Invalid keystore format error using Picketbox vault in EAP 6.1.1
Issue
- Migrating vault configuration from EAP 6 to EAP 6.1.1, but application stopped working and failed to start with the following errors
JBAS015804: Error initializing vault -- org.jboss.as.server.services.security.VaultReaderException: org.jboss.security.vault.SecurityVaultException: PB00019: Processing Failed:Unable to get Keystore
Caused by: java.io.IOException: Invalid keystore format
- Using the keystore from older version prior to EAP 6.1.1 does not allow to add the vault configuration through CLI and gives the below exceptions
/core-service=vault:add(vault-options={"KEYSTORE_URL" => "/opt/jboss-eap-6.1.1/jboss-eap6_t/vault/vault.keystore","KEYSTORE_PASSWORD" => "MASK-3EqTGNvEUm2zBW9JGpulUT","KEYSTORE_ALIAS" => "systemprop","SALT" => "jboss123","ITERATION_COUNT" => "25","ENC_FILE_DIR" => "/opt/jboss-eap-6.1.1/jboss-eap6_t/vault/"})
{
"outcome" => "failed",
"failure-description" => "JBAS014749: Operation handler failed: JBAS015804: Error initializing vault -- org.jboss.as.server.services.security.VaultReaderException: JBAS013313: Vault Reader Exception:",
"rolled-back" => true
}
-
After upgrading from JBoss EAP 6.1.0 to JBoss EAP 6.1.1 domain controller the domain controller failed with vault being completely unusable.
-
Do I need to create a new vault after migrating from EAP 6.0.1 to EAP 6.1.1?
Environment
- Red Hat JBoss Enterprise Application Platform (EAP)
- 6.1.1, 6.2.0
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.