Uploaded image for project: 'WildFly Core'
  1. WildFly Core
  2. WFCORE-2468

Definition Elytron key-manager with key-store (which needs password) without filled credential-reference causes ugly failure-description with senseless Exception.

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Obsolete
    • Icon: Major Major
    • 3.0.1.Final
    • None
    • Security
    • None

      Definition Elytron key-manager with key-store (which needs password) without filled credential-reference causes ugly failure-description with senseless Exception.

      Steps to reproduce

      • firefly.keystore which is attached copy to eap_home/standalone/data/cs.
      • /subsystem=elytron/key-store=ff001:add(path=cs/firefly.keystore,relative-to=jboss.server.data.dir,type=JKS,credential-reference= {clear-text=Elytron})
        */subsystem=elytron/key-managers=keymanager001:add(algorithm=SunX509, key-store=ff001)
        And you get this output:
        {
            "outcome" => "failed",
            "failure-description" => {
                "WFLYCTL0080: Failed services" => {"org.wildfly.security.key-managers.km002" => "org.jboss.msc.service.StartException in service org.wildfly.security.key-managers.km002: Failed to start service
            Caused by: java.lang.NullPointerException"},
                "WFLYCTL0412: Required services that are not installed:" => ["org.wildfly.security.key-managers.km002"],
                "WFLYCTL0180: Services with missing/unavailable dependencies" => undefined
            },
            "rolled-back" => true
        }
        

        There must be some kind of information about missing credential-reference or at least missing (wrong) password to key-store.



        When I add there credential-reference with pass to Key-store then operation passes
        /subsystem=elytron/key-managers=keymanager001:add(algorithm=SunX509, key-store=ff001, credential-reference={clear-text=Elytron}

        )

      Suggestions to improvement
      failure-description must not contain Exception or snippet stacktrace.
      Please replace WFLYCTL0080 part to better message.
      e.g. "credential-reference is required", "Missing password to key-store access"

              rhn-cservice-bbaranow Bartosz Baranowski
              hsvabek_jira Hynek Švábek (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: