-
Bug
-
Resolution: Done
-
Major
-
7.1.0.DR7
Definition Elytron key-manager with key-store (which needs password) without filled credential-reference causes ugly failure-description with senseless Exception.
Steps to reproduce
- firefly.keystore which is attached copy to eap_home/standalone/data/cs.
- /subsystem=elytron/key-store=ff001:add(path=cs/firefly.keystore,relative-to=jboss.server.data.dir,type=JKS,credential-reference=
{clear-text=Elytron})
* /subsystem=elytron/key-managers=keymanager001:add(algorithm=SunX509, key-store=ff001)
And you get this output:{ "outcome" => "failed", "failure-description" => { "WFLYCTL0080: Failed services" => {"org.wildfly.security.key-managers.km002" => "org.jboss.msc.service.StartException in service org.wildfly.security.key-managers.km002: Failed to start service Caused by: java.lang.NullPointerException"}, "WFLYCTL0412: Required services that are not installed:" => ["org.wildfly.security.key-managers.km002"], "WFLYCTL0180: Services with missing/unavailable dependencies" => undefined }, "rolled-back" => true }
There must be some kind of information about missing credential-reference or at least missing (wrong) password to key-store.
When I add there credential-reference with pass to Key-store then operation passes
/subsystem=elytron/key-managers=keymanager001:add(algorithm=SunX509, key-store=ff001, credential-reference={clear-text=Elytron})
Suggestions to improvement
failure-description must not contain Exception or snippet stacktrace.
Please replace WFLYCTL0080 part to better message.
e.g. "credential-reference is required", "Missing password to key-store access"
- blocks
-
JBEAP-8571 CredentialStore issues
- Resolved
- is blocked by
-
JBEAP-9862 Operation failure descriptions following service start failures are overly noisy.
- Closed
- is cloned by
-
WFCORE-2468 Definition Elytron key-manager with key-store (which needs password) without filled credential-reference causes ugly failure-description with senseless Exception.
- Resolved
- is related to
-
JBEAP-6757 Elytron key-managers requires set credential-reference which is wrongly marked as optional.
- Closed