Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-8246

[GSS] (7.1.0) WFCORE-2182 RuntimeVaultReader should not throw SecurityException

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done
    • Minor
    • 7.1.0.DR11
    • 7.1.0.DR10
    • Management
    • None
    • Release Notes, User Experience
    • Hide
      • Initialize the vault but create no vault entries.
        keytool -genseckey -alias vault -storetype jceks -keyalg AES -keysize 128 -storepass vault22 -keypass vault22 -validity 730 -keystore /tmp/vault/vault.keystore
        
        /core-service=vault:add(vault-options=[("KEYSTORE_URL" => "/tmp/vault/vault.keystore"),("KEYSTORE_PASSWORD" => "MASK-5dOaAVafCSd"),("KEYSTORE_ALIAS" => "vault"),("SALT" => "1234abcd"),("ITERATION_COUNT" => "120"),("ENC_FILE_DIR" => "/tmp/vault/")])
        
      • Specify a random reference to a vault entry (e.g. configure the default datasource with <password>${VAULT::vb::h2sa2_pass::1}</password>)
      • Start JBoss
      Show
      Initialize the vault but create no vault entries. keytool -genseckey -alias vault -storetype jceks -keyalg AES -keysize 128 -storepass vault22 -keypass vault22 -validity 730 -keystore /tmp/vault/vault.keystore /core-service=vault:add(vault-options=[("KEYSTORE_URL" => "/tmp/vault/vault.keystore"),("KEYSTORE_PASSWORD" => "MASK-5dOaAVafCSd"),("KEYSTORE_ALIAS" => "vault"),("SALT" => "1234abcd"),("ITERATION_COUNT" => "120"),("ENC_FILE_DIR" => "/tmp/vault/")]) Specify a random reference to a vault entry (e.g. configure the default datasource with <password>${VAULT::vb::h2sa2_pass::1}</password> ) Start JBoss

    Description

      If JBoss is (re)started after supplying a reference to a non-existent security vault entry for a user or password for a datasource, the datasource subsystem fails to start and all datasources including those which are correctly configured are disabled.

      Attachments

        Issue Links

          Activity

            People

              bstansbe@redhat.com Brian Stansberry
              rhn-support-sfikes Stephen Fikes (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: