cloudstack-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Wei Zhou (JIRA)" <j...@apache.org>
Subject [jira] [Comment Edited] (CLOUDSTACK-9420) Process encryption hangs
Date Thu, 09 Feb 2017 13:14:42 GMT

    [ https://issues.apache.org/jira/browse/CLOUDSTACK-9420?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15859492#comment-15859492
] 

Wei Zhou edited comment on CLOUDSTACK-9420 at 2/9/17 1:13 PM:
--------------------------------------------------------------

this happens on openjdk8.

Another solution:

{code}
Open the $JAVA_HOME/jre/lib/security/java.security file in a text editor.

Change the line:
 securerandom.source=file:/dev/random
to read:
 securerandom.source=file:/dev/urandom

Save your change and exit the text editor.
{code}

http://stackoverflow.com/questions/30282314/inconsistent-slow-encryption-performance-with-jasypt-on-ubuntu-linux
http://security.stackexchange.com/questions/40633/java-securerandom-doesnt-block-how
https://docs.oracle.com/cd/E13209_01/wlcp/wlss30/configwlss/jvmrand.html



was (Author: weizhou):
another solution:

{code}
Open the $JAVA_HOME/jre/lib/security/java.security file in a text editor.

Change the line:
 securerandom.source=file:/dev/random
to read:
 securerandom.source=file:/dev/urandom

Save your change and exit the text editor.
{code}
http://security.stackexchange.com/questions/40633/java-securerandom-doesnt-block-how
https://docs.oracle.com/cd/E13209_01/wlcp/wlss30/configwlss/jvmrand.html


> Process encryption hangs
> ------------------------
>
>                 Key: CLOUDSTACK-9420
>                 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-9420
>             Project: CloudStack
>          Issue Type: Bug
>      Security Level: Public(Anyone can view this level - this is the default.) 
>          Components: Install and Setup
>    Affects Versions: 4.8.0
>         Environment: CENTOS 7 x64
>            Reporter: Oscar Segarra
>            Assignee: Rajani Karuturi
>            Priority: Blocker
>             Fix For: 4.9.1.0
>
>
> Process hangs on "Process encryption".
> Passwords contain a $ and i have tried to:
> 1.- Quote them between "
> 2.- Scape the $ simbol with a \
> [root@vdiccs01 ~]# cloudstack-setup-databases cloud:"*********"@192.168.100.103:3306
--deploy-as=root:"*******" -v -k password -m password
> Mysql user name:cloud                                                           [ OK
]
> Mysql user password:******                                                      [ OK
]
> Mysql server ip:192.168.100.103                                                 [ OK
]
> Mysql server port:3306                                                          [ OK
]
> Mysql root user name:root                                                       [ OK
]
> Mysql root user password:******                                                 [ OK
]
> Checking Cloud database files ...                                               [ OK
]
> Checking local machine hostname ...                                             [ OK
]
> Checking SELinux setup ...                                                      [ OK
]
> Detected local IP address as 192.168.122.223, will use as cluster management server node
IP[ OK ]
> Preparing /etc/cloudstack/management/db.properties                              [ OK
]
> Applying /usr/share/cloudstack-management/setup/create-database.sql             [ OK
]
> Applying /usr/share/cloudstack-management/setup/create-schema.sql               [ OK
]
> Applying /usr/share/cloudstack-management/setup/create-database-premium.sql     [ OK
]
> Applying /usr/share/cloudstack-management/setup/create-schema-premium.sql       [ OK
]
> Applying /usr/share/cloudstack-management/setup/server-setup.sql                [ OK
]
> Applying /usr/share/cloudstack-management/setup/templates.sql                   [ OK
]
> Processing encryption ...
>   File "/usr/bin/cloudstack-setup-databases", line 604, in <module>
>     o.run()
>   File "/usr/bin/cloudstack-setup-databases", line 593, in run
>     self.processEncryptionStuff()
>   File "/usr/bin/cloudstack-setup-databases", line 418, in processEncryptionStuff
>     encryptDBSecretKey()
>   File "/usr/bin/cloudstack-setup-databases", line 402, in encryptDBSecretKey
>     self.putDbProperty('db.cloud.encrypt.secret', formatEncryptResult(encrypt(self.dbsecretkey)))
>   File "/usr/bin/cloudstack-setup-databases", line 392, in encrypt
>     return runCmd(cmd).strip('\r\n')
>   File "/usr/bin/cloudstack-setup-databases", line 49, in runCmd
>     stdout, stderr = process.communicate()
>   File "/usr/lib64/python2.7/subprocess.py", line 800, in communicate
>     return self._communicate(input)
>   File "/usr/lib64/python2.7/subprocess.py", line 1401, in _communicate
>     stdout, stderr = self._communicate_with_poll(input)
>   File "/usr/lib64/python2.7/subprocess.py", line 1455, in _communicate_with_poll
>     ready = poller.poll()
> KeyboardInterrupt
> [root@vdiccs01 ~]#



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)

Mime
View raw message