Details
-
Improvement
-
Status: Resolved
-
Major
-
Resolution: Implemented
-
None
Description
When one encounters a 'Tampered/Invalid token' exception, it may occur due to
OzoneDelegationTokenSecretManager#verifySignature failing in any one of the following scenarios:
- Failure when obtaining the signer's certificate (CertificateClient#getCertificate call).
- In case the signer's certificate returned from this code is simply null.
- In case of an expired certificate or a certificate not yet valid.
- Failure during CertificateClient#verifySignature (with the signer's certificate).
Related code snippet link.
While we are already logging an error for the latter two cases, this patch introduces additional logging for the former two cases.
Attachments
Issue Links
- links to