Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-10746

CS, CLI reload operation does not show cause of error

    XMLWordPrintable

Details

    • Hide
      • /subsystem=elytron/credential-store=test2:add(relative-to=jboss.server.data.dir,credential-reference={clear-text="pass123+"},create=true,location=secretdatafile,modifiable=true)
        /subsystem=elytron/credential-store=test2/alias=secret-key:add(secret-value=password)
        /subsystem=elytron/credential-store=test2:reload                                                                                                                                    
        
      • write randomly into ${jboss.server.data.dir}/secretdatafile . Make this file corrupted. - dd if=/dev/urandom of=secretdatafile bs=300 count=1
        [standalone@localhost:9990 /] /subsystem=elytron/credential-store=test2:reload
        {
            "outcome" => "failed",
            "result" => undefined,
            "failure-description" => "WFLYELY00004: Unable to start the service.",
            "rolled-back" => true
        }
        
      Show
      /subsystem=elytron/credential-store=test2:add(relative-to=jboss.server.data.dir,credential-reference={clear-text= "pass123+" },create= true ,location=secretdatafile,modifiable= true ) /subsystem=elytron/credential-store=test2/alias=secret-key:add(secret-value=password) /subsystem=elytron/credential-store=test2:reload write randomly into ${jboss.server.data.dir}/secretdatafile . Make this file corrupted. - dd if=/dev/urandom of=secretdatafile bs=300 count=1 [standalone@localhost:9990 /] /subsystem=elytron/credential-store=test2:reload { "outcome" => "failed" , "result" => undefined, "failure-description" => "WFLYELY00004: Unable to start the service." , "rolled-back" => true }

    Description

      Exception is not logged when reload operation is used.

      Even in server log there is no additional cause

      07:59:47,298 ERROR [org.jboss.as.controller.management-operation] (management-handler-thread - 1) WFLYCTL0013: Operation ("reload") failed - address: ([
          ("subsystem" => "elytron"),
          ("credential-store" => "fips-credential-store")
      ]) - failure description: "WFLYELY00004: Unable to start the service."
      

      When I start EAP with this configuration i get this error in server log

      server.log
      10:27:10,640 ERROR [org.jboss.msc.service.fail] (MSC service thread 1-2) MSC000001: Failed to start service org.wildfly.security.credential-store.test2: org.jboss.msc.service.StartException in service org.wildfly.security.credential-store.test2: WFLYELY00004: Unable to start the service.
      	at org.wildfly.extension.elytron.CredentialStoreService.start(CredentialStoreService.java:118)
      	at org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:2032)
      	at org.jboss.msc.service.ServiceControllerImpl$StartTask.run(ServiceControllerImpl.java:1955)
      	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
      	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
      	at java.lang.Thread.run(Thread.java:745)
      Caused by: org.wildfly.security.credential.store.CredentialStoreException: ELY09526: Unable to initialize credential store
      	at org.wildfly.security.credential.store.impl.KeyStoreCredentialStore.load(KeyStoreCredentialStore.java:802)
      	at org.wildfly.security.credential.store.impl.KeyStoreCredentialStore.initialize(KeyStoreCredentialStore.java:183)
      	at org.wildfly.security.credential.store.CredentialStore.initialize(CredentialStore.java:119)
      	at org.wildfly.extension.elytron.CredentialStoreService.start(CredentialStoreService.java:116)
      	... 5 more
      Caused by: java.io.StreamCorruptedException: invalid type code: 23
      	at java.io.ObjectInputStream.readObject0(ObjectInputStream.java:1379)
      	at java.io.ObjectInputStream.defaultReadFields(ObjectInputStream.java:2000)
      	at java.io.ObjectInputStream.defaultReadObject(ObjectInputStream.java:501)
      	at javax.crypto.SealedObject.readObject(SealedObject.java:447)
      	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
      	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
      	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
      	at java.lang.reflect.Method.invoke(Method.java:497)
      	at java.io.ObjectStreamClass.invokeReadObject(ObjectStreamClass.java:1058)
      	at java.io.ObjectInputStream.readSerialData(ObjectInputStream.java:1900)
      	at java.io.ObjectInputStream.readOrdinaryObject(ObjectInputStream.java:1801)
      	at java.io.ObjectInputStream.readObject0(ObjectInputStream.java:1351)
      	at java.io.ObjectInputStream.readObject(ObjectInputStream.java:371)
      	at com.sun.crypto.provider.JceKeyStore.engineLoad(JceKeyStore.java:838)
      	at java.security.KeyStore.load(KeyStore.java:1445)
      	at org.wildfly.security.credential.store.impl.KeyStoreCredentialStore.load(KeyStoreCredentialStore.java:795)
      	... 8 more
      

      Attachments

        Activity

          People

            rhn-cservice-bbaranow Bartosz Baranowski
            mchoma@redhat.com Martin Choma
            Martin Choma Martin Choma
            Martin Choma Martin Choma
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: