Skip to main content

Bug in Glassfish keystore utility

Please note these java.net forums are being decommissioned and use the new and improved forums at https://community.oracle.com/community/java.
No replies
edsd62
Offline
Joined: 2014-06-10

I'm trying to secure an installation of Glassfish 3.12 and I noticed that when I change the Glassfish master keystore password the first time, the utility prompts me for the current password (default password changeit). But if I try to change the password after that first time the utility no longer prompts me for the current password. After the keystore password has been changed once anyone with access to the server can change the password since they don't have to know the current password. Has anyone else run into this problem? Does anyone know it this issue has been fixed in later versions?