Scrub credentials from openssl plugin

Signed-off-by: Adam Stokes <adam.stokes@ubuntu.com>

1 files changed, 11 insertions, 0 deletions

diff --git a/sos/plugins/openssl.py b/sos/plugins/openssl.py
index 2ad44a2d..c73181be 100644
--- a/sos/plugins/openssl.py
+++ b/sos/plugins/openssl.py
@@ -23,6 +23,17 @@ class OpenSSL(Plugin):
     plugin_name = "openssl"
     packages = ('openssl',)
 
+    def postproc(self):
+        protect_keys = ["input_password",
+                        "output_password",
+                        "challengePassword"]
+
+        regexp = r"(?m)^(\s*#?\s*(%s).*=)(.*)" % "|".join(protect_keys)
+
+        self.do_file_sub('/etc/ssl/openssl.cnf',
+                         regexp,
+                         r"\1 ******")
+
 class RedHatOpenSSL(OpenSSL, RedHatPlugin):
     """openssl related information for Red Hat distributions
     """