View Issue Details

IDProjectCategoryView StatusLast Update
0005790SymmetricDSImprovementpublic2023-10-03 23:00
Reporterelong Assigned Toelong  
Prioritynormal 
Status closedResolutionfixed 
Product Version3.12.0 
Target Version3.14.7Fixed in Version3.14.7 
Summary0005790: Failed to decrypt node password from lost secret key in keystore
DescriptionUsers will either modify the "keystore" file or forget to copy it during a server move, which results in an error in the log about "Failed to decrypt node password". The node_password column in the sym_node_security table is encrypted using a secret key in the keystore. If the secret key is missing, it will automatically generate a new one. The new secret key can't decrypt data encrypted with the lost secret key.

To automatically recover, the engine should run some tests during startup. Test if the keystore can be opened with its keystore password, with failure preventing startup. Test if the node passwords can be decrypted. For a clustered system, failure should prevent startup, so the user can copy the keystore from a working node in the cluster. For non-clustered system, re-open registration for any client nodes that can't be decrypted. If the registration server itself can't decrypt its own entry, then generate a new node password for it.
TagsNo tags attached.

Activities

There are no notes attached to this issue.

Related Changesets

SymmetricDS: 3.14 a7068d34

2023-04-14 20:47:59

admin

Details Diff
0005790: Failed to decrypt node password from lost secret key in
keystore
Affected Issues
0005790
mod - symmetric-core/src/main/java/org/jumpmind/symmetric/AbstractSymmetricEngine.java Diff File
mod - symmetric-core/src/main/java/org/jumpmind/symmetric/service/impl/MailService.java Diff File
mod - symmetric-jdbc/src/main/java/org/jumpmind/db/util/BasicDataSourceFactory.java Diff File
mod - symmetric-util/src/main/java/org/jumpmind/util/ExceptionUtils.java Diff File

SymmetricDS: 3.15 64f96830

2023-04-14 20:47:59

admin

Details Diff
0005790: Failed to decrypt node password from lost secret key in
keystore
Affected Issues
0005790
mod - symmetric-core/src/main/java/org/jumpmind/symmetric/AbstractSymmetricEngine.java Diff File
mod - symmetric-jdbc/src/main/java/org/jumpmind/db/util/BasicDataSourceFactory.java Diff File

SymmetricDS: 3.14 9ebda3c6

2023-04-14 20:52:36

admin

Details Diff
0005790: Failed to decrypt node password from lost secret key in
keystore
Affected Issues
0005790
mod - symmetric-core/src/main/java/org/jumpmind/symmetric/service/impl/RegistrationService.java Diff File

SymmetricDS: 3.15 33767858

2023-04-14 20:52:36

admin

Details Diff
0005790: Failed to decrypt node password from lost secret key in
keystore
Affected Issues
0005790
mod - symmetric-core/src/main/java/org/jumpmind/symmetric/service/impl/RegistrationService.java Diff File

Issue History

Date Modified Username Field Change
2023-04-14 20:46 elong New Issue
2023-04-14 20:46 elong Status new => assigned
2023-04-14 20:46 elong Assigned To => elong
2023-04-14 21:00 admin Changeset attached => SymmetricDS 3.14 9ebda3c6
2023-04-14 21:00 admin Changeset attached => SymmetricDS 3.14 a7068d34
2023-04-14 21:32 elong Status assigned => resolved
2023-04-14 21:32 elong Resolution open => fixed
2023-04-14 21:32 elong Fixed in Version => 3.14.7
2023-05-12 19:49 admin Status resolved => closed
2023-10-03 23:00 admin Changeset attached => SymmetricDS 3.15 33767858
2023-10-03 23:00 admin Changeset attached => SymmetricDS 3.15 64f96830