[jboss-jira] [JBoss JIRA] (WFLY-9467) Credential store type PKCS12 works fine when using OracleJDK and OpenJDK but doesn't work using IBM JDK.

Hynek Švábek (JIRA) issues at jboss.org
Mon Oct 23 09:49:01 EDT 2017


     [ https://issues.jboss.org/browse/WFLY-9467?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Hynek Švábek updated WFLY-9467:
-------------------------------
    Steps to Reproduce: 
* {code}/subsystem=elytron/credential-store=cs001:add(create=true, location=cs001.pkcs12, relative-to=jboss.server.data.dir, implementation-properties={keyStoreType=PKCS12},credential-reference={clear-text=pass123}){code}
* {code}/subsystem=elytron/credential-store=cs001:add-alias(alias=alias001, secret-value=alias001secret){code}
Then it is enough call same CLI command again (tou can call remove-alias, ..)
*  {code}/subsystem=elytron/credential-store=cs001:add-alias(alias=alias001, secret-value=alias001secret){code}
{code}
{
    "outcome" => "failed",
    "result" => undefined,
    "failure-description" => "WFLYCTL0158: Operation handler failed: java.lang.RuntimeException: WFLYELY00009: Unable to complete operation. 'ELY09504: Cannot acquire a credential from the credential store->Get Key failed: 1.2.840.113549.1.7.1 SecretKeyFactory not available->1.2.840.113549.1.7.1 SecretKeyFactory not available'",
    "rolled-back" => true
}
{code}
*We expects here message about Alias already exists in the store*


  was:
* {code}/subsystem=elytron/credential-store=cs001:add(create=true, location=cs001.pkcs12, relative-to=jboss.server.data.dir, implementation-properties={keyStoreType=PKCS12},credential-reference={clear-text=pass123}){code}
* {code}/subsystem=elytron/credential-store=cs001:add-alias(alias=alias001, secret-value=alias001secret){code}
Then it is enough call same CLI command again (tou can call remove-alias, ..)
*  {code}/subsystem=elytron/credential-store=cs001:add-alias(alias=alias001, secret-value=alias001secret){code}
{code}
{
    "outcome" => "failed",
    "result" => undefined,
    "failure-description" => "WFLYCTL0158: Operation handler failed: java.lang.RuntimeException: WFLYELY00009: Unable to complete operation. 'ELY09504: Cannot acquire a credential from the credential store->Get Key failed: 1.2.840.113549.1.7.1 SecretKeyFactory not available->1.2.840.113549.1.7.1 SecretKeyFactory not available'",
    "rolled-back" => true
}
{code}




> Credential store type PKCS12 works fine when using OracleJDK and OpenJDK but doesn't work using IBM JDK.
> --------------------------------------------------------------------------------------------------------
>
>                 Key: WFLY-9467
>                 URL: https://issues.jboss.org/browse/WFLY-9467
>             Project: WildFly
>          Issue Type: Bug
>          Components: Security
>            Reporter: Hynek Švábek
>            Assignee: Darran Lofthouse
>            Priority: Critical
>
> Credential store type PKCS12 works fine when using OracleJDK and OpenJDK.
> Problem occurs when we use IBM JDK.
> {code}
> "WFLYCTL0158: Operation handler failed: java.lang.RuntimeException: WFLYELY00009: Unable to complete operation. 'ELY09504: Cannot acquire a credential from the credential store->Get Key failed: 1.2.840.113549.1.7.1 SecretKeyFactory not available->1.2.840.113549.1.7.1 SecretKeyFactory not available'",
> {code}
> *NOTE*
> I met same problem with Oracle JDK 1.8 u66, with u144 is everythink ok.



--
This message was sent by Atlassian JIRA
(v7.5.0#75005)



More information about the jboss-jira mailing list