<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>Hello,<br>
</p>
<p>We have an issue with the Sealer.jks keystore in IdP3.3 since
fews day. </p>
Strangely, I can list the content of Selaer.jks keystore <u>without
</u><u>password </u>and can not list the SecretKeys with password
defined in idp.properties(idp.sealer.storePassword).<br>
Visibly, Sealer.jks isn't protected by password anymore and we have
the error below every 15mn.
<p><i>2017-06-28 10:24:28,165 - ERROR
[net.shibboleth.utilities.java.support.security.BasicKeystoreKeyStrategy:298]
- </i><i><b>Error loading key named 'secret56'</b></i><i><br>
</i><i>java.io.IOException: </i><i><b>Keystore was tampered with,
or password was incorrect</b></i><i><br>
</i><i> at
com.sun.crypto.provider.JceKeyStore.engineLoad(JceKeyStore.java:865)</i><i><br>
</i><i>Caused by: java.security.UnrecoverableKeyException:
<b> Password verification failed</b></i><i><br>
</i><i> at
com.sun.crypto.provider.JceKeyStore.engineLoad(JceKeyStore.java:865)</i></p>
<p>When I restore the Sealer files, it looks for another secret key
like belows :<i><br>
</i></p>
<p><i>2017-06-29 14:03:35,875 - INFO
[net.shibboleth.utilities.java.support.security.BasicKeystoreKeyStrategy:289]
- <b>Key 'secret55' not found</b><br>
2017-06-29 14:03:35,875 - INFO
[net.shibboleth.utilities.java.support.security.DataSealer:218]
- <b>Data was wrapped with a key (secret55) no longer available</b><br>
2017-06-29 14:03:36,203 - INFO
[net.shibboleth.idp.authn.impl.ValidateExternalAuthentication:146]
- Profile Action ValidateExternalAuthentication: External <br>
</i></p>
<p>Any ideas would be appreciated.</p>
<pre class="moz-signature" cols="72">--
Cordialement
Marc SAHIN
Administrateur Systèmes
Pôle Système - DSI - Université Lumière Lyon 2
04 78 77 26 66
</pre>
</body>
</html>