Uploaded image for project: 'WildFly Core'
  1. WildFly Core
  2. WFCORE-3088

Alias from dependent credential store is not avalaible on server start

    Details

    • Type: Bug
    • Status: Resolved (View Workflow)
    • Priority: Critical
    • Resolution: Done
    • Affects Version/s: 3.0.0.Beta28
    • Fix Version/s: 3.0.0.Beta29
    • Component/s: Security
    • Labels:
      None
    • Steps to Reproduce:
      Hide
      git clone git@gitlab.mw.lab.eng.bos.redhat.com:jbossqe-eap/tests-security.git
      cd tests-security/fips
      
      ./build-fips.sh clean test   -Dversion.jboss.bom=7.1.0.Beta1 -Dversion.wildfly.core=3.0.0.Beta26-redhat-1 -Dmaven.repo.local=/home/mchoma/workspace/eap-versions/7.1.0.ER1/jboss-eap-7.1.0.Beta1-maven-repository/maven-repository   -Djboss.dist.zip=/home/mchoma/workspace/eap-versions/7.1.0.ER1/jboss-eap-7.1.0.ER1.zip   -Dfips.java.home=/usr/java/jdk1.8.0_66_fips_mode/jre -fae -Dmaven.test.failure.ignore=true -Dtest=ExternalCsTestCase -DtestLogToFile=false
      
      Show
      git clone git@gitlab.mw.lab.eng.bos.redhat.com:jbossqe-eap/tests-security.git cd tests-security/fips ./build-fips.sh clean test -Dversion.jboss.bom=7.1.0.Beta1 -Dversion.wildfly.core=3.0.0.Beta26-redhat-1 -Dmaven.repo.local=/home/mchoma/workspace/eap-versions/7.1.0.ER1/jboss-eap-7.1.0.Beta1-maven-repository/maven-repository -Djboss.dist.zip=/home/mchoma/workspace/eap-versions/7.1.0.ER1/jboss-eap-7.1.0.ER1.zip -Dfips.java.home=/usr/java/jdk1.8.0_66_fips_mode/jre -fae -Dmaven.test.failure.ignore= true -Dtest=ExternalCsTestCase -DtestLogToFile= false

      Description

      Testing BouncyCastle external store. Intermittently (25% in lab, 0% locally) it happens alias from dependent credential store is not avalaible on server start.

      Could that be problem of "late" required service start?

      Although, I don't see similar problem with default JKES credential store, neither PKCS11 external credential store. PKCS11 store is however special case, because is loaded once per jvm.

      Could that be problem of external credential store with file based keystore?

      [1] https://jenkins.hosts.mwqe.eng.bos.redhat.com/hudson/view/EAP7/view/EAP7-Security/view/EAP-7.x-FIPS-mode/job/eap-7x-security-fips-matrix/156/testReport/

        Gliffy Diagrams

          Attachments

            Issue Links

              Activity

                People

                • Assignee:
                  honza889 Jan Kalina
                  Reporter:
                  honza889 Jan Kalina
                  Need Info from:
                  Peter Škopek
                • Votes:
                  0 Vote for this issue
                  Watchers:
                  1 Start watching this issue

                  Dates

                  • Created:
                    Updated:
                    Resolved: