Db2

  • 1.  Encrypted Keystore Password Issue

    Posted Mon February 03, 2020 07:32 AM
    Hi,

    We want to need the webconsole with https connection. To do that, I followed the instructions in:
    https://www.ibm.com/support/knowledgecenter/SS5Q8A_3.1.x/com.ibm.datatools.dsweb.ots.security.doc/topics/https_cert.html

    If I use a cleartext password in the seccion "wlp.keystore.password=" it works fine.
    But if I used the result of the function <dmchome>\dsutil\bin\crypt.bat the webconsole is no longer accessible.

    Product Name: IBM Db2 Data Management Console
    Build: 20200121-103505
    Version: 3.1.1.0

    OS: Windows Server 2019 Standard

    Is there a description of the solution?

    ------------------------------
    Regards, Dennis
    ------------------------------

    #Db2


  • 2.  RE: Encrypted Keystore Password Issue

    Posted Wed February 05, 2020 09:55 PM
    Hi Dennis,
    We got your question, and our development team will investigate and update with you ASAP. Thanks.

    ------------------------------
    Li Hui Yan (Autumn Yan)
    From DMC Team
    ------------------------------

    Original Message


  • 3.  RE: Encrypted Keystore Password Issue

    Posted Fri February 07, 2020 12:44 AM
    Edited by System Fri January 20, 2023 04:40 PM
    Hi Dennis,
    Reply from dev team:
    In general, keystore password is managed by liberty, so it's not suggested to use crypt.sh/crypt.bat to encrypt.

    The work around should be.

    1. Find the value of property wlp.password.encryption.key in the bootstrap.properties file.
    <install path>/wlp/usr/servers/dsweb/bootstrap.properties
    1. Encrypt the password with Liberty utility bat file.
    <install path>/wlp/bin/securityUtility.bat encode --encoding=aes --key=<encryption key from step 1> <the clear password>
    Please feel free to let us know if you have any more problem.


    ------------------------------
    Li Hui Yan (Autumn Yan)
    From DMC Team
    ------------------------------

    Original Message


  • 4.  RE: Encrypted Keystore Password Issue

    Posted Fri February 07, 2020 07:21 AM
    Hi Li Hui Yan,

    The bat file <install path>/wlp/bin/securityUtility.bat does not work. I have set the variables WLP_INSTALL_DIR and JAVA_CMD_QUOTED hardcoded.
    After these adjustments I get a result. Similar to the following: {aes}xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx==
    The https page cannot be accessed with this value. The http page still works.
    Returned back to plain text password the https page works again.

    ------------------------------
    Regards, Dennis
    ------------------------------

    Original Message


  • 5.  RE: Encrypted Keystore Password Issue
    Best Answer

    Posted Tue February 11, 2020 04:11 AM
    Edited by System Fri January 20, 2023 04:34 PM

    Hi Dennis,
    1. If the value of wlp.password.encryption.key ends with one or two '=' characters, they sometimes may be escaped. Please remove the backward slash before the equal mark. For example, please use encryption key like this. (In this case, the clear password is 'password'.)

    securityUtility.bat encode --encoding=aes --key=WTI201707121717ifhIuc6pWYWZRYg6CWX0*uDzRviJ8tTiTB+fvnNUBZcHG2nzGxmAdW4+W-ayoju-QeHaFLI-Ui7FR1TFvk2OpRSLxjRuIW85a8uJhyTE3zkVcL9VsHk+-0Hbtn6a5FB8d0DKb9c*ptYNAFOlZ7gkAeymI04BOuidNpV5seMXijPk6j*4vN3cVER4u45wNvwA15oQlxZz9XXb2i+Fadc40CnHFhaXxX5O1v+djXdQ8bhYxpzrQNUOMeNAGL+PXo9xKO1USegzGK3U7NGCP14y1zZD9E5emGdjTg7ew7NXKFTzHE0738y592*LUVtyPLSpmdIvhmHf4wJpLNvCBqmlFvfRVqKBZIYD3qej3SNcxtu0ke*nXUojG9Ta97lEuz3T5KiCy6Pncm-G2ZeQ8U+gAZe7SmbOkH6A+p9yYKz0MBFLoHJPE01izLTMHwO-BB8igZdMPIxXy9E1vyu0PIUxIjh8696z5D13kGDu7+OPWMmQbe*6s8nX== password

    2. Please do not add any white space characters before or behind the value of wlp.keystore.password. Here is an example.
    wlp.keystore.password={aes}APSMLvb1pffAnPyW/ZaTHPKgP/+pAZFztejiZSyxlgke


    ------------------------------
    Li Hui Yan (Autumn Yan)
    From DMC Team
    ------------------------------

    Original Message


  • 6.  RE: Encrypted Keystore Password Issue

    Posted Tue February 11, 2020 08:20 AM
    Hi Li Hui Yan,

    Now the encrypted password works. Removing the backward slash to execute the script is the solution.

    Thanks a lot,

    ------------------------------
    Regards, Dennis
    ------------------------------

    Original Message


  • 7.  RE: Encrypted Keystore Password Issue

    Posted Tue February 11, 2020 10:47 PM

    Hi Dennis,

    Happy to see your problem resolved. Feel free to let us know if you need more support in future using of DMC. Thanks.



    ------------------------------
    Li Hui Yan (Autumn Yan)
    From DMC Team
    ------------------------------

    Original Message