[jboss-jira] [JBoss JIRA] (WFCORE-2421) CS tool generated different MASKED password then vault.sh
Peter Skopek (JIRA)
issues at jboss.org
Tue Mar 28 04:17:00 EDT 2017
[ https://issues.jboss.org/browse/WFCORE-2421?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Peter Skopek reassigned WFCORE-2421:
------------------------------------
Fix Version/s: 3.0.0.Beta12
Assignee: Peter Skopek (was: Darran Lofthouse)
Resolution: Done
> CS tool generated different MASKED password then vault.sh
> ---------------------------------------------------------
>
> Key: WFCORE-2421
> URL: https://issues.jboss.org/browse/WFCORE-2421
> Project: WildFly Core
> Issue Type: Bug
> Components: Security
> Reporter: Hynek Švábek
> Assignee: Peter Skopek
> Fix For: 3.0.0.Beta12
>
>
> CS tool generated different MASKED password then vault.sh
> When I run oldf vault.sh
> {code}
> ./vault.sh --keystore key.store --keystore-password secret_password --alias Vault --vault-block vaultBlock --attribute passDB --sec-attr secretvalue --enc-dir ./vault --iteration 230 --salt 12345678 -t
> {code}
> I can see this *MASK-1GhfMaq4jSY0.kFFU3QG4T*
> Whole output:
> {code:collapse=true}
> <vault>
> <vault-option name="KEYSTORE_URL" value="key.store"/>
> <vault-option name="KEYSTORE_PASSWORD" value="MASK-1GhfMaq4jSY0.kFFU3QG4T"/>
> <vault-option name="KEYSTORE_ALIAS" value="Vault"/>
> <vault-option name="SALT" value="12345678"/>
> <vault-option name="ITERATION_COUNT" value="230"/>
> <vault-option name="ENC_FILE_DIR" value="./vault/"/>
> </vault><management>
> {code}
> In the other hand when I run new CS tool with params:
> {code}
> java -jar wildfly-elytron-tool.jar credential-store --add myalias --secret secretpassword --location="test.store1" --uri "cr-store://test.store?modifiable=true;create=true;keyStoreType=JCEKS" --password secret_password --summary --salt 12345678 --iteration 230 --create
> {code}
> I get *MASK-KAwLfD1BN8WFhZptWsa17G*
> Whole output:
> {code:collapse=true}
> Alias "myalias" has been successfully stored
> Credential store command summary:
> --------------------------------------
> /subsystem=elytron/credential-store=test:add(uri="cr-store://test.store?modifiable=true;create=true;keyStoreType=JCEKS",relative-to=jboss.server.data.dir,credential-reference={clear-text="MASK-KAwLfD1BN8WFhZptWsa17G==;12345678;230"})
> {code}
> *I set these values for both:*
> password to mask *secret_password*
> iteration *12345678*
> salt *230*
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
More information about the jboss-jira
mailing list