storing the encryption password safely

[chilli75]

Sorry, I am new to this topic. I would like to implement a scenario exactly as described under "Encrypting application configuration files". However, the key problem seems to be to safely store the encryption password with the application. The description of the scenario states the following: "Here you may think: "wait... I can encrypt values in my configuration files, ok, but... I still need a password (the encryption password) to decrypt them! Where can I store it safely?". That is correct, you still need one password, but this time it is the encryption one, under jasypt control, and thus, configurable in many other more secure ways (especially recommended would be environment variables or web PBE configuration...)." However, I have not been able to find a working example how to store the encryption password safely. Could someone pleas provide an example how to do this or some kind of tutorial on this topic? Your help would be greatly appreciated. Thank you in advance chilli75