Definition Credential Store with existing storage file but with wrong key password causes ugly failure-description. ------------------------------------------------------------------------------------------------------------------- Key: WFCORE-2450 URL: https://issues.jboss.org/browse/WFCORE-2450 Project: WildFly Core Issue Type: Bug Components: Security Reporter: Hynek Švábek Assignee: Darran Lofthouse Fix For: 4.0.0.Alpha1 Definition Credential Store with existing storage file but with wrong key password causes ugly failure-description. *How to reproduce* Prepare credential store file (the easiest way is create credential store from scratch) /subsystem=elytron/credential-store=cs_pass123:add(uri="cr-store://test/cs/ks-pass123.jceks?store.password=pass123;create.storage=true") /subsystem=elytron/credential-store=cs_pass123/alias=dbPass:add(secret-value=passwordToDB) Then I try to create Credential store with wrong key password to existing store file. /subsystem=elytron/credential-store=cs_wrong_key_pass:add(uri="cr-store://test/cs/ks-pass123.jceks?store.password=pass123;key.password=pass456") *I can see this result:* {code} { "outcome" => "failed", "failure-description" => { "WFLYCTL0080: Failed services" => {"org.wildfly.security.credential-store-client.cs_wrong_key_pass" => "org.jboss.msc.service.StartException in service org.wildfly.security.credential-store-client.cs_wrong_key_pass: WFLYELY00004: Unable to start the service. Caused by: org.wildfly.security.credential.store.CredentialStoreException: ELY09506: Cannot read credential storage file '/home/hsvabek/securityworkspace/VERIFICATION/2016_11_02_UX_testing/jboss-eap-7.1.0.DR7/standalone/data/cs/ks-pass123.jceks' for the store named 'cs_wrong_key_pass' Caused by: java.security.UnrecoverableKeyException: Given final block not properly padded"}, "WFLYCTL0412: Required services that are not installed:" => ["org.wildfly.security.credential-store-client.cs_wrong_key_pass"], "WFLYCTL0180: Services with missing/unavailable dependencies" => undefined }, "rolled-back" => true } {code} *Suggestion for solution* failure-description must not contain Exception or snippet stacktrace. Description like that "Password for credential store key is incorrect."