tc Server decoding of encrypted credentials in separate files fails on 10.1.x versions

Products

• VMware Tanzu Spring Runtime

Issue/Introduction

• You are attempting to Store Passphrases and Encoded Properties in Separate Files in tc Server 10.1+
• You have encoded the db-password (or other desired  credential) using the Encoding a Password documentation.
• You have verified and tested the encoded password value can be decoded when it is placed in the catalina.properties file directly.
• You have subsequently configured the context.xml and catalina.properties files to point to an applications.properties file, which contains encoded the db-password value according to the Storing Passphrases and Encoded Properties in Separate Files documentation.
• The same tc Server when restarted when referencing the application.properties file shows a login failure on the database in logging.

Environment

tc Server 10.1+

Cause

The property keys for:

com.springsource.tcserver.security.PropertyDecoder.properties
com.springsource.tcserver.security.PropertyDecoder.passphrase

Have changed to:

base.encoding.properties
base.encoding.passphrase

Resolution

Update the catalina.properties file to reference property keys:

org.apache.tomcat.util.digester.PROPERTY_SOURCE=com.springsource.tcserver.security.PropertyDecoder

base.encoding.properties

base.encoding.passphrase