Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-11692

Elytron client configuration file throws ConfigXMLParseException when credential key-store-reference is used

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Blocker Blocker
    • 7.1.0.ER2
    • 7.1.0.ER1
    • Security
    • None

      When Elytron client configuration file includes configuration.authentication-client.authentication-configurations.configuration.credentials.key-store-reference element then ConfigXMLParseException is thrown during parsing of configuration file. This issue can be caused by JBEAP-11691.

      For following configuration file:

      <configuration>
          <authentication-client xmlns="urn:elytron:1.0">
              <authentication-rules>
                  <rule use-configuration="default"/>
              </authentication-rules>
              <authentication-configurations>
                  <configuration name="default">
                      <sasl-mechanism-selector selector="PLAIN"/>
                      <credentials>
                          <key-store-reference key-store-name="clientKeyStore">
                              <key-store-clear-password password="secret"/>
                          </key-store-reference>
                      </credentials>
                      <providers>
                          <use-service-loader/>
                      </providers>
                  </configuration>
              </authentication-configurations>
              <key-stores>
                  <key-store name="clientKeyStore" type="JKS">
                      <file name="/path/to/some/client.keystore"/>
                      <key-store-clear-password password="secretKeyStore"/>
                  </key-store>
              </key-stores>
          </authentication-client>
      </configuration>
      

      following exception is thrown:

      org.wildfly.client.config.ConfigXMLParseException: ELY01135: Failed to load keystore data
      	at file:/path/to/some/wildfly-config.xml:10:74
      	at org.wildfly.security.auth.client.ElytronXmlParser.lambda$parseKeyStoreRefType$41(ElytronXmlParser.java:1448)
      	at org.wildfly.security.auth.client.ElytronXmlParser.lambda$parseCredentialsType$25(ElytronXmlParser.java:932)
      	at org.wildfly.security.auth.client.ElytronXmlParser.lambda$andThenOp$23(ElytronXmlParser.java:919)
      	at org.wildfly.security.auth.client.ElytronXmlParser.lambda$parseCredentialsType$35(ElytronXmlParser.java:986)
      	at org.wildfly.security.auth.client.ElytronXmlParser.lambda$parseAuthenticationConfigurationType$18(ElytronXmlParser.java:715)
      	at org.wildfly.security.auth.client.ElytronXmlParser.lambda$andThenOp$23(ElytronXmlParser.java:919)
      	at org.wildfly.security.auth.client.ElytronXmlParser.lambda$parseAuthenticationConfigurationType$22(ElytronXmlParser.java:763)
      	at org.wildfly.security.auth.client.ElytronXmlParser.lambda$parseAuthenticationRuleType$7(ElytronXmlParser.java:599)
      	at org.wildfly.security.auth.client.ElytronXmlParser.lambda$parseRulesType$8(ElytronXmlParser.java:623)
      	at org.wildfly.security.auth.client.ElytronXmlParser.parseAuthenticationClientType(ElytronXmlParser.java:323)
      	at org.wildfly.security.auth.client.ElytronXmlParser.parseAuthenticationClientConfiguration(ElytronXmlParser.java:185)
      	at org.wildfly.security.auth.client.ElytronXmlParser.parseAuthenticationClientConfiguration(ElytronXmlParser.java:146)
      	at org.wildfly.security.auth.client.DefaultAuthenticationContextProvider.lambda$static$0(DefaultAuthenticationContextProvider.java:38)
      	... 18 more
      Caused by: java.security.NoSuchAlgorithmException: ELY08028: Invalid algorithm "clear"
      	at org.wildfly.security.password.PasswordFactory.getInstance(PasswordFactory.java:121)
      	at org.wildfly.security.password.PasswordFactory.getInstance(PasswordFactory.java:75)
      	at org.wildfly.security.auth.client.ElytronXmlParser.lambda$parseKeyStoreRefType$41(ElytronXmlParser.java:1423)
      	... 30 more
      

      It seems that mentioned configuration file does not result to ConfigXMLParseException in EAP 7.1.0.DR19.

      We request blocker flag since using key-store-reference as credentials in configuration is not possible in Elytron client configuration file which breaks feature in RFE EAP7-567 Client Side Security (Elytron Client).

              pskopek@redhat.com Peter Skopek
              olukas Ondrej Lukas (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: