[JBoss JIRA] (ELY-1132) Unable to load passwords from wildfly-config.xml
by Darran Lofthouse (JIRA)
[ https://issues.jboss.org/browse/ELY-1132?page=com.atlassian.jira.plugin.s... ]
Darran Lofthouse commented on ELY-1132:
---------------------------------------
If we can get stack traces for the two not using the service providers I can take a look, it sounds like the ExceptionSupplier is being called to obtain the password before the Provider Supplier has been fully initialised.
> Unable to load passwords from wildfly-config.xml
> ------------------------------------------------
>
> Key: ELY-1132
> URL: https://issues.jboss.org/browse/ELY-1132
> Project: WildFly Elytron
> Issue Type: Bug
> Reporter: Stuart Douglas
> Assignee: Darran Lofthouse
>
> I see the following exception, adding use-service-loader-providers does not help
> Caused by: java.security.NoSuchAlgorithmException: ELY08028: Invalid algorithm "clear"
> at org.wildfly.security.password.PasswordFactory.getInstance(PasswordFactory.java:121)
> at org.wildfly.security.auth.client.ElytronXmlParser.lambda$parseClearPassword$47(ElytronXmlParser.java:2009)
> ... 46 more
> Looks like this should just be hard coded to use the Elytron provider?
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
7 years, 8 months
[JBoss JIRA] (ELY-1132) Unable to load passwords from wildfly-config.xml
by Stuart Douglas (JIRA)
[ https://issues.jboss.org/browse/ELY-1132?page=com.atlassian.jira.plugin.s... ]
Stuart Douglas commented on ELY-1132:
-------------------------------------
Looking at the code it was invoked in three different places, only one used the service provider loaders
> Unable to load passwords from wildfly-config.xml
> ------------------------------------------------
>
> Key: ELY-1132
> URL: https://issues.jboss.org/browse/ELY-1132
> Project: WildFly Elytron
> Issue Type: Bug
> Reporter: Stuart Douglas
> Assignee: Darran Lofthouse
>
> I see the following exception, adding use-service-loader-providers does not help
> Caused by: java.security.NoSuchAlgorithmException: ELY08028: Invalid algorithm "clear"
> at org.wildfly.security.password.PasswordFactory.getInstance(PasswordFactory.java:121)
> at org.wildfly.security.auth.client.ElytronXmlParser.lambda$parseClearPassword$47(ElytronXmlParser.java:2009)
> ... 46 more
> Looks like this should just be hard coded to use the Elytron provider?
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
7 years, 8 months
[JBoss JIRA] (ELY-1132) Unable to load passwords from wildfly-config.xml
by Stuart Douglas (JIRA)
[ https://issues.jboss.org/browse/ELY-1132?page=com.atlassian.jira.plugin.s... ]
Stuart Douglas commented on ELY-1132:
-------------------------------------
It is in the most recent commit of the wildfly http client. I had to manually do Security.addProvider to work around it
> Unable to load passwords from wildfly-config.xml
> ------------------------------------------------
>
> Key: ELY-1132
> URL: https://issues.jboss.org/browse/ELY-1132
> Project: WildFly Elytron
> Issue Type: Bug
> Reporter: Stuart Douglas
> Assignee: Darran Lofthouse
>
> I see the following exception, adding use-service-loader-providers does not help
> Caused by: java.security.NoSuchAlgorithmException: ELY08028: Invalid algorithm "clear"
> at org.wildfly.security.password.PasswordFactory.getInstance(PasswordFactory.java:121)
> at org.wildfly.security.auth.client.ElytronXmlParser.lambda$parseClearPassword$47(ElytronXmlParser.java:2009)
> ... 46 more
> Looks like this should just be hard coded to use the Elytron provider?
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
7 years, 8 months
[JBoss JIRA] (WFLY-8680) Re-enable Elytron tests ignored for Windows
by Josef Cacek (JIRA)
[ https://issues.jboss.org/browse/WFLY-8680?page=com.atlassian.jira.plugin.... ]
Josef Cacek updated WFLY-8680:
------------------------------
Git Pull Request: https://github.com/wildfly/wildfly/pull/10003
> Re-enable Elytron tests ignored for Windows
> -------------------------------------------
>
> Key: WFLY-8680
> URL: https://issues.jboss.org/browse/WFLY-8680
> Project: WildFly
> Issue Type: Task
> Components: Security, Test Suite
> Reporter: Darran Lofthouse
> Assignee: Darran Lofthouse
> Priority: Blocker
> Fix For: 11.0.0.Beta1
>
>
> The following tests are failing on Windows and need to be re-enabled: -
> org.wildfly.test.integration.elytron (25)
> audit.FileAuditLogTestCase
> audit.TCPSyslogAuditLogTestCase
> audit.UDPSyslogAuditLogTestCase
> batch.BatchSubsystemSecurityTestCase 2 failures in one build
> ejb.AuthenticationTestCase 2 failures in one build
> permissionmappers.ConstantPermissionMapperTestCase 2 failures in one build
> principaldecoders.ConstantPrincipalDecoderTestCase 2 failures in one build
> principaltransformers.ChainedPrincipalTransformerTestCase 2 failures in one build
> principaltransformers.ConstantPrincipalTransformerTestCase 2 failures in one build
> principaltransformers.RegexPrincipalTransformerTestCase 2 failures in one build
> principaltransformers.RegexValidatingPrincipalTransformerTestCase 2 failures in one build
> realm.AggregateRealmTestCase 2 failures in one build
> realm.LdapRealmTestCase 2 failures in one build
> realmmappers.ConstantRealmMapperTestCase 2 failures in one build
> realmmappers.MappedRegexRealmMapperTestCase 2 failures in one build
> realmmappers.SimpleRegexRealmMapperTestCase 2 failures in one build
> roledecoders.SimpleRoleDecoderTestCase 2 failures in one build
> rolemappers.AddPrefixRoleMapperTestCase 2 failures in one build
> rolemappers.AddSuffixRoleMapperTestCase 2 failures in one build
> rolemappers.AggregateRoleMapperTestCase 2 failures in one build
> rolemappers.ConstantRoleMapperTestCase 2 failures in one build
> rolemappers.LogicalRoleMapperTestCase 2 failures in one build
> ssl.UndertowSslSecurityDomainTestCase 2 failures in one build
> ssl.UndertowTwoWaySslNeedClientAuthTestCase
> ssl.UndertowTwoWaySslTestCase
> org.wildfly.test.integration.elytron.audit (6)
> FileAuditLogTestCase.testFailedAuth
> FileAuditLogTestCase.testSuccessfulAuth
> TCPSyslogAuditLogTestCase.testFailedAuth
> TCPSyslogAuditLogTestCase.testSuccessfulAuth
> UDPSyslogAuditLogTestCase.testFailedAuth
> UDPSyslogAuditLogTestCase.testSuccessfulAuth
> org.wildfly.test.integration.elytron.ssl (4)
> UndertowTwoWaySslNeedClientAuthTestCase.testSendingTrustedClientCertificate
> UndertowTwoWaySslTestCase.testSendingNoClientCertificate
> UndertowTwoWaySslTestCase.testSendingNonTrustedClientCertificate
> UndertowTwoWaySslTestCase.testSendingTrustedClientCertificate
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
7 years, 8 months
[JBoss JIRA] (ELY-1132) Unable to load passwords from wildfly-config.xml
by Darran Lofthouse (JIRA)
[ https://issues.jboss.org/browse/ELY-1132?page=com.atlassian.jira.plugin.s... ]
Darran Lofthouse commented on ELY-1132:
---------------------------------------
That method should be using the service loader providers, do we have the full config so we can test it? Also is any more stack trace available?
> Unable to load passwords from wildfly-config.xml
> ------------------------------------------------
>
> Key: ELY-1132
> URL: https://issues.jboss.org/browse/ELY-1132
> Project: WildFly Elytron
> Issue Type: Bug
> Reporter: Stuart Douglas
> Assignee: Darran Lofthouse
>
> I see the following exception, adding use-service-loader-providers does not help
> Caused by: java.security.NoSuchAlgorithmException: ELY08028: Invalid algorithm "clear"
> at org.wildfly.security.password.PasswordFactory.getInstance(PasswordFactory.java:121)
> at org.wildfly.security.auth.client.ElytronXmlParser.lambda$parseClearPassword$47(ElytronXmlParser.java:2009)
> ... 46 more
> Looks like this should just be hard coded to use the Elytron provider?
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
7 years, 8 months
[JBoss JIRA] (ELY-1123) WildFly Elytron Tool, Converted storage file overwrites existing file on filesystem.
by Hynek Švábek (JIRA)
[ https://issues.jboss.org/browse/ELY-1123?page=com.atlassian.jira.plugin.s... ]
Hynek Švábek updated ELY-1123:
------------------------------
Description:
Vault command: converted storage file overwrites existing file on filesystem.
Expected behaviour is error or some option which can enable overwriting (flag option?).
*How to reproduce:*
download all attachments to same location as *wildfly-elytron-tool.jar* file and then run this command twice and the each one ends with success.
{code}
java -jar wildfly-elytron-tool.jar vault --enc-dir . --keystore server.store --keystore-password secretsecret --location converted001.store --alias jboss --summary
Vault (enc-dir=".";keystore="server.store") converted to credential store "converted001.store"
Vault Conversion summary:
--------------------------------------
Vault Conversion Successful
CLI command to add new credential store:
/subsystem=elytron/credential-store=cs:add(relative-to=jboss.server.data.dir,location="converted001.store",implementation-properties={},credential-reference={clear-text="MASK-2hKo56F1a3jYGnJwhPmiF5;12345678;34"})
{code}
was:
Converted storage file overwrites existing file on filesystem.
Expected behaviour is error or some option which can enable overwriting (flag option?).
*How to reproduce:*
download all attachments to same location as *wildfly-elytron-tool.jar* file and then run this command twice and the each one ends with success.
{code}
java -jar wildfly-elytron-tool.jar vault --enc-dir . --keystore server.store --keystore-password secretsecret --location converted001.store --alias jboss --summary
Vault (enc-dir=".";keystore="server.store") converted to credential store "converted001.store"
Vault Conversion summary:
--------------------------------------
Vault Conversion Successful
CLI command to add new credential store:
/subsystem=elytron/credential-store=cs:add(relative-to=jboss.server.data.dir,location="converted001.store",implementation-properties={},credential-reference={clear-text="MASK-2hKo56F1a3jYGnJwhPmiF5;12345678;34"})
{code}
> WildFly Elytron Tool, Converted storage file overwrites existing file on filesystem.
> ------------------------------------------------------------------------------------
>
> Key: ELY-1123
> URL: https://issues.jboss.org/browse/ELY-1123
> Project: WildFly Elytron
> Issue Type: Bug
> Components: Credential Store
> Reporter: Hynek Švábek
> Assignee: Ilia Vassilev
>
> Vault command: converted storage file overwrites existing file on filesystem.
> Expected behaviour is error or some option which can enable overwriting (flag option?).
> *How to reproduce:*
> download all attachments to same location as *wildfly-elytron-tool.jar* file and then run this command twice and the each one ends with success.
> {code}
> java -jar wildfly-elytron-tool.jar vault --enc-dir . --keystore server.store --keystore-password secretsecret --location converted001.store --alias jboss --summary
> Vault (enc-dir=".";keystore="server.store") converted to credential store "converted001.store"
> Vault Conversion summary:
> --------------------------------------
> Vault Conversion Successful
> CLI command to add new credential store:
> /subsystem=elytron/credential-store=cs:add(relative-to=jboss.server.data.dir,location="converted001.store",implementation-properties={},credential-reference={clear-text="MASK-2hKo56F1a3jYGnJwhPmiF5;12345678;34"})
> {code}
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
7 years, 8 months
[JBoss JIRA] (ELY-1123) WildFly Elytron Tool, Vault command: converted storage file overwrites existing file on filesystem.
by Hynek Švábek (JIRA)
[ https://issues.jboss.org/browse/ELY-1123?page=com.atlassian.jira.plugin.s... ]
Hynek Švábek updated ELY-1123:
------------------------------
Summary: WildFly Elytron Tool, Vault command: converted storage file overwrites existing file on filesystem. (was: WildFly Elytron Tool, Converted storage file overwrites existing file on filesystem.)
> WildFly Elytron Tool, Vault command: converted storage file overwrites existing file on filesystem.
> ---------------------------------------------------------------------------------------------------
>
> Key: ELY-1123
> URL: https://issues.jboss.org/browse/ELY-1123
> Project: WildFly Elytron
> Issue Type: Bug
> Components: Credential Store
> Reporter: Hynek Švábek
> Assignee: Ilia Vassilev
>
> Vault command: converted storage file overwrites existing file on filesystem.
> Expected behaviour is error or some option which can enable overwriting (flag option?).
> *How to reproduce:*
> download all attachments to same location as *wildfly-elytron-tool.jar* file and then run this command twice and the each one ends with success.
> {code}
> java -jar wildfly-elytron-tool.jar vault --enc-dir . --keystore server.store --keystore-password secretsecret --location converted001.store --alias jboss --summary
> Vault (enc-dir=".";keystore="server.store") converted to credential store "converted001.store"
> Vault Conversion summary:
> --------------------------------------
> Vault Conversion Successful
> CLI command to add new credential store:
> /subsystem=elytron/credential-store=cs:add(relative-to=jboss.server.data.dir,location="converted001.store",implementation-properties={},credential-reference={clear-text="MASK-2hKo56F1a3jYGnJwhPmiF5;12345678;34"})
> {code}
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
7 years, 8 months
[JBoss JIRA] (ELY-1125) WildFly Elytron Tool, Omitting --location leads to wrong credential store storage file in tool output and in summary output.
by Hynek Švábek (JIRA)
[ https://issues.jboss.org/browse/ELY-1125?page=com.atlassian.jira.plugin.s... ]
Hynek Švábek updated ELY-1125:
------------------------------
Description:
Omitting --location for Vault command leads to wrong credential store storage file in tool output and in summary output.
In this case when is omitted --location
* tool output contains credential store storage file name with "enc-dir" path prefix.
* summary output contains in location double slash in case of enc-dir value ends by slash
*Expected behaviour:*
Tool output must show only storage file name.
Summary output must not contain double slash in location
*How to reproduce*
Download all attachments to same location as wildfly-elytron-tool.jar
option --location must be omitted, --enc-dir must end by slash.
{code}
[hsvabek@dhcp-10-40-5-100 003]$ java -jar wildfly-elytron-tool.jar vault --enc-dir ./ --keystore server.store --keystore-password secretsecret --alias jboss -f
Vault (enc-dir="./";keystore="server.store") converted to credential store ".//converted-vault.cr-store"
Vault Conversion summary:
--------------------------------------
Vault Conversion Successful
CLI command to add new credential store:
/subsystem=elytron/credential-store=cs:add(relative-to=jboss.server.data.dir,location=".//converted-vault.cr-store",implementation-properties={},credential-reference={clear-text="MASK-13KrO2ZNhwNg3UxmIt.02D;12345678;23"})
{code}
Now you can see *".//converted-vault.cr-store"* on tool output right value is *"converted-vault.cr-store"*
and location=*".//converted-vault.cr-store"* in summary output for which is correct value *"./converted-vault.cr-store"*.
was:
Omitting --location leads to wrong credential store storage file in tool output and in summary output.
In this case when is omitted --location
* tool output contains credential store storage file name with "enc-dir" path prefix.
* summary output contains in location double slash in case of enc-dir value ends by slash
*Expected behaviour:*
Tool output must show only storage file name.
Summary output must not contain double slash in location
*How to reproduce*
Download all attachments to same location as wildfly-elytron-tool.jar
option --location must be omitted, --enc-dir must end by slash.
{code}
[hsvabek@dhcp-10-40-5-100 003]$ java -jar wildfly-elytron-tool.jar vault --enc-dir ./ --keystore server.store --keystore-password secretsecret --alias jboss -f
Vault (enc-dir="./";keystore="server.store") converted to credential store ".//converted-vault.cr-store"
Vault Conversion summary:
--------------------------------------
Vault Conversion Successful
CLI command to add new credential store:
/subsystem=elytron/credential-store=cs:add(relative-to=jboss.server.data.dir,location=".//converted-vault.cr-store",implementation-properties={},credential-reference={clear-text="MASK-13KrO2ZNhwNg3UxmIt.02D;12345678;23"})
{code}
Now you can see *".//converted-vault.cr-store"* on tool output right value is *"converted-vault.cr-store"*
and location=*".//converted-vault.cr-store"* in summary output for which is correct value *"./converted-vault.cr-store"*.
> WildFly Elytron Tool, Omitting --location leads to wrong credential store storage file in tool output and in summary output.
> ----------------------------------------------------------------------------------------------------------------------------
>
> Key: ELY-1125
> URL: https://issues.jboss.org/browse/ELY-1125
> Project: WildFly Elytron
> Issue Type: Bug
> Components: Credential Store
> Reporter: Hynek Švábek
> Assignee: Ilia Vassilev
>
> Omitting --location for Vault command leads to wrong credential store storage file in tool output and in summary output.
> In this case when is omitted --location
> * tool output contains credential store storage file name with "enc-dir" path prefix.
> * summary output contains in location double slash in case of enc-dir value ends by slash
> *Expected behaviour:*
> Tool output must show only storage file name.
> Summary output must not contain double slash in location
> *How to reproduce*
> Download all attachments to same location as wildfly-elytron-tool.jar
> option --location must be omitted, --enc-dir must end by slash.
> {code}
> [hsvabek@dhcp-10-40-5-100 003]$ java -jar wildfly-elytron-tool.jar vault --enc-dir ./ --keystore server.store --keystore-password secretsecret --alias jboss -f
> Vault (enc-dir="./";keystore="server.store") converted to credential store ".//converted-vault.cr-store"
> Vault Conversion summary:
> --------------------------------------
> Vault Conversion Successful
> CLI command to add new credential store:
> /subsystem=elytron/credential-store=cs:add(relative-to=jboss.server.data.dir,location=".//converted-vault.cr-store",implementation-properties={},credential-reference={clear-text="MASK-13KrO2ZNhwNg3UxmIt.02D;12345678;23"})
> {code}
> Now you can see *".//converted-vault.cr-store"* on tool output right value is *"converted-vault.cr-store"*
> and location=*".//converted-vault.cr-store"* in summary output for which is correct value *"./converted-vault.cr-store"*.
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
7 years, 8 months
[JBoss JIRA] (ELY-1125) WildFly Elytron Tool, Omitting --location for Vault command leads to wrong credential store storage file in tool output and in summary output.
by Hynek Švábek (JIRA)
[ https://issues.jboss.org/browse/ELY-1125?page=com.atlassian.jira.plugin.s... ]
Hynek Švábek updated ELY-1125:
------------------------------
Summary: WildFly Elytron Tool, Omitting --location for Vault command leads to wrong credential store storage file in tool output and in summary output. (was: WildFly Elytron Tool, Omitting --location leads to wrong credential store storage file in tool output and in summary output.)
> WildFly Elytron Tool, Omitting --location for Vault command leads to wrong credential store storage file in tool output and in summary output.
> ----------------------------------------------------------------------------------------------------------------------------------------------
>
> Key: ELY-1125
> URL: https://issues.jboss.org/browse/ELY-1125
> Project: WildFly Elytron
> Issue Type: Bug
> Components: Credential Store
> Reporter: Hynek Švábek
> Assignee: Ilia Vassilev
>
> Omitting --location for Vault command leads to wrong credential store storage file in tool output and in summary output.
> In this case when is omitted --location
> * tool output contains credential store storage file name with "enc-dir" path prefix.
> * summary output contains in location double slash in case of enc-dir value ends by slash
> *Expected behaviour:*
> Tool output must show only storage file name.
> Summary output must not contain double slash in location
> *How to reproduce*
> Download all attachments to same location as wildfly-elytron-tool.jar
> option --location must be omitted, --enc-dir must end by slash.
> {code}
> [hsvabek@dhcp-10-40-5-100 003]$ java -jar wildfly-elytron-tool.jar vault --enc-dir ./ --keystore server.store --keystore-password secretsecret --alias jboss -f
> Vault (enc-dir="./";keystore="server.store") converted to credential store ".//converted-vault.cr-store"
> Vault Conversion summary:
> --------------------------------------
> Vault Conversion Successful
> CLI command to add new credential store:
> /subsystem=elytron/credential-store=cs:add(relative-to=jboss.server.data.dir,location=".//converted-vault.cr-store",implementation-properties={},credential-reference={clear-text="MASK-13KrO2ZNhwNg3UxmIt.02D;12345678;23"})
> {code}
> Now you can see *".//converted-vault.cr-store"* on tool output right value is *"converted-vault.cr-store"*
> and location=*".//converted-vault.cr-store"* in summary output for which is correct value *"./converted-vault.cr-store"*.
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
7 years, 8 months