-
Notifications
You must be signed in to change notification settings - Fork 604
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
SecurityUtility only prints Exception name without errorstack #30520
base: integration
Are you sure you want to change the base?
SecurityUtility only prints Exception name without errorstack #30520
Conversation
#build (view Open Liberty Personal Build - ❌ completed with errors/failures.) Note: Target locations of links might be accessible only to IBM employees. |
Updated the copyright and submitting the build again. Note: Target locations of links might be accessible only to IBM employees. |
Fixes #30521 |
Code analysis and actionsDO NOT DELETE THIS COMMENT.
|
Removing the printStackTrace from the IllegalArgumentException handling as it may have sufficient serviceability coverage. The challenge we are encountering is when the runtime exception is thrown.
#build (view Open Liberty Personal Build - ❌ completed with errors/failures.) Note: Target locations of links might be accessible only to IBM employees. |
Code analysis and actionsDO NOT DELETE THIS COMMENT.
|
Your personal build request is at https://wasrtc.hursley.ibm.com:9443/jazz/resource/itemOid/com.ibm.team.build.BuildResult/_CjfoEM9kEe-f-sI4gb7_Pw Target locations of links might be accessible only to IBM employees. |
Your personal build request is at https://wasrtc.hursley.ibm.com:9443/jazz/resource/itemOid/com.ibm.team.build.BuildResult/_mTjLEM9kEe-f-sI4gb7_Pw Target locations of links might be accessible only to IBM employees. |
Your personal build request is at https://wasrtc.hursley.ibm.com:9443/jazz/resource/itemOid/com.ibm.team.build.BuildResult/_rMNLkc_yEe-f-sI4gb7_Pw Target locations of links might be accessible only to IBM employees. |
… Liberty does not show any error
#build (view Open Liberty Personal Build - ❌ completed with errors/failures.) Note: Target locations of links might be accessible only to IBM employees. |
Code analysis and actionsDO NOT DELETE THIS COMMENT.
|
release bug
label if applicable: https://github.com/OpenLiberty/open-liberty/wiki/Open-Liberty-Conventions).This PR enhances the serviceability of the
securityUtility
command. By adding a single line of code to each catch block, we enabled the printing of debug information, as reported by the user. This additional detail has proven invaluable in furthering our investigation. Resolving this issue took over a month, but these changes should significantly improve troubleshooting efficiency moving forward.BEFORE
AFTER
The above information let me to add code in AESKeyManager. It finally found that PBKDF2WithHmacSHA1 was disabled in their environment.
The user recently migrated from IBM Java 8 to Semeru 11, which disables PBKDF2WithHmacSHA1 in FIPS mode.
Workaround: https://www.ibm.com/support/pages/fips-certified-cryptography-ibm-semeru-runtimes