text_combined: mario torre neugensliberoit hi everybody im writing web application java tomcat jspservlets database access postgresql released gpl eventually useful framework web applications application main focus ecommerce limited would like use form cryptography protect data database problem figuring right approach store passwords keys shared web server problem unable solve store keys encryptiondecryption api im using jca jdk14x methods saving generated keys keystores fails always serialize object store database secure approach key needed decrypt data database database accessible web application assuming find good secure place store database password use different database different user argh complex doesnt really solve problem found good documentation topic another approach would share list something thought bit interest probabily wrong insecure im real beginner secure programming im learn methods technics first need secure way keep database passwords secure keep separate main server right approach could using small java bean application run normal user tomcat shared web services worst nobody user shell login default home directory place hold passwords keys web application could open ssl connection could done init method server startup get database passwords small bean could check via code signaturermiwhatever else source right one handle database connections give db connectionpassword main web application way solve problem keeping keys passwords shared directories also attacker get rootbean user account read data perfect works provider gives opportunity configure separated java application means really another server running background suggestions thank mario torre please avoid sending word powerpoint attachments see httpwwwfsforgphilosophynowordattachmentshtml thu 22 aug 2002 201515 0200 encryption approach secure web applications