Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Custom key store not detected in a plain, unused product pack #68

Open
chirangaalwis opened this issue Nov 24, 2020 · 0 comments
Open
Labels

Comments

@chirangaalwis
Copy link
Member

chirangaalwis commented Nov 24, 2020

Description:
When using custom key stores (not with the default wso2carbon.jks file name) for the secret encryption process (using -Dconfigure option), the Cipher tool overrides the key store configurations set in the <PRODUCT_HOME>/repository/conf/security/secret-conf.properties file using the configurations set in the <PRODUCT_HOME>/repository/conf/carbon.xml at the given time.

Thus, any custom key store location path set in the <PRODUCT_HOME>/repository/conf/security/secret-conf.properties in a fresh pack which has not been used before fails, as the initial application of customized key store configurations set in the <PRODUCT_HOME>/repository/conf/deployment.toml to the <PRODUCT_HOME>/repository/conf/carbon.xml happens during the initial execution of the server startup script for the product.

Current workaround:

  • Set the custom key store configurations in the product's main configuration file <PRODUCT_HOME>/repository/conf/deployment.toml
  • Add the custom key stores to the <PRODUCT_HOME>/repository/resources/security directory
  • Execute the product server startup script
  • Set the secrets in the <PRODUCT_HOME>/repository/conf/deployment.toml file
  • Encrypt the secrets using the Cipher tool

Used Product and Version:
WSO2 Identity Server version 5.11.0 Release Candidate 1

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant