Take the 2-minute tour ×

In this tutorial , where are the following values coming from?

  • password (OBF:1vny1zlo1x8e1vnw1vn61x8g1zlu1vn4)
  • keyPassword (OBF:1u2u1wml1z7s1z7a1wnl1u2g)
  • trustPassword (OBF:1vny1zlo1x8e1vnw1vn61x8g1zlu1vn4)
share|improve this question

3 Answers 3

up vote 5 down vote accepted

The passwords prefixed with OBF: come from Jetty's own system for obfuscating passwords. There is more documentation here: http://wiki.eclipse.org/Jetty/Howto/Secure_Passwords

Note that this is obfuscated and not encrypted. It just prevents a human from reading it quickly:

In some cases such as keystore passwords and digest authentication, the system must retrieve the original password, which requires the obfuscation method. The drawback of the obfuscation algorithm is that it protects passwords from casual viewing only.

You could put them in clear too, it wouldn't change much.

In this case, the password, keyPassword and trustPassword are respectively the passwords for the key store, the key password (that should be optional if it's the same as the key store password) and the trust store password. These are the ones you set when you create these keystores.

share|improve this answer
Why was this so difficult for the original documenters to put down in the aforementioned link in the original question? Seriously, this caused me untold amounts of hassle--and still does! I upvoted this response because someone has pointed out the source of the "OBF" business used in the configuration, but I still don't know where these passwords come from. Is this something I supplied? I have no idea. –  Sonny Jul 8 '12 at 17:52
It is possible to search the Jetty source codes to find out the passwords before the obfuscation. It took me some time the other day, so just in case someone needs it... In this case the passwords in the open-text are: "storepwd" -> "OBF:1vny1zlo1x8e1vnw1vn61x8g1zlu1vn4" and "keypwd" -> "OBF:1u2u1wml1z7s1z7a1wnl1u2g". –  Jiri Patera Aug 10 '12 at 14:25

This was driving me kind of crazy too. Here's a script that you can use to generate the various passwords. The script works with this particular version of jetty: jetty-hightide-8.1.10.v20130312, but can be modified through the JETTY_VER variable.



# url: http://wiki.eclipse.org/Jetty/Howto/Secure_Passwords
# set -x

if [ $# -ne 2 ]; then
  echo -e "\nUSAGE: `basename $0`: <user> <password>\n";
  exit 0;

java -cp $JETTY_HOME/lib/jetty-util-${JETTY_VER}.jar org.eclipse.jetty.util.security.Password $1 $2

example run

% ./jetty-passwd.sh me blah
share|improve this answer

Someone (ack_ of the Norn Iron Hacker Scene) made a Python script to reverse the Jetty password obfuscation. Useful when you need to export the keystore to other programs.

# Jetty Deobfuscation Tool

import sys

def d_jetty(ct):

    pt = ""
    b = bytearray(len(ct)/4)

    for x in b:

        t = ct[i:i+4]
        i0 = int(t,36)
        i1 = i0 / 256
        i2 = i0 % 256
        x = (i1+i2-254)/2

    return pt

if (len(sys.argv) == 2):
    raw_ct = sys.argv[1]
    print "Jetty Deobfuscation Tool v1.0"
    print "./jdt <string>"

print d_jetty(raw_ct)
share|improve this answer

Your Answer


