-
Bug
-
Resolution: Done
-
Blocker
-
7.1.0.DR17
Looks like https://github.com/wildfly/wildfly/commit/f1e47a1d64478571ef476fa7b71227127aa64ed5 introduced an issue where no legacy encrypt protocol can be configured.
SYM_ENCRYPT configuration
/subsystem=jgroups/stack=udp2/protocol=SYM_ENCRYPT:add(properties={provider=SunJCE, sym_algorithm=AES, encrypt_entire_message=true, keystore_name=/tmp/jboss-keystore.keystore, store_password=PASSWORD, alias=mykey})
Result exception
10:19:15,523 ERROR [org.jboss.as.controller.management-operation] (management-handler-thread - 3) WFLYCTL0013: Operation ("add") failed - address: ([
("subsystem" => "jgroups"),
("stack" => "udp2"),
("protocol" => "SYM_ENCRYPT")
]): java.lang.IllegalStateException: WFLYCTL0361: Capabilities cannot be queried in stage 'MODEL'; they are not available until stage 'RUNTIME'.
at org.jboss.as.controller.OperationContextImpl.assertCapabilitiesAvailable(OperationContextImpl.java:1956)
at org.jboss.as.controller.OperationContextImpl.requestOptionalCapability(OperationContextImpl.java:1527)
at org.jboss.as.controller.OperationContextImpl.requireOptionalCapability(OperationContextImpl.java:1552)
at org.jboss.as.controller.OperationContextImpl.requireOptionalCapability(OperationContextImpl.java:1548)
at org.jboss.as.clustering.jgroups.subsystem.EncryptProtocolResourceDefinition$1.execute(EncryptProtocolResourceDefinition.java:117)
at org.jboss.as.clustering.controller.AddStepHandler.populateModel(AddStepHandler.java:122)
at org.jboss.as.controller.AbstractAddStepHandler.execute(AbstractAddStepHandler.java:145)
at org.jboss.as.clustering.controller.AddStepHandler.execute(AddStepHandler.java:111)
at org.jboss.as.clustering.controller.RestartParentResourceAddStepHandler.execute(RestartParentResourceAddStepHandler.java:45)
at org.jboss.as.controller.AbstractOperationContext.executeStep(AbstractOperationContext.java:971)
at org.jboss.as.controller.AbstractOperationContext.processStages(AbstractOperationContext.java:717)
at org.jboss.as.controller.AbstractOperationContext.executeOperation(AbstractOperationContext.java:441)
at org.jboss.as.controller.OperationContextImpl.executeOperation(OperationContextImpl.java:1392)
at org.jboss.as.controller.ModelControllerImpl.internalExecute(ModelControllerImpl.java:421)
at org.jboss.as.controller.ModelControllerImpl.lambda$execute$1(ModelControllerImpl.java:243)
at org.wildfly.security.auth.server.SecurityIdentity.runAs(SecurityIdentity.java:263)
at org.wildfly.security.auth.server.SecurityIdentity.runAs(SecurityIdentity.java:229)
at org.jboss.as.controller.ModelControllerImpl.execute(ModelControllerImpl.java:243)
at org.jboss.as.controller.remote.ModelControllerClientOperationHandler$ExecuteRequestHandler.doExecute(ModelControllerClientOperationHandler.java:217)
at org.jboss.as.controller.remote.ModelControllerClientOperationHandler$ExecuteRequestHandler.access$400(ModelControllerClientOperationHandler.java:137)
at org.jboss.as.controller.remote.ModelControllerClientOperationHandler$ExecuteRequestHandler$1$1.run(ModelControllerClientOperationHandler.java:161)
at org.jboss.as.controller.remote.ModelControllerClientOperationHandler$ExecuteRequestHandler$1$1.run(ModelControllerClientOperationHandler.java:157)
at org.wildfly.security.auth.server.SecurityIdentity.runAs(SecurityIdentity.java:287)
at org.wildfly.security.auth.server.SecurityIdentity.runAs(SecurityIdentity.java:244)
at org.jboss.as.controller.AccessAuditContext.doAs(AccessAuditContext.java:254)
at org.jboss.as.controller.AccessAuditContext.doAs(AccessAuditContext.java:225)
at org.jboss.as.controller.remote.ModelControllerClientOperationHandler$ExecuteRequestHandler$1.execute(ModelControllerClientOperationHandler.java:157)
at org.jboss.as.protocol.mgmt.ManagementRequestContextImpl$1.doExecute(ManagementRequestContextImpl.java:70)
at org.jboss.as.protocol.mgmt.ManagementRequestContextImpl$AsyncTaskRunner.run(ManagementRequestContextImpl.java:160)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
at java.lang.Thread.run(Thread.java:748)
at org.jboss.threads.JBossThread.run(JBossThread.java:320)
Since non-legacy encrypt protocols don't run the operation translator, they don't produce this exception.
This is a regression against DR16. Blocker priority was set because no encypt protocol legacy configuration seems to be possible.