Sonarqube settings encryption

Question

I am attempting to setup sonarqube instance with HTTPS listener. I understand that sonarqube supports HTTPS out of the box in version 4.2. What I am having difficulty with is encrypting clear text passwords settings in the sonar.properties.

Looking at the their wiki article about encryption support, it seems like it is possible to encrypt clear text passwords. However, I am not having any luck with encrypted value in sonar.web.https.keystorePass property. Tested with clear text and it works fine. Also tested different store types (JKS/PKCS12) or simpler passphrase, nothing seems to be working and keystore read fails when attempting to start the server with encrypted keystore password.

Was anyone able to use built in encryption mechanism in sonarcube to run it with HTTPS?

Answer 1

Unfortunately the properties sonar.web.* can't be encrypted. This limitation is fixed in version 4.4 : https://jira.codehaus.org/browse/SONAR-4781