Incorrect Passwords in generated Web configs

[TaylinAnderson]

Hello, I had to track down an issue today with a fresh install of Vault Pro Server 10.

It appears that some of the web configs did not have their passwords set up correctly due to a special character in the password.

The password in question used a '>' character which should have been converted to '&gt' in the web config itself. However upon opening the config files the character had been updated to be '&gt' which caused certain parts of the UI to fail to load.

I had to manually go into the web configs for VaultIndexService and VaultNotifyService and update them with the correct password.

Oddly, the rest of the web configs had their passwords converted correctly and just the two mentioned above had problems.

Not sure if this is a known issue, but I couldn't find anything so I am making this post.

[Tonya]

Hello,

Thank you for posting your issue along with a resolution. If you don't mind, we have a couple of questions for you in case there's a bug we need to address.

1) Your passwords in your web.config files should have been encrypted. Can you please confirm this is true?

2) What passwords did you update? What xml elements with the key were updated?

Thanks,

Tonya Nunn
SourceGear

[TaylinAnderson]

The tag I found this under was <Identity>

<identity impersonate="true" userName="myusername" password="mypassword" />

The password was not encrypted in this tag for any of the config files.

[Tonya]

Thanks for the additional details. We have this logged (#20105) and will be taking a look at it for our next release.

Tonya