java - JCEKS keystore no longer loading: com.sun.crypto.provider.SealedObjectForKeyProtector -


i have jceks keystore hold aes keys. has been working in dev environment , in gae runtime while.

last night deployed update (nothing crypto cases) , loading keystore throws ioexception: com.sun.crypto.provider.sealedobjectforkeyprotector , subsequently none of crypto works (as you'd expect given can't keys).

i've googled exception - 1 lead looked promising: convert key of jceks of provider store provider ... suggests keytore created 1 provider cannot read provider, doesn't seem case here working yesterday! https://access.redhat.com/documentation/en-us/jboss_enterprise_application_platform/6.2/html/administration_and_configuration_guide/sect-password_vaults_for_sensitive_strings.html suggests incompatible providers.

i rolled app previous (working) version, same error.

has gae changed default provider? should explicitly declare required provider in code?

thanks steve

update 20/05/2015 - root cause identified

the problem ioexception thrown ks.load() below:

final keystore ks = keystore.getinstance(keystore_type_jceks); try {     inputstream = this.getclass().getclassloader().getresourceasstream("squirrol.keystore");     ks.load(is, getkeystorepassword().tochararray()); // ioexception thrown here     ... } catch (nosuchalgorithmexception | certificateexception | ioexception e) {     stringwriter sw = new stringwriter();     e.printstacktrace(new printwriter(sw));     throw new keystoreexception("failed load keystore: " + e.getlocalizedmessage()); }

the stack trace output leads off with:

at com.sun.crypto.provider.jcekeystore.engineload(jcekeystore.java:844)

googling class name has found source (possibly not the actual source, line number in stack trace aligns). line 844 suggests ioexception thrown result of classnotfoundexception message being name of class wasn't found - in case com.sun.crypto.provider.sealedobjectforkeyprotector:

http://www.docjar.com/html/api/com/sun/crypto/provider/jcekeystore.java.html

so, root cause google app engine runtime v1.9.21 cannot load keystore because cannot load class com.sun.crypto.provider.sealedobjectforkeyprotector google admit whitelisting issue.

temporary resolution result of support ticket, google have reverted runtime 1.9.20 doesn't have problem. i'm awaiting fix allows me onto automated engine updates.

update 04/06/15 - resolved google have fix in v1.9.22 runtime.

update 11/06/15 - not resolved after all problem persists in v1.9.22 runtime :(

update 30/06/15 - resolved & proven google fixed in v1.9.23 runtime. answer updated reflect.

this confirmed fixed in gae runtime 1.9.23 (not 1.9.22 - missed cut).

the problem runtime whitelisting, omitted 1 or more classes needed load jceks keystore.

this problem affects gae runtimes 1.9.21 & 1.9.22. note server engine version, not sdk version. can check server version in console.


Comments

Post a Comment

Popular posts from this blog

c++ - Difference between pre and post decrement in recursive function argument -

i have following sample code used pre-decrement void function(int c) { if(c == 0) { return; } else { cout << "dp" << c << endl; function(--c); cout << c << endl; return; } } this function give output input 4 : dp3 dp2 dp1 dp0 0 1 2 3 but when use post decrement void function(int c) { if(c == 0) { return; } else { cout << "dp" << c << endl; function(c--); cout << c << endl; return; } } output goes in infinite loop dp4 can explain me in detail why happens ? this happens because function(c--) called same value of c , when finishes c decremented. recursively called, hence called same value no chance of return , hit stack overflow error. assume this, int x = 1, y = 0; y = x++ result y == 1 , x == 2. if y = ++x , bot x , y 2.
Read more

php - Nothing but 'run(); ' when browsing to my local project, how do I fix this? -

i added new project. made mistake in projectname.conf file in sites-available apache2, led me reinstalling apache2. after reinstalling , re-enabling projects on every page of every project .. <body> run(); </body> .. i've run composer update, restarted service, restarted pc, checked config files, tried disabling new project. there nothing in error log, , access.log: 127.0.0.1 - - [15/may/2015:01:40:47 +0200] "get / http/1.1" 304 181 "-" "mozilla/5.0 (x11; ubuntu; linux x86_64; rv:38.0) gecko/20100101 firefox/38.0" maybe i'm forgetting apache2 reinstall? don't think did different last time installed it. looks haven't setup php correctly. take @ this great guide , maybe you're forgetting link php config apache2.
Read more

php - How can I echo out this array? -

i don't know how go grabbing data in variable , put foreach loop. class tree{ private $info = array( array('name'=>'jim','state'=>'nu','company'=>'nu','phone'=>array('cell'=>'5615111111','office'=>'5611111111'),'email'=>array('primary'=>'exs@example.com','ex@there.com')), array('name'=>'joe smith','city'=>'phoenix','phone'=>'4805551111','email'=>'jsmith@some_email.com'), array('name'=>'john doe','city'=>'chandler','company'=>'doe co.','email'=>array('jdoe@gmail.com','personal'=>'email@email.com'),'phone'=>'6025550002') ); } if you're inside of class, can access private variable using $this->variablename . example, i...
Read more