Hibernate的配置文件中用户和密码的加密

yetao_study 2014-09-27

展开全文

hibernate.cfg.xml中，用户和密码是明文存放的，存放某些安全问题，想了一个办法加密些用户和密码的信息。

首先创建一个连接供应器，配置文件里的参数解释都是此类负责，所以，只要在此类中进行密文解密即可。

public class CustomDriverManagerConnectionProvider extends
Provider {
public CustomDriverManagerConnectionProvider() {
super();
}
/*
* (non-Javadoc)
*
* @see org.hibernate.connection.DriverManagerConnectionProvider#configure(java.util.Properties)
*/
@Override
public void configure(Properties props) throws HibernateException {
String user = props.getProperty(Environment.USER);
String password = props.getProperty(Environment.PASS);
props.setProperty(Environment.USER, SecUtil.decrypt(user));
props.setProperty(Environment.PASS, SecUtil.decrypt(password));
super.configure(props);
}
}

再写一个类，使用AES负责字符串的加密与解密

/**
* AES加密工具
*
* @author Bany
*
* @version 创建时间：2008-8-5 上午10:58:16
*
*/
public class SecUtil {
private static byte[] keybytes = { 0x31, 0x32, …… };
public static void main(String[] args) throws Exception {
String e1 = encrypt("newpassword");
System.out.println(e1);
String e2 = decrypt(e1);
System.out.println(e2);
}
/**
* 加密
* @param value
* @return
*/
public static String encrypt(String value) {
String s=null;
int mode = Cipher.ENCRYPT_MODE;
try {
Cipher cipher = initCipher(mode);
byte[] outBytes = cipher.doFinal(value.getBytes());
s = String.valueOf(Hex.encodeHex(outBytes));
} catch (Exception e) {
e.printStackTrace();
}
return s;
}
/**
* 解密
* @param value
* @return
*/
public static String decrypt(String value) {
String s = null;
int mode = Cipher.DECRYPT_MODE;
try {
Cipher cipher = initCipher(mode);
byte[] outBytes = cipher.doFinal(Hex.decodeHex(value.toCharArray()));
s = new String(outBytes);
} catch (Exception e) {
e.printStackTrace();
}
return s;
}
private static Cipher initCipher(int mode) throws NoSuchAlgorithmException, NoSuchPaddingException, InvalidKeyException{
Cipher cipher = Cipher.getInstance("AES/ECB/PKCS5Padding");
Key key = new SecretKeySpec(keybytes, "AES");
cipher.init(mode, key);
return cipher;
}
}

调用SecUtil.encrypt的方法，把用户密码加密生成密文，然后根据密文修改hibernate.cfg.xml文件

<property name="connection.username">c59cd98</property>
<property name="connection.password">68e32593ea5943a6a</property>
<property name="connection.provider_class">bany.CustomDriverManagerConnectionProvider</property>

第一二行是加密后的密文，第三行是使用自定义的连接器

PS：如果使用第三方的连接器，CustomDriverManagerConnectionProvider则需要继承于相应的连接器，如C3P0ConnectionProvider