[jboss-jira] [JBoss JIRA] (WFLY-7522) Definition Elytron key-manager with key-store (which needs password) without filled credential-reference causes ugly failure-description with senseless Exception.

Hynek Švábek (JIRA) issues at jboss.org
Tue Nov 8 10:40:07 EST 2016


Hynek Švábek created WFLY-7522:
----------------------------------

             Summary: Definition Elytron key-manager with key-store (which needs password) without filled credential-reference causes ugly failure-description with senseless Exception.
                 Key: WFLY-7522
                 URL: https://issues.jboss.org/browse/WFLY-7522
             Project: WildFly
          Issue Type: Bug
          Components: Security
            Reporter: Hynek Švábek
            Assignee: Darran Lofthouse


Definition Elytron key-manager with key-store (which needs password) without filled credential-reference causes ugly failure-description with senseless Exception.


*Steps to reproduce*
* firefly.keystore which is attached copy to eap_home/standalone/data/cs.
* /subsystem=elytron/key-store=ff001:add(path=cs/firefly.keystore,relative-to=jboss.server.data.dir,type=JKS,credential-reference= {clear-text=Elytron})
*/subsystem=elytron/key-managers=keymanager001:add(algorithm=SunX509, key-store=ff001)
And you get this output:
{code}
{
    "outcome" => "failed",
    "failure-description" => {
        "WFLYCTL0080: Failed services" => {"org.wildfly.security.key-managers.km002" => "org.jboss.msc.service.StartException in service org.wildfly.security.key-managers.km002: Failed to start service
    Caused by: java.lang.NullPointerException"},
        "WFLYCTL0412: Required services that are not installed:" => ["org.wildfly.security.key-managers.km002"],
        "WFLYCTL0180: Services with missing/unavailable dependencies" => undefined
    },
    "rolled-back" => true
}
{code}
There must be some kind of information about missing credential-reference or at least missing (wrong) password to key-store.



When I add there credential-reference with pass to Key-store then operation passes
/subsystem=elytron/key-managers=keymanager001:add(algorithm=SunX509, key-store=ff001, credential-reference={clear-text=Elytron})


*Suggestions to improvement*
failure-description must not contain Exception or snippet stacktrace.
Please replace WFLYCTL0080 part to better message.
e.g. "credential-reference is required", "Missing password to key-store access"




--
This message was sent by Atlassian JIRA
(v7.2.3#72005)



More information about the jboss-jira mailing list