diff options
| author | Duarte Meneses <duarte.meneses@sonarsource.com> | 2020-12-15 10:45:24 -0600 |
|---|---|---|
| committer | sonartech <sonartech@sonarsource.com> | 2021-01-04 20:14:29 +0000 |
| commit | dc980ec9d7aeeae63068fa127198318ba50a2468 (patch) | |
| tree | ec844364a7be3ea7b6e4f1a56b2c0602351ba97d /server/sonar-docs | |
| parent | b540193bb7f1b813771c22d81fe5ebdb6c34c2c9 (diff) | |
| download | sonarqube-dc980ec9d7aeeae63068fa127198318ba50a2468.tar.gz sonarqube-dc980ec9d7aeeae63068fa127198318ba50a2468.zip | |
SONAR-14268 Settings encryption uses 256 bit keys
Diffstat (limited to 'server/sonar-docs')
| -rw-r--r-- | server/sonar-docs/src/pages/instance-administration/security.md | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/server/sonar-docs/src/pages/instance-administration/security.md b/server/sonar-docs/src/pages/instance-administration/security.md index 429797767d0..b27590cceb5 100644 --- a/server/sonar-docs/src/pages/instance-administration/security.md +++ b/server/sonar-docs/src/pages/instance-administration/security.md @@ -181,7 +181,7 @@ Note that there is no relation between a project and a permission template, mean ## Settings Encryption Encryption is mostly used to remove clear passwords from settings (database or SCM credentials for instance). The implemented solution is based on a symmetric key algorithm. The key point is that the secret key is stored in a secured file on disk. This file must be owned by and readable only by the system account that runs the SonarQube server. -The algorithm is AES 128 bits. Note that 256 bits cipher is not used because it's not supported by default on all Java Virtual Machines ([see this article](https://confluence.terena.org/display/~visser/No+256+bit+ciphers+for+Java+apps)). +The encryption algorithm used is AES with 256 bit keys. 1. **Generate the secret key** A unique secret key must be shared between all parts of the SonarQube infrastructure. To generate it, go to **[Administration > Configuration > Encryption](/#sonarqube-admin#/admin/settings/encryption)** and click on Generate Secret Key. |