Obfuscated password for Jetty does not work.

Products

• CA Automic Workload Automation - Automation Engine

Issue/Introduction

The AWI does not start with the obfuscated Jetty password.

2023-06-06 07:33:45,405 4d2d-be6e-796c34d5f750 [ERROR] NOLOGIN/- NOUI   [com.uc4.ecc.jetty.JettyServerLauncher] - Unable to start JETTY
java.io.IOException: keystore password was incorrect
	at sun.security.pkcs12.PKCS12KeyStore.engineLoad(PKCS12KeyStore.java:2089)
	at sun.security.provider.KeyStoreDelegator.engineLoad(KeyStoreDelegator.java:238)
	at sun.security.provider.JavaKeyStore$DualFormatJKS.engineLoad(JavaKeyStore.java:71)
	at java.security.KeyStore.load(KeyStore.java:1445)
	at org.eclipse.jetty.util.security.CertificateUtils.getKeyStore(CertificateUtils.java:54)
	at org.eclipse.jetty.util.ssl.SslContextFactory.loadKeyStore(SslContextFactory.java:1203)
	at org.eclipse.jetty.util.ssl.SslContextFactory.load(SslContextFactory.java:322)
	at org.eclipse.jetty.util.ssl.SslContextFactory.doStart(SslContextFactory.java:244)
	at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73)
	at org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:169)
	at org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:117)
	at org.eclipse.jetty.server.SslConnectionFactory.doStart(SslConnectionFactory.java:97)
	at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73)
	at org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:169)
	at org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:117)
	at org.eclipse.jetty.server.AbstractConnector.doStart(AbstractConnector.java:323)
	at org.eclipse.jetty.server.AbstractNetworkConnector.doStart(AbstractNetworkConnector.java:81)
	at org.eclipse.jetty.server.ServerConnector.doStart(ServerConnector.java:234)
	at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73)
	at org.eclipse.jetty.server.Server.doStart(Server.java:401)
	at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73)
	at com.uc4.ecc.jetty.JettyServerLauncher.startServer(JettyServerLauncher.java:119)
	at com.uc4.ecc.jetty.JettyServerLauncher.<init>(JettyServerLauncher.java:68)
	at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
	at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:62)
	at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
	at java.lang.reflect.Constructor.newInstance(Constructor.java:423)
	at com.google.inject.internal.DefaultConstructionProxyFactory$ReflectiveProxy.newInstance(DefaultConstructionProxyFactory.java:126)
	at com.google.inject.internal.ConstructorInjector.provision(ConstructorInjector.java:114)
	at com.google.inject.internal.ConstructorInjector.construct(ConstructorInjector.java:91)
	at com.google.inject.internal.ConstructorBindingImpl$Factory.get(ConstructorBindingImpl.java:306)
	at com.google.inject.internal.ProviderToInternalFactoryAdapter.get(ProviderToInternalFactoryAdapter.java:40)
	at com.google.inject.internal.SingletonScope$1.get(SingletonScope.java:168)
	at com.google.inject.internal.InternalFactoryToProviderAdapter.get(InternalFactoryToProviderAdapter.java:39)
	at com.google.inject.internal.InternalInjectorCreator.loadEagerSingletons(InternalInjectorCreator.java:213)
	at com.google.inject.internal.InternalInjectorCreator.injectDynamically(InternalInjectorCreator.java:184)
	at com.google.inject.internal.InternalInjectorCreator.build(InternalInjectorCreator.java:111)
	at com.google.inject.internal.InjectorImpl.createChildInjector(InjectorImpl.java:246)
	at com.uc4.ecc.framework.core.inject.OsgiInjectorFactory.createInjector(OsgiInjectorFactory.java:83)
	at com.uc4.ecc.framework.core.inject.OsgiInjectorRepository.initializeInjector(OsgiInjectorRepository.java:59)
	at com.uc4.ecc.framework.entrypoint.plugin.PluginLifecycleManager.onBundleStarted(PluginLifecycleManager.java:129)
	at com.uc4.ecc.framework.entrypoint.plugin.PluginLifecycleManager$1.bundleChanged(PluginLifecycleManager.java:94)
	at org.eclipse.osgi.internal.framework.BundleContextImpl.dispatchEvent(BundleContextImpl.java:908)
	at org.eclipse.osgi.framework.eventmgr.EventManager.dispatchEvent(EventManager.java:230)
	at org.eclipse.osgi.framework.eventmgr.EventManager$EventThread.run(EventManager.java:340)
Caused by: java.security.UnrecoverableKeyException: failed to decrypt safe contents entry: javax.crypto.BadPaddingException: Given final block not properly padded. Such issues can arise if a bad key is used during decryption.
	... 45 common frames omitted

Environment

Release : 21.0.5

Cause

Configuration.

Resolution

The passwords were added in the configuration.properties without the string OBF: which is needed.

Wrong entry:

https.keystore.password=1vn21ugu1saj1v9i1v941sar1ugw1vo0
https.manager.password=1vn21ugu1saj1v9i1v941sar1ugw1vo0

Correct entry:

https.keystore.password=OBF:1vn21ugu1saj1v9i1v941sar1ugw1vo0
https.manager.password=OBF:1vn21ugu1saj1v9i1v941sar1ugw1vo0