How to encode property in VMware tc Server 4.0.x

Products

• VMware Tanzu tc Server

Issue/Introduction

The following change is added to VMware tc Server since version 4.1.0. 

• Encoded Properties changes:

  • Removed support for tcEnc (support for s2enc was removed in previous release)
  • The encode command will use an instance's catalina.properties for passphrase information and automatically encode the specified properties.

With the change, user can use tcserver encode command to encode instance property directly. Refer to document for details. 

For VMware tc Server 4.0.x, tcserver encode command is available but can't be used to encode instance property directly. Instead, some manual steps are required. 

This article demonstrates the manual steps to encode instance property.

Environment

Product Version: 4.0

Resolution

1) Get passphrase from file catalina.properties

$ grep passphrase catalina.properties
com.springsource.tcserver.security.PropertyDecoder.passphrase = springsource

2) Get the property value to encode. For example,

$ grep nio-ssl.ssl.keystore.password catalina.properties
nio-ssl.ssl.keystore.password=ejfmhluceidrjadhyuwbavaoebjxixfldto

3) Encode property with command tcserver encode <value> <passphrase>. For example,

$ ./tcserver encode ejfmhluceidrjadhyuwbavaoebjxixfldto springsource
0T+QhwzMXsIvREkKaQiGHq9i6j6Sh9FUJ/suB79TZ1HT5kwmSF/JiYKFp0uMei3l3n9cinQ4mjIvyFRJUFf+R+1SQ1BEovuZuhW5spWoSlxG6qfFWFouVVTx16hImAEVmh2tE+QyGyjW+HY=

4) Update the property in config file with encoded value. Need to prefixed the encoded value with tcenc://. For example,

$ grep nio-ssl.ssl.keystore.password catalina.properties
nio-ssl.ssl.keystore.password=tcenc://0T+QhwzMXsIvREkKaQiGHq9i6j6Sh9FUJ/suB79TZ1HT5kwmSF/JiYKFp0uMei3l3n9cinQ4mjIvyFRJUFf+R+1SQ1BEovuZuhW5spWoSlxG6qfFWFouVVTx16hImAEVmh2tE+QyGyjW+HY=