----- Original Message ----- > From: "Joern Ott" <[email protected]> > To: [email protected] > Sent: Monday, December 17, 2012 6:28:41 PM > Subject: [Users] Problems after upgrading to latest rpms from the dre > repository > > > > > > Hello everybody, > > > > I just upgraded the engine with the engine upgrade script and get a > lot of these errors: > > 2012-12-17 17:25:00,498 ERROR > [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] > (QuartzScheduler_Worker-84) Failed to decrypt Data must not be > longer than 256 bytes
The RSA algorithm can only encrypt data that has a maximum byte length of the RSA key length in bits divided with eight minus eleven padding bytes, i.e. number of maximum bytes = key length in bits / 8 - 11. Since we are not using padding and using a key length of 2048 , it limits us to encrypting 2048/8 = 256 characters data. We can do either 1) Use a larger key 2) Encrypt the data with a symmetric key, and encrypt that key with rsa > > 2012-12-17 17:25:00,498 ERROR > [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] > (QuartzScheduler_Worker-72) Failed to decrypt Data must not be > longer than 256 bytes > > 2012-12-17 17:25:03,033 ERROR > [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] > (QuartzScheduler_Worker-94) Failed to decrypt Data must not be > longer than 256 bytes > > 2012-12-17 17:25:03,033 ERROR > [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] > (QuartzScheduler_Worker-7) Failed to decrypt Data must not be longer > than 256 bytes > > 2012-12-17 17:25:15,606 ERROR > [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] > (QuartzScheduler_Worker-60) Failed to decrypt Data must not be > longer than 256 bytes > > 2012-12-17 17:25:15,606 ERROR > [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] > (QuartzScheduler_Worker-55) Failed to decrypt Data must not be > longer than 256 bytes > > 2012-12-17 17:25:39,663 ERROR > [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] > (QuartzScheduler_Worker-69) Failed to decrypt Data must not be > longer than 256 bytes > > 2012-12-17 17:25:39,663 ERROR > [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] > (QuartzScheduler_Worker-68) Failed to decrypt > java.lang.NullPointerException > > > > In addition, I am no longer able to log in with admin@internal and > the password we set before. As we use keepass generated passwords, I > am pretty sure that I don’t have any typing errors in there. The > engine log shows this: > > > > 2012-12-17 17:26:43,328 ERROR > [org.ovirt.engine.core.bll.LoginAdminUserCommand] > (ajp--127.0.0.1-8702-2) USER_FAILED_TO_AUTHENTICATE : admin > > 2012-12-17 17:26:43,328 WARN > [org.ovirt.engine.core.bll.LoginAdminUserCommand] > (ajp--127.0.0.1-8702-2) CanDoAction of action LoginAdminUser failed. > Reasons:USER_FAILED_TO_AUTHENTICATE > > 2012-12-17 17:26:46,290 ERROR > [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] > (QuartzScheduler_Worker-94) Failed to decrypt Blocktype mismatch: 0 > > 2012-12-17 17:26:46,290 ERROR > [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] > (QuartzScheduler_Worker-91) Failed to decrypt Blocktype mismatch: 0 > > > > Any way of resetting the password in the database or fixing some > encryption routines? > > > > Kind regards > > Jörn > _______________________________________________ > Users mailing list > [email protected] > http://lists.ovirt.org/mailman/listinfo/users > _______________________________________________ Users mailing list [email protected] http://lists.ovirt.org/mailman/listinfo/users
