]
Darran Lofthouse moved WFLY-7522 to WFCORE-2468:
------------------------------------------------
Project: WildFly Core (was: WildFly)
Key: WFCORE-2468 (was: WFLY-7522)
Component/s: Security
(was: Security)
Fix Version/s: 4.0.0.Alpha1
(was: 11.0.0.Alpha1)
Definition Elytron key-manager with key-store (which needs password)
without filled credential-reference causes ugly failure-description with senseless
Exception.
------------------------------------------------------------------------------------------------------------------------------------------------------------------
Key: WFCORE-2468
URL:
https://issues.jboss.org/browse/WFCORE-2468
Project: WildFly Core
Issue Type: Bug
Components: Security
Reporter: Hynek Švábek
Assignee: Darran Lofthouse
Fix For: 4.0.0.Alpha1
Definition Elytron key-manager with key-store (which needs password) without filled
credential-reference causes ugly failure-description with senseless Exception.
*Steps to reproduce*
* firefly.keystore which is attached copy to eap_home/standalone/data/cs.
*
/subsystem=elytron/key-store=ff001:add(path=cs/firefly.keystore,relative-to=jboss.server.data.dir,type=JKS,credential-reference=
{clear-text=Elytron})
*/subsystem=elytron/key-managers=keymanager001:add(algorithm=SunX509, key-store=ff001)
And you get this output:
{code}
{
"outcome" => "failed",
"failure-description" => {
"WFLYCTL0080: Failed services" =>
{"org.wildfly.security.key-managers.km002" =>
"org.jboss.msc.service.StartException in service
org.wildfly.security.key-managers.km002: Failed to start service
Caused by: java.lang.NullPointerException"},
"WFLYCTL0412: Required services that are not installed:" =>
["org.wildfly.security.key-managers.km002"],
"WFLYCTL0180: Services with missing/unavailable dependencies" =>
undefined
},
"rolled-back" => true
}
{code}
There must be some kind of information about missing credential-reference or at least
missing (wrong) password to key-store.
When I add there credential-reference with pass to Key-store then operation passes
/subsystem=elytron/key-managers=keymanager001:add(algorithm=SunX509, key-store=ff001,
credential-reference={clear-text=Elytron})
*Suggestions to improvement*
failure-description must not contain Exception or snippet stacktrace.
Please replace WFLYCTL0080 part to better message.
e.g. "credential-reference is required", "Missing password to key-store
access"