BoxLang 🚀 A New JVM Dynamic Language Learn More...
I am a utility for managing Lucee or Railo passwords for the administrator and data sources. Normally, you won't need me, but sometimes you need to edit the config files directly.
When passing a salt, use this to mimic the same SHA-256 hashing that the Lucee administrator uses for server and web context passwords. You can't duplicate this with the CFML hash() function.
Values created by this method would go in one of the following XML files:
lucee-server.xml
<lucee-configuration>
tag as the hspw
attribute. Applies to the web administrator for the entire server<lucee-configuration>
tag as the default-hspw
attribute. Set's the default password for any new web contexts<lucee-configuration>
tag as the salt
attribute. Set's the salt to use for all passwordslucee-web.xml.cfm
<lucee-configuration>
tag as the hspw
attribute. Applies to the web administrator for that context.<lucee-configuration>
tag as the salt
attribute. Set's the salt to use for all passwordsDEPRECATED. use hash with salt instead
Use this to mimic the same SHA-256 hashing that the Lucee or Railo administrator uses for server and web context passwords. You can't duplicate this with the CFML hash() function.
Values created by this method would go in one of the following XML files:
lucee-server.xml
lucee-web.xml.cfm
DEPRECATED, use hash with salt instead
Used to encrypt a string using the BlowFish algorithm with the same salt used for the Lucee or Railo administrator.
DEPRECATED, use hash with salt instead
Used to decrypt a string using the BlowFish algorithm with the same salt used for the Lucee or Railo administrator.
lucee-server.xml
<lucee-configuration>
tag as the password
attribute. Applies to the web administrator for the entire server<lucee-configuration>
tag as the default-password
attribute. Set's the default password for any new web contextslucee-web.xml.cfm
<lucee-configuration>
tag as the password
attribute. Applies to the web administrator for that context.Used to encrypt a string using the BlowFish algorithm with the same salt used for data source passwords in the Lucee or Railo administrator.
Used to decrypt a string using the BlowFish algorithm with the same salt used for data source passwords in the Lucee or Railo administrator.
Values created by this method would go in one of the following files:
lucee-server.xml
<data-source>
tag's password attribute, preceded by the string encrypted:
<data-source
username="root"
name="myDS"
dsn="jdbc:mysql: //localhost:3306/myDB"
class="org.gjt.mm.mysql.Driver"
password="encrypted:3448cf390fa78e1cbb7745607a68ff6e282d60c044ad09ed" />
lucee-web.xml.cfm
<data-source>
tag same as aboveApplication.cfc
this.datasources.myDS={
class:"org.gjt.mm.mysql.Driver",
connectionString:"jdbc:mysql: //localhost:3306/myDB",
username:"root",
password:"encrypted:3448cf390fa78e1cbb7745607a68ff6e282d60c044ad09ed"
$
box install lucee-password-util