSize=104857600"/>
</transportConnectors>

任何想法可能是什么原因？

提前致谢！

Answer 1

其实问题很简单，你用for变量$(producer.password)但是错了，你需要${producer.password} !!

就这些了。

请注意，必须创建队列 "CLIMATE"，因为用户 "consumer" 不在 admins 组中，无法创建它。

加密的密码在 activemq 中不起作用

encrypted password doesn't work in activemq

encryption

activemq