Project

General

Profile

Bug #9554

SSLCertGenUtil crashes: : The AES key must have 128, 192 or 256 bits!

Added by Vladimir Tsichevski over 1 year ago. Updated over 1 year ago.

Status:
New
Priority:
Normal
Assignee:
-
Target version:
-
Start date:
Due date:
% Done:

0%

billable:
No
vendor_id:
GCD
case_num:
version_reported:
version_resolved:
production:
No
env_name:
topics:

History

#1 Updated by Vladimir Tsichevski over 1 year ago

  • reviewer Constantin Asofiei added
  1. I run the SSLCertGenUtil for a converted application and the current FWD trunk as described in https://proj.goldencode.com/projects/p2j/wiki/Cryptography_Setup_Helper:
    java -classpath <trunk>/build/lib/p2j.jar com.goldencode.p2j.security.SSLCertGenUtil <application>/deploy/server/directory.xml
    
  2. I've got:
    Starting SSLCertGenUtil...
    
    org.kohsuke.args4j.CmdLineException: No argument is allowed: <application>/deploy/server/directory.xml
        at org.kohsuke.args4j.CmdLineParser.parseArgument(CmdLineParser.java:509)
        at com.goldencode.p2j.security.SSLCertGenUtil.main(SSLCertGenUtil.java:1952)
    
  3. I've added the -dir before the path to directory.xml (the page at Redmine shall be fixed?):
    java -classpath <trunk>/build/lib/p2j.jar com.goldencode.p2j.security.SSLCertGenUtil -dir <application>/deploy/server/directory.xml
    
  4. I answer yes for all the question and qwerty for the private key password.
  5. I've got:
    Starting SSLCertGenUtil...
    Initializing service for directory <application>/deploy/server/directory.xml...
    Reading company configuration...
    Using 'US' for [C] Country Code.
    Using 'Alpharetta' for [L] Locality (city, etc).
    Using 'GoldenCode' for [O] Organization.
    Using 'Hotel' for [OU] Organization Unit.
    Using 'GA' for [ST] State or Province Name.
    Using 10 years for validity.
    Adding account /security/accounts/processes/standard
    Adding account /security/accounts/processes/ehotel
    Account /security/accounts/processes/ReportAppserverProcess ignored - no alias is defined
    Adding account /security/accounts/processes/<app_name>AppserverProcess
    Adding account /security/accounts/processes/<app_name>AppserverProcessStateReset
    Adding account /security/accounts/processes/GenerateInitialDataProcess
    Adding account /security/accounts/processes/embedded
    Adding account /security/accounts/processes/UVType1Process
    Adding account /security/accounts/processes/UVType3Process
    Adding account /security/accounts/users/bogus
    WARNING: alias shared is set for multiple accounts!
    Account /security/accounts/users/hotel ignored - no alias is defined
    Account /security/accounts/users/57j836c6mazt4ww5 ignored - no alias is defined
    Account /security/accounts/users/nzx4od9r047314te ignored - no alias is defined
    Account /security/accounts/users/gz3l85k744v26osq ignored - no alias is defined
    Account /security/accounts/users/u29n1gta057o65il ignored - no alias is defined
    Account /security/accounts/users/a9d2tygt8f6s0281 ignored - no alias is defined
    Account /security/accounts/users/q8hsv942s45n8o2b ignored - no alias is defined
    Account /security/accounts/users/65079rd0ltij01eq ignored - no alias is defined
    Account /security/accounts/users/u07848b368qdtazl ignored - no alias is defined
    Enter the target P2J server identifier (by default "standard"): 
    Re-use the encryption passwords currently in the directory (yes/no): 
    Re-use the encryption passwords currently in the directory (yes/no): 
    Re-use the encryption passwords currently in the directory (yes/no): 
    Re-use the encryption passwords currently in the directory (yes/no): yes
    Re-use the root CA currently in the directory (yes/no): yes
    Enter the root CA private-key encryption password: qwerty
    Re-using root CA using [hotel-root] alias...
    Exception in thread "main" com.goldencode.p2j.security.SSLCertGenException: com.goldencode.p2j.security.SSLCertGenException: The AES key must have 128, 192 or 256 bits!
        at com.goldencode.p2j.security.SSLCertGenUtil.generateRootCA(SSLCertGenUtil.java:1484)
        at com.goldencode.p2j.security.SSLCertGenUtil.generate(SSLCertGenUtil.java:478)
        at com.goldencode.p2j.security.SSLCertGenUtil.main(SSLCertGenUtil.java:1974)
    Caused by: com.goldencode.p2j.security.SSLCertGenException: The AES key must have 128, 192 or 256 bits!
        at com.goldencode.p2j.security.BCCertFactory.cipherBytes(BCCertFactory.java:193)
        at com.goldencode.p2j.security.BCCertFactory.decryptPrivateKey(BCCertFactory.java:275)
        at com.goldencode.p2j.security.SSLCertGenUtil.generateRootCA(SSLCertGenUtil.java:1441)
        ... 2 more
    

#2 Updated by Greg Shah over 1 year ago

  • Project changed from FWD to Runtime Infrastructure

Also available in: Atom PDF