[ https://issues.apache.org/jira/browse/CLOUDSTACK-2552?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Likitha Shetty resolved CLOUDSTACK-2552. ---------------------------------------- Resolution: Fixed > AWSAPI: Cannot register/use EC2 API when the setup uses encryption - > EncryptionOperationNotPossibleException > ------------------------------------------------------------------------------------------------------------ > > Key: CLOUDSTACK-2552 > URL: https://issues.apache.org/jira/browse/CLOUDSTACK-2552 > Project: CloudStack > Issue Type: Bug > Security Level: Public(Anyone can view this level - this is the > default.) > Components: AWSAPI > Affects Versions: 4.1.0 > Reporter: Likitha Shetty > Assignee: Likitha Shetty > Fix For: 4.2.0 > > > REPRO STEPS > ============= > Setup: > ----------- > 1. Setup encrytion while running cloud-setup-databases > cloud-setup-databases cloud:cloud@localhost --deploy-as=root:<password> -e > file -m <management-key> -k <database-key> > Make sure that values for <management-key> and <database-key> are different > 2. Create a user under root domain and generate api/secret key > 3. Generate a private key and a self-signed X.509 certificate and try to > register the user > CloudStack using cloudstack-aws-api-register script. > $ cloudstack-aws-api-register --apikey=<User’s Cloudstack API key> > --secretkey=<User’s CloudStack Secret key> --cert=</path/to/cert.pem> > --url=http://127.0.0.1:7080/awsapi > 4. $User registration failed with http error code: 500 > 5. Also try any EC2 Query API calls - they fail too > awsapi.log shows: > 2013-05-03 16:35:39,772 ERROR [bridge.service.EC2RestServlet] > (catalina-exec-int-9:null) Unexpected exception: null > org.jasypt.exceptions.EncryptionOperationNotPossibleException > at > org.jasypt.encryption.pbe.StandardPBEByteEncryptor.decrypt(StandardPBEByteEncryptor.java:981) > > at > org.jasypt.encryption.pbe.StandardPBEStringEncryptor.decrypt(StandardPBEStringEncryptor.java:717) > > at > com.cloud.bridge.persist.dao.UserCredentialsDao.getByAccessKeyFromCloudDB(UserCredentialsDao.java:127) > -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira