Sealer key error...

[Marc SAHIN]

Hello,

We have an issue with the Sealer.jks keystore in IdP3.3 since fews day.

Strangely, I can list the content of Selaer.jks keystore _without 
__password _and can not list the SecretKeys with password defined in 
idp.properties(idp.sealer.storePassword).
Visibly, Sealer.jks isn't protected by password anymore and we have the 
error below every 15mn.

/2017-06-28 10:24:28,165 - ERROR 
[net.shibboleth.utilities.java.support.security.BasicKeystoreKeyStrategy:298] 
- //*Error loading key named 'secret56'*//
//java.io.IOException: //*Keystore was tampered with, or password was 
incorrect*//
//        at 
com.sun.crypto.provider.JceKeyStore.engineLoad(JceKeyStore.java:865)//
//Caused by: java.security.UnrecoverableKeyException: *Password 
verification failed*//
//        at 
com.sun.crypto.provider.JceKeyStore.engineLoad(JceKeyStore.java:865)/

When I restore the Sealer files, it looks for another secret key like 
belows :/
/

/2017-06-29 14:03:35,875 - INFO 
[net.shibboleth.utilities.java.support.security.BasicKeystoreKeyStrategy:289] 
- *Key 'secret55' not found*
2017-06-29 14:03:35,875 - INFO 
[net.shibboleth.utilities.java.support.security.DataSealer:218] - *Data 
was wrapped with a key (secret55) no longer available*
2017-06-29 14:03:36,203 - INFO 
[net.shibboleth.idp.authn.impl.ValidateExternalAuthentication:146] - 
Profile Action ValidateExternalAuthentication: External
/

Any ideas would be appreciated.

-- 
Cordialement

Marc SAHIN
Administrateur Systèmes
Pôle Système  - DSI - Université Lumière Lyon 2
04 78 77 26 66

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170629/8e574857/attachment.html>