ARTIFACTORY 7: Decrypting the DB password in system.yaml

ARTIFACTORY 7: Decrypting the DB password in system.yaml

AuthorFullName__c
Joey Naor
articleNumber
000005000
ft:sourceType
Salesforce
FirstPublishedDate
2021-02-21T07:32:52Z
lastModifiedDate
2024-03-10T07:45:55Z
VersionNumber
6

In Artifactory 7.x, the system.yaml file holds our database connection details and includes the Artifactory database address, username & password.

After the first successful connection to the DB, Artifactory will encrypt the DB password in system.yaml using the existing master.key. From this point, the plain text password will no longer be referenced in Artifactory.

In cases where the plain text DB password needs to be restored, it can be decrypted using the encrypted string and the master.key.

To do that, you’ll need to use the JFrog CLI along with the jfrog-support-plugin which offers the “jfrog decrypt” command:

$ jfrog support decrypt <secret> <key>

Published: Feb. 21, 2021
Last updated: Feb. 21, 2021

Keywords: system.yaml, database, encryption, decryption