[ARTEMIS-3543] Artemis client doesn't support encrypted passwords in composite urls

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.19.1, 2.20.0
• Assignee: Domenico Francesco Bruscino
• Reporter: Domenico Francesco Bruscino
• Created: 27/Oct/21 19:59
• Updated: 20/Jan/22 14:02
• Resolved: 20/Jan/22 14:02

Description

Artemis Client doesn't support encrypted passwords in composite urls:

SECURE_PASS=securepass
ENC_SECURE_PASS=$(./bin/artemis mask securepass)
ENC_SECURE_PASS="ENC(${ENC_SECURE_PASS:8})"

./bin/artemis create broker --user admin --password admin --require-login

keytool -storetype pkcs12 -keystore ./broker/etc/server-keystore.p12 -storepass $SECURE_PASS -keypass $SECURE_PASS -alias server -genkey -keyalg "RSA" -keysize 2048 -dname "CN=ActiveMQ Artemis Server, OU=Artemis, O=ActiveMQ, L=AMQ, S=AMQ, C=AMQ" -validity 36500 -ext bc=ca:false -ext eku=sA -ext san=dns:localhost,ip:127.0.0.1
keytool -storetype pkcs12 -keystore ./broker/etc/server-keystore.p12 -storepass $SECURE_PASS -keypass $SECURE_PASS -alias server -exportcert -rfc > server.crt
keytool -storetype pkcs12 -keystore ./broker/etc/server-truststore.p12 -storepass $SECURE_PASS -keypass $SECURE_PASS -importcert -alias server -file server.crt -noprompt

sed -i "s/0.0.0.0:61616?/0.0.0.0:61616?sslEnabled=true;keyStorePath=server-keystore.p12;keyStorePassword=$ENC_SECURE_PASS;/g" ./broker/etc/broker.xml

./broker/bin/artemis run

./broker/bin/artemis producer --verbose --destination queue://TEST.QUEUE --user admin --password admin --protocol core --message-count 1 --url "(tcp://localhost:61616)?sslEnabled=true&trustStorePath=./broker/etc/server-truststore.p12&trustStorePassword=$ENC_SECURE_PASS"

 

Issue Links

• links to: GitHub Pull Request #3821