Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-8246

[GSS] (7.1.0) WFCORE-2182 RuntimeVaultReader should not throw SecurityException

    Details

    • Type: Bug
    • Status: Verified (View Workflow)
    • Priority: Minor
    • Resolution: Done
    • Affects Version/s: 7.1.0.DR10
    • Fix Version/s: 7.1.0.DR11
    • Component/s: Management
    • Labels:
      None
    • Target Release:
    • Steps to Reproduce:
      Hide
      • Initialize the vault but create no vault entries.
        keytool -genseckey -alias vault -storetype jceks -keyalg AES -keysize 128 -storepass vault22 -keypass vault22 -validity 730 -keystore /tmp/vault/vault.keystore
        
        /core-service=vault:add(vault-options=[("KEYSTORE_URL" => "/tmp/vault/vault.keystore"),("KEYSTORE_PASSWORD" => "MASK-5dOaAVafCSd"),("KEYSTORE_ALIAS" => "vault"),("SALT" => "1234abcd"),("ITERATION_COUNT" => "120"),("ENC_FILE_DIR" => "/tmp/vault/")])
        
      • Specify a random reference to a vault entry (e.g. configure the default datasource with <password>${VAULT::vb::h2sa2_pass::1}</password>)
      • Start JBoss
      Show
      Initialize the vault but create no vault entries. keytool -genseckey -alias vault -storetype jceks -keyalg AES -keysize 128 -storepass vault22 -keypass vault22 -validity 730 -keystore /tmp/vault/vault.keystore /core-service=vault:add(vault-options=[("KEYSTORE_URL" => "/tmp/vault/vault.keystore"),("KEYSTORE_PASSWORD" => "MASK-5dOaAVafCSd"),("KEYSTORE_ALIAS" => "vault"),("SALT" => "1234abcd"),("ITERATION_COUNT" => "120"),("ENC_FILE_DIR" => "/tmp/vault/")]) Specify a random reference to a vault entry (e.g. configure the default datasource with <password>${VAULT::vb::h2sa2_pass::1}</password> ) Start JBoss
    • Affects:
      Release Notes, User Experience

      Description

      If JBoss is (re)started after supplying a reference to a non-existent security vault entry for a user or password for a datasource, the datasource subsystem fails to start and all datasources including those which are correctly configured are disabled.

        Gliffy Diagrams

          Attachments

            Issue Links

              Activity

                People

                • Assignee:
                  brian.stansberry Brian Stansberry
                  Reporter:
                  stephen.fikes Stephen Fikes
                • Votes:
                  0 Vote for this issue
                  Watchers:
                  3 Start watching this issue

                  Dates

                  • Created:
                    Updated:
                    Resolved: