[Red Hat JIRA] (WFWIP-376) The error message from import-secret-key on (secret-key-)credential-store should be more helpful
by Ondrej Kotek (Jira)
[ https://issues.redhat.com/browse/WFWIP-376?page=com.atlassian.jira.plugin... ]
Ondrej Kotek updated WFWIP-376:
-------------------------------
Description:
The error message from the {{import-secret-key}} operation on the {{credential store}} resourece should be more helpful when importing invalid key (truncated in this case)
{noformat}
[standalone@localhost:9990 /] /subsystem=elytron/credential-store=a:import-secret-key(alias=a2,key=RUxZA)
{
"outcome" => "failed",
"failure-description" => "COM00501: Expected padding",
"rolled-back" => true
}
{noformat}
The same message appears when loading a file with a corrupted key.
was:
The error message from the {{import-secret-key}} operation on the {{credential store}} resourece should be more helpful when importing invalid key (truncated in this case)
{noformat}
[standalone@localhost:9990 /] /subsystem=elytron/credential-store=a:import-secret-key(alias=a2,key=RUxZA)
{
"outcome" => "failed",
"failure-description" => "COM00501: Expected padding",
"rolled-back" => true
}
{noformat}
> The error message from import-secret-key on (secret-key-)credential-store should be more helpful
> ------------------------------------------------------------------------------------------------
>
> Key: WFWIP-376
> URL: https://issues.redhat.com/browse/WFWIP-376
> Project: WildFly WIP
> Issue Type: Bug
> Components: Security
> Reporter: Ondrej Kotek
> Assignee: Darran Lofthouse
> Priority: Critical
>
> The error message from the {{import-secret-key}} operation on the {{credential store}} resourece should be more helpful when importing invalid key (truncated in this case)
> {noformat}
> [standalone@localhost:9990 /] /subsystem=elytron/credential-store=a:import-secret-key(alias=a2,key=RUxZA)
> {
> "outcome" => "failed",
> "failure-description" => "COM00501: Expected padding",
> "rolled-back" => true
> }
> {noformat}
> The same message appears when loading a file with a corrupted key.
--
This message was sent by Atlassian Jira
(v8.13.1#813001)
5 years, 1 month
[Red Hat JIRA] (WFWIP-376) The error message from import-secret-key on (secret-key-)credential-store should be more helpful
by Ondrej Kotek (Jira)
[ https://issues.redhat.com/browse/WFWIP-376?page=com.atlassian.jira.plugin... ]
Ondrej Kotek updated WFWIP-376:
-------------------------------
Summary: The error message from import-secret-key on (secret-key-)credential-store should be more helpful (was: The error message from import-secret-key on credential store should be more helpful)
> The error message from import-secret-key on (secret-key-)credential-store should be more helpful
> ------------------------------------------------------------------------------------------------
>
> Key: WFWIP-376
> URL: https://issues.redhat.com/browse/WFWIP-376
> Project: WildFly WIP
> Issue Type: Bug
> Components: Security
> Reporter: Ondrej Kotek
> Assignee: Darran Lofthouse
> Priority: Critical
>
> The error message from the {{import-secret-key}} operation on the {{credential store}} resourece should be more helpful when importing invalid key (truncated in this case)
> {noformat}
> [standalone@localhost:9990 /] /subsystem=elytron/credential-store=a:import-secret-key(alias=a2,key=RUxZA)
> {
> "outcome" => "failed",
> "failure-description" => "COM00501: Expected padding",
> "rolled-back" => true
> }
> {noformat}
--
This message was sent by Atlassian Jira
(v8.13.1#813001)
5 years, 1 month
[Red Hat JIRA] (WFWIP-377) Incosistency in naming of location/path attribute of credential-store and secret-key-credential-store
by Darran Lofthouse (Jira)
[ https://issues.redhat.com/browse/WFWIP-377?page=com.atlassian.jira.plugin... ]
Darran Lofthouse commented on WFWIP-377:
----------------------------------------
As I mentioned in chat I would be more inclined to deprecate the location attribute on credential-store and switch both to use path - this would be consistent with other resources in the subsystem which pair relative-to with path instead of location.
> Incosistency in naming of location/path attribute of credential-store and secret-key-credential-store
> -----------------------------------------------------------------------------------------------------
>
> Key: WFWIP-377
> URL: https://issues.redhat.com/browse/WFWIP-377
> Project: WildFly WIP
> Issue Type: Bug
> Components: Security
> Reporter: Ondrej Kotek
> Assignee: Darran Lofthouse
> Priority: Major
>
> In the Elytron subsystem, the {{secret-key-credential-store}} resource has the {{path}} attribute which is inconsistent with the {{credential-store}} resource with the {{location}} attribute.
> The rest of the subsystem we have tried to stick to {{path}} and {{relative-to}} as a common pair. Maybe we could deprecate {{location}} on {{credential-store}} and add path there.
--
This message was sent by Atlassian Jira
(v8.13.1#813001)
5 years, 1 month
[Red Hat JIRA] (WFWIP-377) Incosistency in naming of location/path attribute of credential-store and secret-key-credential-store
by Ondrej Kotek (Jira)
Ondrej Kotek created WFWIP-377:
----------------------------------
Summary: Incosistency in naming of location/path attribute of credential-store and secret-key-credential-store
Key: WFWIP-377
URL: https://issues.redhat.com/browse/WFWIP-377
Project: WildFly WIP
Issue Type: Bug
Components: Security
Reporter: Ondrej Kotek
Assignee: Darran Lofthouse
In the Elytron subsystem, the {{secret-key-credential-store}} resource has the {{path}} attribute which is inconsistent with the {{credential-store}} resource with the {{location}} attribute.
The rest of the subsystem we have tried to stick to {{path}} and {{relative-to}} as a common pair. Maybe we could deprecate {{location}} on {{credential-store}} and add path there.
--
This message was sent by Atlassian Jira
(v8.13.1#813001)
5 years, 1 month
[Red Hat JIRA] (WFWIP-376) The error message from import-secret-key on credential store should be more helpful
by Darran Lofthouse (Jira)
[ https://issues.redhat.com/browse/WFWIP-376?page=com.atlassian.jira.plugin... ]
Darran Lofthouse updated WFWIP-376:
-----------------------------------
Priority: Critical (was: Major)
> The error message from import-secret-key on credential store should be more helpful
> -----------------------------------------------------------------------------------
>
> Key: WFWIP-376
> URL: https://issues.redhat.com/browse/WFWIP-376
> Project: WildFly WIP
> Issue Type: Bug
> Components: Security
> Reporter: Ondrej Kotek
> Assignee: Darran Lofthouse
> Priority: Critical
>
> The error message from the {{import-secret-key}} operation on the {{credential store}} resourece should be more helpful when importing invalid key (truncated in this case)
> {noformat}
> [standalone@localhost:9990 /] /subsystem=elytron/credential-store=a:import-secret-key(alias=a2,key=RUxZA)
> {
> "outcome" => "failed",
> "failure-description" => "COM00501: Expected padding",
> "rolled-back" => true
> }
> {noformat}
--
This message was sent by Atlassian Jira
(v8.13.1#813001)
5 years, 1 month
[Red Hat JIRA] (WFWIP-376) The error message from import-secret-key on credential store should be more helpful
by Darran Lofthouse (Jira)
[ https://issues.redhat.com/browse/WFWIP-376?page=com.atlassian.jira.plugin... ]
Darran Lofthouse commented on WFWIP-376:
----------------------------------------
Adding to my priorities as should be a simple fix to report a more meaningful error.
> The error message from import-secret-key on credential store should be more helpful
> -----------------------------------------------------------------------------------
>
> Key: WFWIP-376
> URL: https://issues.redhat.com/browse/WFWIP-376
> Project: WildFly WIP
> Issue Type: Bug
> Components: Security
> Reporter: Ondrej Kotek
> Assignee: Darran Lofthouse
> Priority: Critical
>
> The error message from the {{import-secret-key}} operation on the {{credential store}} resourece should be more helpful when importing invalid key (truncated in this case)
> {noformat}
> [standalone@localhost:9990 /] /subsystem=elytron/credential-store=a:import-secret-key(alias=a2,key=RUxZA)
> {
> "outcome" => "failed",
> "failure-description" => "COM00501: Expected padding",
> "rolled-back" => true
> }
> {noformat}
--
This message was sent by Atlassian Jira
(v8.13.1#813001)
5 years, 1 month
[Red Hat JIRA] (WFWIP-376) The error message from import-secret-key on credential store should be more helpful
by Ondrej Kotek (Jira)
Ondrej Kotek created WFWIP-376:
----------------------------------
Summary: The error message from import-secret-key on credential store should be more helpful
Key: WFWIP-376
URL: https://issues.redhat.com/browse/WFWIP-376
Project: WildFly WIP
Issue Type: Bug
Components: Security
Reporter: Ondrej Kotek
Assignee: Darran Lofthouse
The error message from the {{import-secret-key}} operation on the {{credential store}} resourece should be more helpful when importing invalid key (truncated in this case)
{noformat}
[standalone@localhost:9990 /] /subsystem=elytron/credential-store=a:import-secret-key(alias=a2,key=RUxZA)
{
"outcome" => "failed",
"failure-description" => "COM00501: Expected padding",
"rolled-back" => true
}
{noformat}
--
This message was sent by Atlassian Jira
(v8.13.1#813001)
5 years, 1 month
[Red Hat JIRA] (WFWIP-375) remove-alias on credential-store removes all entries for the given alias
by Darran Lofthouse (Jira)
[ https://issues.redhat.com/browse/WFWIP-375?page=com.atlassian.jira.plugin... ]
Darran Lofthouse commented on WFWIP-375:
----------------------------------------
I think this is another one I will prioritise to avoid the loss of previously stored credentials.
> remove-alias on credential-store removes all entries for the given alias
> ------------------------------------------------------------------------
>
> Key: WFWIP-375
> URL: https://issues.redhat.com/browse/WFWIP-375
> Project: WildFly WIP
> Issue Type: Bug
> Components: Security
> Reporter: Ondrej Kotek
> Assignee: Darran Lofthouse
> Priority: Critical
>
> The {{remove-alias}} operation of the {{credential-store}} resource removes all entries for the given alias, not just one entry according to the given type.
> {noformat}
> [standalone@localhost:9990 /] /subsystem=elytron/credential-store=a:add-alias(alias=a2,secret-value=a2)
> {"outcome" => "success"}
> [standalone@localhost:9990 /] /subsystem=elytron/credential-store=a:remove-alias(alias=a2,entry-type=SecretKeyCredential)
> {
> "outcome" => "failed",
> "failure-description" => "WFLYELY00920: Credential alias 'a2' of credential type 'SecretKeyCredential' does not exist in the store",
> "rolled-back" => true
> }
>
> [standalone@localhost:9990 /] /subsystem=elytron/credential-store=a:generate-secret-key(alias=a2)
> {"outcome" => "success"}
> [standalone@localhost:9990 /] /subsystem=elytron/credential-store=a:remove-alias(alias=a2,entry-type=SecretKeyCredential)
> {
> "outcome" => "success",
> "response-headers" => {"warnings" => [{
> "warning" => "Update dependent resources as alias 'a2' does not exist anymore",
> "level" => "WARNING",
> "operation" => {
> "address" => [
> ("subsystem" => "elytron"),
> ("credential-store" => "a")
> ],
> "operation" => "remove-alias"
> }
> }]}
> }
> [standalone@localhost:9990 /] /subsystem=elytron/credential-store=a:add-alias(alias=a2,secret-value=a2)
> {"outcome" => "success"}
> {noformat}
--
This message was sent by Atlassian Jira
(v8.13.1#813001)
5 years, 1 month