geronimo-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From David Jencks <david_jen...@yahoo.com>
Subject Re: How to create a ConfiguredSecretKey.ser for Obscuring Passwords feature
Date Fri, 14 Sep 2012 04:00:45 GMT
The instructions you point to recommend setting up the gbean as you have done and NOT creating
a ConfiguredSecretKey.ser file: one will be created for you on first use based on a secure
random number.

If you want to supply your own key for some reason, you should look at the ConfiguredEncryption
gbean code to see how the .ser file is generated and do something similar with your key.

hope this helps

david jencks

On Sep 13, 2012, at 7:53 PM, Zhi Xie wrote:

> I want to use the Obscuring Passwords feacture in geronimo 3.0-beta-1
> I follow the doc  https://cwiki.apache.org/GMOxDEV/obscuring-passwords.html 
> Create a ConfiguredSecretKey.ser file in the var\security directory, add a ConfiguredEncryption
gbean in the config.xml like this.
> 
> "org.apache.geronimo.framework/rmi-naming/3.0-w20120503/car?ServiceModule=org.apache.geronimo.framework/rmi-naming/3.0-w20120503/car,j2eeType=GBean,name=ConfiguredEncryption">
>             <attribute name="path">var/security/ConfiguredSecretKey.ser</attribute>
>             <reference name="ServerInfo">
>                 <pattern>
>                     <name>ServerInfo</name>
>                 </pattern>
>             </reference>
>         </gbean>
> 
> But got an exception below. I think I have make a wrong ConfiguredSecretKey.ser. Could
anybody know how to create a right one.
> 
> 
> 2012-09-13 14:39:36,322 ERROR [GBeanInstanceState] Error while starting; GBean is now
in the FAILED state: abstractName="org.apache.geronimo.framework/rmi-naming/3.0-w20120503/car?ServiceModule=org.apache.geronimo.framework/rmi-naming/3.0-w20120503/car,j2eeType=GBean,name=ConfiguredEncryption"
> java.io.StreamCorruptedException: invalid stream header: FEEDFEED
> 	at java.io.ObjectInputStream.readStreamHeader(ObjectInputStream.java:786)
> 	at java.io.ObjectInputStream.<init>(ObjectInputStream.java:283)
> 	at org.apache.geronimo.crypto.ConfiguredEncryption.<init>(ConfiguredEncryption.java:51)
> 	at org.apache.geronimo.system.util.ConfiguredEncryption.<init>(ConfiguredEncryption.java:53)
> 	at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
> 	at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:44)
> 	at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:27)
> 	at java.lang.reflect.Constructor.newInstance(Constructor.java:516)
> 	at org.apache.xbean.recipe.ReflectionUtil$ConstructorFactory.create(ReflectionUtil.java:958)
> 	at org.apache.xbean.recipe.ObjectRecipe.internalCreate(ObjectRecipe.java:276)
> 	at org.apache.xbean.recipe.AbstractRecipe.create(AbstractRecipe.java:96)
> 	at org.apache.xbean.recipe.AbstractRecipe.create(AbstractRecipe.java:61)
> 	at org.apache.geronimo.gbean.runtime.GBeanInstance.createInstance(GBeanInstance.java:958)
> 	at org.apache.geronimo.gbean.runtime.GBeanInstanceState.attemptFullStart(GBeanInstanceState.java:271)
> 	at org.apache.geronimo.gbean.runtime.GBeanInstanceState.start(GBeanInstanceState.java:105)
> 	at org.apache.geronimo.gbean.runtime.GBeanInstanceState.startRecursive(GBeanInstanceState.java:127)
> 	at org.apache.geronimo.gbean.runtime.GBeanInstance.startRecursive(GBeanInstance.java:569)
> 	at org.apache.geronimo.kernel.basic.BasicKernel.startRecursiveGBean(BasicKernel.java:386)
> 	at org.apache.geronimo.kernel.config.ConfigurationUtil.startConfigurationGBeans(ConfigurationUtil.java:466)
> 	at org.apache.geronimo.kernel.config.KernelConfigurationManager.start(KernelConfigurationManager.java:225)
> 	at org.apache.geronimo.kernel.config.SimpleConfigurationManager.startConfiguration(SimpleConfigurationManager.java:710)
> 	at org.apache.geronimo.system.main.EmbeddedDaemon.doStartup(EmbeddedDaemon.java:239)
> 	at org.apache.geronimo.system.main.EmbeddedDaemon.execute(EmbeddedDaemon.java:99)
> 	at org.apache.geronimo.system.osgi.BootActivator$1.execute(BootActivator.java:107)
> 	at org.apache.geronimo.main.Bootstrapper.execute(Bootstrapper.java:68)
> 	at org.apache.geronimo.cli.AbstractCLI.executeMain(AbstractCLI.java:65)
> 	at org.apache.geronimo.cli.daemon.DaemonCLI.main(DaemonCLI.java:32)
> 
> -- 
> Best Regards
> Gary
> 


Mime
View raw message