Uploaded image for project: 'Infinispan'
  1. Infinispan
  2. ISPN-14078

Upgrade to Elytron 1.20.1.Final

    XMLWordPrintable

Details

    • Component Upgrade
    • Resolution: Done
    • Critical
    • 14.0.0.CR2
    • None
    • Security

    Description

      Launch script attempts to create Operator user via CLI on container startup but fails with PKCS11Exception: CKR_KEY_TYPE_INCONSISTENT. (As a result the Operator does not have access to the cluster which results in misbehaviors)

      $ /opt/infinispan/bin/cli.sh user create operator --realm admin -p GKrnuhcrOFiXRFWC --users-file cli-admin-users.properties --groups-file cli-admin-groups.properties --groups admin

PKCS11Exception: CKR_KEY_TYPE_INCONSISTENT

      Edit: The issue is replicable on bare metal with OpenJDK 11.0.15

      Attachments

        Issue Links

          depends on

          Bug - A problem that impairs or prevents the functions of the product. ELY-2351 ScramDigestPasswordImpl fails with PKCS#11 (FIPS)

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Resolved

          Activity

            People

              ttarrant@redhat.com Tristan Tarrant
              pdrobek@redhat.com Pavel Drobek
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: