2 Replies Latest reply on May 11, 2018 11:12 AM by vetruvian

    Vault Tool outputs differ in Wildfly 10.1.0 vs Wildfly 12.0.0

    vetruvian

      Working on migrating from Wildfly 10.1.0 to 12.0.0 and I am having an issue with Vault. The issue has to do with the output I receive when I initialize a vault. With Wildfly 10.1.0 I get output including the xml vault configuration to be added to standalone.xml. With Wildfly 12.0.0 I get similar output but the xml vault configuration is replaced with vault CLI commands that insert the vault xml configuration automatically.

       

      I am trying to get Wildfly 12 to output the same way it used to output in Wildfly 10. I have custom java code that parses the output and adds it to my standalone.xml file before the server is started.

       

      Wildfly 10 Output:

      =========================================================================

        JBoss Vault Tool

       

        JBOSS_HOME: "C:\wildfly-10.1.0.Final"

       

        JAVA: "C:\Program Files\Java\jdk1.8.0_172\bin\java"

       

        JAVA_OPTS: ""

      =========================================================================

      May 07, 2018 7:48:53 AM org.picketbox.plugins.vault.PicketBoxSecurityVault init

      INFO: PBOX00361: Default Security Vault Implementation Initialized and Ready

      WFLYSEC0047: Secured attribute value has been stored in Vault.

      Please make note of the following:

      ********************************************

      Vault Block:vb

      Attribute Name:password

      Configuration should be done as follows:

      VAULT::vb::password::1

      ********************************************

      WFLYSEC0048: Vault Configuration in WildFly configuration file:

      ********************************************

      ...

      </extensions>

      <vault>

        <vault-option name="KEYSTORE_URL" value="C:\wildfly-10.1.0.Final\vault\vault.keystore"/>

        <vault-option name="KEYSTORE_PASSWORD" value="MASK-5dOaAVafCSd"/>

        <vault-option name="KEYSTORE_ALIAS" value="vault"/>

        <vault-option name="SALT" value="1234abcd"/>

        <vault-option name="ITERATION_COUNT" value="120"/>

        <vault-option name="ENC_FILE_DIR" value="C:\wildfly-10.1.0.Final\vault\\"/>

      </vault><management> ...

      ********************************************

       

      Wildfly 12 Output:

       

      =========================================================================

        JBoss Vault Tool

       

        JBOSS_HOME: "C:\wildfly-12.0.0.Final"

       

        JAVA: "C:\Program Files\Java\jdk1.8.0_172\bin\java"

       

        JAVA_OPTS: ""

      =========================================================================

      May 07, 2018 7:32:57 AM org.picketbox.plugins.vault.PicketBoxSecurityVault init

      INFO: PBOX00361: Default Security Vault Implementation Initialized and Ready

      WFLYSEC0047: Secured attribute value has been stored in Vault.

      Please make note of the following:

      ********************************************

      Vault Block:vb

      Attribute Name:password

      Configuration should be done as follows:

      VAULT::vb::password::1

      ********************************************

      WFLYSEC0048: Vault Configuration commands in WildFly for CLI:

      ********************************************

      For standalone mode:

      /core-service=vault:add(vault-options=[("KEYSTORE_URL" => "C:\wildfly-12.0.0.Final\vault\vault.keystore"),("KEYSTORE_PASSWORD" => "MASK-5dOaAVafCSd"),("KEYSTORE_ALIAS" => "vault"),("SALT" => "1234abcd"),("ITERATION_COUNT" => "120"),("ENC_FILE_DIR" => "C:\wildfly-12.0.0.Final\vault\/")])

      ********************************************

      For domain mode:

      /host=the_host/core-service=vault:add(vault-options=[("KEYSTORE_URL" => "C:\wildfly-12.0.0.Final\vault\vault.keystore"),("KEYSTORE_PASSWORD" => "MASK-5dOaAVafCSd"),("KEYSTORE_ALIAS" => "vault"),("SALT" => "1234abcd"),("ITERATION_COUNT" => "120"),("ENC_FILE_DIR" => "C:\wildfly-12.0.0.Final\vault\/")])

      ********************************************

       

       

      Is there a way to set/flag Wildfly 12 to output the manual xml settings like it did in Wildfly 10?

       

      Thanks,

      Cory