Return-Path: 
 <issues-return-7462-apmail-cloudstack-issues-archive=cloudstack.apache.org@cloudstack.apache.org>
X-Original-To: apmail-cloudstack-issues-archive@www.apache.org
Delivered-To: apmail-cloudstack-issues-archive@www.apache.org
Received: from mail.apache.org (hermes.apache.org [140.211.11.3])
	by minotaur.apache.org (Postfix) with SMTP id 38EAE9F71
	for <apmail-cloudstack-issues-archive@www.apache.org>;
 Fri, 17 May 2013 07:43:23 +0000 (UTC)
Received: (qmail 91670 invoked by uid 500); 17 May 2013 07:43:23 -0000
Delivered-To: apmail-cloudstack-issues-archive@cloudstack.apache.org
Received: (qmail 91240 invoked by uid 500); 17 May 2013 07:43:19 -0000
Mailing-List: contact issues-help@cloudstack.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:issues-help@cloudstack.apache.org>
List-Unsubscribe: <mailto:issues-unsubscribe@cloudstack.apache.org>
List-Post: <mailto:issues@cloudstack.apache.org>
List-Id: <issues.cloudstack.apache.org>
Reply-To: dev@cloudstack.apache.org
Delivered-To: mailing list issues@cloudstack.apache.org
Received: (qmail 91204 invoked by uid 500); 17 May 2013 07:43:18 -0000
Delivered-To: apmail-incubator-cloudstack-issues@incubator.apache.org
Received: (qmail 91196 invoked by uid 99); 17 May 2013 07:43:17 -0000
Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28)
    by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 17 May 2013 07:43:17 +0000
Date: Fri, 17 May 2013 07:43:17 +0000 (UTC)
From: "Likitha Shetty (JIRA)" <jira@apache.org>
To: cloudstack-issues@incubator.apache.org
Message-ID: <JIRA.12648127.1368776564969.337936.1368776597697@arcas>
In-Reply-To: <JIRA.12648127.1368776564969@arcas>
References: <JIRA.12648127.1368776564969@arcas>
Subject: [jira] [Created] (CLOUDSTACK-2552) AWSAPI: Cannot register/use EC2
 API when the setup uses encryption -
 EncryptionOperationNotPossibleException
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394

Likitha Shetty created CLOUDSTACK-2552:
------------------------------------------

             Summary: AWSAPI: Cannot register/use EC2 API when the setup us=
es encryption - EncryptionOperationNotPossibleException
                 Key: CLOUDSTACK-2552
                 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-2552
             Project: CloudStack
          Issue Type: Bug
      Security Level: Public (Anyone can view this level - this is the defa=
ult.)
          Components: AWSAPI
    Affects Versions: 4.1.0
            Reporter: Likitha Shetty
            Assignee: Likitha Shetty
             Fix For: 4.2.0


REPRO STEPS=20
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=20

Setup:=20
-----------=20

1. Setup encrytion while running cloud-setup-databases=20

cloud-setup-databases cloud:cloud@localhost --deploy-as=3Droot:<password> -=
e file -m <management-key> -k <database-key>=20

Make sure that values for <management-key> and <database-key> are different=
=20

2. Create a user under root domain and generate api/secret key=20

3. Generate a private key and a self-signed X.509 certificate and try to re=
gister the user=20
CloudStack using cloudstack-aws-api-register script.=20

$ cloudstack-aws-api-register --apikey=3D<User=E2=80=99s Cloudstack API key=
>=20
--secretkey=3D<User=E2=80=99s CloudStack Secret key> --cert=3D</path/to/cer=
t.pem>=20
--url=3Dhttp://127.0.0.1:7080/awsapi=20

4. $User registration failed with http error code: 500=20

5. Also try any EC2 Query API calls - they fail too=20

awsapi.log shows:=20

2013-05-03 16:35:39,772 ERROR [bridge.service.EC2RestServlet]=20
(catalina-exec-int-9:null) Unexpected exception: null=20
org.jasypt.exceptions.EncryptionOperationNotPossibleException=20
    at=20
org.jasypt.encryption.pbe.StandardPBEByteEncryptor.decrypt(StandardPBEByteE=
ncryptor.java:981)=20
    at=20
org.jasypt.encryption.pbe.StandardPBEStringEncryptor.decrypt(StandardPBEStr=
ingEncryptor.java:717)=20
    at=20
com.cloud.bridge.persist.dao.UserCredentialsDao.getByAccessKeyFromCloudDB(U=
serCredentialsDao.java:127)=20

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrato=
rs
For more information on JIRA, see: http://www.atlassian.com/software/jira