-
Bug
-
Resolution: Done
-
Critical
-
None
-
None
Vault commands with wrongly filled path to vaults should fail.
Converted credential store storage file is empty but it is very confusing to see successful message and created credential storage file.
The user might mistakenly believe that the VAULT was empty.
How to reproduce
Download server.store attachment to same location as wildfly-elytron-tool.jar file and then run these commands
VAULT.dat is located in path which is given by --enc-dir option - we set it to wrong value.
java -jar wildfly-elytron-tool.jar vault --enc-dir doesntMatter --keystore server.store --keystore-password secretsecret --location converted001.store --alias jboss Vault (enc-dir="doesntMatter";keystore="server.store") converted to credential store "converted001.store"
It is created empty converted001.store
We can omit --location option. In this case is created empty converted file with default name "converted-vault.cr-store" in path given by --enc-dir option.
java -jar wildfly-elytron-tool.jar vault --enc-dir doesntMatter --keystore server.store --keystore-password secretsecret --alias jboss Vault (enc-dir="doesntMatter";keystore="server.store") converted to credential store "doesntMatter/converted-vault.cr-store"
- clones
-
JBEAP-10685 WildFly Elytron Tool, Vault commands with wrongly filled path to vaults should fail.
- Closed