How to encrypt ActiveMQ web console (jetty) using RSA encryption?

Question

We are using ActiveMQ v5.16.2 and it comes coupled with jetty server. I have seen many links which point to use MD5 Hash like MD5:xxxxxx in the jetty-realm.properties file.

We need to upgrade this so that the user authentication uses RSA algorithm.

Answer 1

The jetty-realm.properties has entries that are understood by the Jetty org.eclipse.jetty.util.security.Credential implementations.

Jetty ships with support for CRYPT: , MD5: , OBF: , and plain text.

Jetty supports pluggable Credential implementations via the standard java.util.ServiceLoader for any implementation of org.eclipse.jetty.util.security.CredentialProvider .

ActiveMQ does not have an implementation of CredentialProvider .

If you want RSA: support, you'll have to write your own RSA implementation of org.eclipse.jetty.util.security.CredentialProvider to accomplish that.