[jboss-jira] [JBoss JIRA] (ELY-1254) Elytron client configuration file throws ConfigXMLParseException when credential key-store-reference is used

[Ondrej Lukas (JIRA)]

Ondrej Lukas created ELY-1254:
---------------------------------

             Summary: Elytron client configuration file throws ConfigXMLParseException when credential key-store-reference is used
                 Key: ELY-1254
                 URL: https://issues.jboss.org/browse/ELY-1254
             Project: WildFly Elytron
          Issue Type: Bug
            Reporter: Ondrej Lukas
            Assignee: Darran Lofthouse
            Priority: Blocker


When Elytron client configuration file includes configuration.authentication-client.authentication-configurations.configuration.credentials.key-store-reference element then ConfigXMLParseException is thrown during parsing of configuration file. This issue can be caused by JBEAP-11691.

For following configuration file:
{code}
<configuration>
    <authentication-client xmlns="urn:elytron:1.0">
        <authentication-rules>
            <rule use-configuration="default"/>
        </authentication-rules>
        <authentication-configurations>
            <configuration name="default">
                <sasl-mechanism-selector selector="PLAIN"/>
                <credentials>
                    <key-store-reference key-store-name="clientKeyStore">
                        <key-store-clear-password password="secret"/>
                    </key-store-reference>
                </credentials>
                <providers>
                    <use-service-loader/>
                </providers>
            </configuration>
        </authentication-configurations>
        <key-stores>
            <key-store name="clientKeyStore" type="JKS">
                <file name="/path/to/some/client.keystore"/>
                <key-store-clear-password password="secretKeyStore"/>
            </key-store>
        </key-stores>
    </authentication-client>
</configuration>
{code}

following exception is thrown:
{code}
org.wildfly.client.config.ConfigXMLParseException: ELY01135: Failed to load keystore data
	at file:/path/to/some/wildfly-config.xml:10:74
	at org.wildfly.security.auth.client.ElytronXmlParser.lambda$parseKeyStoreRefType$41(ElytronXmlParser.java:1448)
	at org.wildfly.security.auth.client.ElytronXmlParser.lambda$parseCredentialsType$25(ElytronXmlParser.java:932)
	at org.wildfly.security.auth.client.ElytronXmlParser.lambda$andThenOp$23(ElytronXmlParser.java:919)
	at org.wildfly.security.auth.client.ElytronXmlParser.lambda$parseCredentialsType$35(ElytronXmlParser.java:986)
	at org.wildfly.security.auth.client.ElytronXmlParser.lambda$parseAuthenticationConfigurationType$18(ElytronXmlParser.java:715)
	at org.wildfly.security.auth.client.ElytronXmlParser.lambda$andThenOp$23(ElytronXmlParser.java:919)
	at org.wildfly.security.auth.client.ElytronXmlParser.lambda$parseAuthenticationConfigurationType$22(ElytronXmlParser.java:763)
	at org.wildfly.security.auth.client.ElytronXmlParser.lambda$parseAuthenticationRuleType$7(ElytronXmlParser.java:599)
	at org.wildfly.security.auth.client.ElytronXmlParser.lambda$parseRulesType$8(ElytronXmlParser.java:623)
	at org.wildfly.security.auth.client.ElytronXmlParser.parseAuthenticationClientType(ElytronXmlParser.java:323)
	at org.wildfly.security.auth.client.ElytronXmlParser.parseAuthenticationClientConfiguration(ElytronXmlParser.java:185)
	at org.wildfly.security.auth.client.ElytronXmlParser.parseAuthenticationClientConfiguration(ElytronXmlParser.java:146)
	at org.wildfly.security.auth.client.DefaultAuthenticationContextProvider.lambda$static$0(DefaultAuthenticationContextProvider.java:38)
	... 18 more
Caused by: java.security.NoSuchAlgorithmException: ELY08028: Invalid algorithm "clear"
	at org.wildfly.security.password.PasswordFactory.getInstance(PasswordFactory.java:121)
	at org.wildfly.security.password.PasswordFactory.getInstance(PasswordFactory.java:75)
	at org.wildfly.security.auth.client.ElytronXmlParser.lambda$parseKeyStoreRefType$41(ElytronXmlParser.java:1423)
	... 30 more
{code}

It seems that mentioned configuration file does not result to ConfigXMLParseException in EAP 7.1.0.DR19.

We request blocker flag since using key-store-reference as credentials in configuration is not possible in Elytron client configuration file which breaks feature in RFE EAP7-567 Client Side Security (Elytron Client).



--
This message was sent by Atlassian JIRA
(v7.2.3#72005)