Encrypting SALTEDHASHED weblogic password in java

Question

How to encrypt SALTEDHASHED password (used by Weblogic) in java?

I need to be able to hash passwords in exactly the same way as WebLogic's authenticator does. Preferably without using WebLogic's library.

30 minutes later.. I've read some documentation and if I don't know the value of the salt I can't encrypt the password in the same way of weblogic.

So, the new question is: where weblogic stores the value of the salt? It's unique for each password or it associated one to one?

Thanks

Answer 1

Where does weblogic stores the value of the salt? It's unique for each password or it associated one to one?

The value of the salt is stored in SerializedSystemIni.dat, the domain's password salt file. The salt is unique for each encrypted password. You should use weblogic.security.Encrypt...