Uploaded image for project: 'AMQ Broker'
  1. AMQ Broker
  2. ENTMQBR-8256

The SimpleSecurityTests#userPropertiesSecretTest fails on FIPS-ed OpenShift cluster with NoSuchAlgorithmException: SHA1PRNG SecureRandom not available

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Undefined Undefined
    • None
    • AMQ 7.11.1.OPR.1.GA
    • None

      claire/operator-suite/src/test/java/io/brokerqe/claire/security/SimpleSecurityTests.java
      

      Test io.brokerqe.claire.security.SimpleSecurityTests#userPropertiesSecretTest fails in a FIPS-enabled OpenShift cluster with this in the init container logs

      Applying login modules
      configuring broker domain activemq
      Error on encrypting a password: /Exception in thread "main" java.security.NoSuchAlgorithmException: SHA1PRNG SecureRandom not available
      	at java.base/sun.security.jca.GetInstance.getInstance(GetInstance.java:159)
      	at java.base/java.security.SecureRandom.getInstance(SecureRandom.java:387)
      	at org.apache.activemq.artemis.utils.DefaultSensitiveStringCodec$PBKDF2Algorithm.<init>(DefaultSensitiveStringCodec.java:239)
      	at org.apache.activemq.artemis.utils.DefaultSensitiveStringCodec.init(DefaultSensitiveStringCodec.java:81)
      	at org.apache.activemq.artemis.cli.commands.Mask.execute(Mask.java:69)
      	at org.apache.activemq.artemis.cli.Artemis.internalExecute(Artemis.java:212)
      	at org.apache.activemq.artemis.cli.Artemis.execute(Artemis.java:162)
      	at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
      	at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:77)
      	at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
      	at java.base/java.lang.reflect.Method.invoke(Method.java:568)
      	at org.apache.activemq.artemis.boot.Artemis.execute(Artemis.java:144)
      	at org.apache.activemq.artemis.boot.Artemis.main(Artemis.java:61)
      Error on encrypting a password: /Exception in thread "main" java.security.NoSuchAlgorithmException: SHA1PRNG SecureRandom not available
      	at java.base/sun.security.jca.GetInstance.getInstance(GetInstance.java:159)
      	at java.base/java.security.SecureRandom.getInstance(SecureRandom.java:387)
      	at org.apache.activemq.artemis.utils.DefaultSensitiveStringCodec$PBKDF2Algorithm.<init>(DefaultSensitiveStringCodec.java:239)
      	at org.apache.activemq.artemis.utils.DefaultSensitiveStringCodec.init(DefaultSensitiveStringCodec.java:81)
      	at org.apache.activemq.artemis.cli.commands.Mask.execute(Mask.java:69)
      	at org.apache.activemq.artemis.cli.Artemis.internalExecute(Artemis.java:212)
      	at org.apache.activemq.artemis.cli.Artemis.execute(Artemis.java:162)
      	at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
      	at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:77)
      	at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
      	at java.base/java.lang.reflect.Method.invoke(Method.java:568)
      	at org.apache.activemq.artemis.boot.Artemis.execute(Artemis.java:144)
      	at org.apache.activemq.artemis.boot.Artemis.main(Artemis.java:61)
      Error on encrypting a password: /Exception in thread "main" java.security.NoSuchAlgorithmException: SHA1PRNG SecureRandom not available
      	at java.base/sun.security.jca.GetInstance.getInstance(GetInstance.java:159)
      	at java.base/java.security.SecureRandom.getInstance(SecureRandom.java:387)
      	at org.apache.activemq.artemis.utils.DefaultSensitiveStringCodec$PBKDF2Algorithm.<init>(DefaultSensitiveStringCodec.java:239)
      	at org.apache.activemq.artemis.utils.DefaultSensitiveStringCodec.init(DefaultSensitiveStringCodec.java:81)
      	at org.apache.activemq.artemis.cli.commands.Mask.execute(Mask.java:69)
      	at org.apache.activemq.artemis.cli.Artemis.internalExecute(Artemis.java:212)
      	at org.apache.activemq.artemis.cli.Artemis.execute(Artemis.java:162)
      	at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
      	at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:77)
      	at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
      	at java.base/java.lang.reflect.Method.invoke(Method.java:568)
      	at org.apache.activemq.artemis.boot.Artemis.execute(Artemis.java:144)
      	at org.apache.activemq.artemis.boot.Artemis.main(Artemis.java:61)
      Error on encrypting a password: /Exception in thread "main" java.security.NoSuchAlgorithmException: SHA1PRNG SecureRandom not available
      	at java.base/sun.security.jca.GetInstance.getInstance(GetInstance.java:159)
      	at java.base/java.security.SecureRandom.getInstance(SecureRandom.java:387)
      	at org.apache.activemq.artemis.utils.DefaultSensitiveStringCodec$PBKDF2Algorithm.<init>(DefaultSensitiveStringCodec.java:239)
      	at org.apache.activemq.artemis.utils.DefaultSensitiveStringCodec.init(DefaultSensitiveStringCodec.java:81)
      	at org.apache.activemq.artemis.cli.commands.Mask.execute(Mask.java:69)
      	at org.apache.activemq.artemis.cli.Artemis.internalExecute(Artemis.java:212)
      	at org.apache.activemq.artemis.cli.Artemis.execute(Artemis.java:162)
      	at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
      	at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:77)
      	at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
      	at java.base/java.lang.reflect.Method.invoke(Method.java:568)
      	at org.apache.activemq.artemis.boot.Artemis.execute(Artemis.java:144)
      	at org.apache.activemq.artemis.boot.Artemis.main(Artemis.java:61)
      Error on encrypting a password: /Exception in thread "main" java.security.NoSuchAlgorithmException: SHA1PRNG SecureRandom not available
      	at java.base/sun.security.jca.GetInstance.getInstance(GetInstance.java:159)
      	at java.base/java.security.SecureRandom.getInstance(SecureRandom.java:387)
      	at org.apache.activemq.artemis.utils.DefaultSensitiveStringCodec$PBKDF2Algorithm.<init>(DefaultSensitiveStringCodec.java:239)
      	at org.apache.activemq.artemis.utils.DefaultSensitiveStringCodec.init(DefaultSensitiveStringCodec.java:81)
      	at org.apache.activemq.artemis.cli.commands.Mask.execute(Mask.java:69)
      	at org.apache.activemq.artemis.cli.Artemis.internalExecute(Artemis.java:212)
      	at org.apache.activemq.artemis.cli.Artemis.execute(Artemis.java:162)
      	at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
      	at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:77)
      	at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
      	at java.base/java.lang.reflect.Method.invoke(Method.java:568)
      	at org.apache.activemq.artemis.boot.Artemis.execute(Artemis.java:144)
      	at org.apache.activemq.artemis.boot.Artemis.main(Artemis.java:61)
      Applying broker security settings
      Done!
      exposing env var CONFIG_INSTANCE_DIR for custom init
      CONFIG_INSTANCE_DIR value from /amq/init/config
      Exported value of CONFIG_INSTANCE_DIR: /amq/init/config/amq-broker
      Finding default custom script at /amq/scripts/post-config.sh
      

              dbruscin Domenico Francesco Bruscino
              jdanek@redhat.com Jiri Daněk
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                Resolved: