Closed
Description
Relevant log
18:02:02 > Task :x-pack:qa:full-cluster-restart:with-system-key:v6.3.3-SNAPSHOT#oldClusterTestCluster#node0.addToKeystore#xpack.watcher.encryption_key
18:02:02 Task ':x-pack:qa:full-cluster-restart:with-system-key:v6.3.3-SNAPSHOT#oldClusterTestCluster#node0.addToKeystore#xpack.watcher.encryption_key' is not up-to-date because:
18:02:02 Task has not declared any outputs despite executing actions.
18:02:02 at sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:658)
18:02:02 at sun.security.provider.JavaKeyStore$JKS.engineLoad(JavaKeyStore.java:56)
18:02:02 at sun.security.provider.KeyStoreDelegator.engineLoad(KeyStoreDelegator.java:224)
18:02:02 at sun.security.provider.JavaKeyStore$DualFormatJKS.engineLoad(JavaKeyStore.java:70)
18:02:02 at java.security.KeyStore.load(KeyStore.java:1445)
18:02:02 Starting process 'command '/var/lib/jenkins/workspace/elastic+elasticsearch+master+matrix-java-periodic/ES_BUILD_JAVA/java11/ES_RUNTIME_JAVA/java8fips/nodes/virtual&&linux/x-pack/qa/full-cluster-restart/with-system-key/build/cluster/v6.3.3-SNAPSHOT#oldClusterTestCluster node0/elasticsearch-6.3.3-SNAPSHOT/bin/elasticsearch-keystore''. Working directory: /var/lib/jenkins/workspace/elastic+elasticsearch+master+matrix-java-periodic/ES_BUILD_JAVA/java11/ES_RUNTIME_JAVA/java8fips/nodes/virtual&&linux/x-pack/qa/full-cluster-restart/with-system-key/build/cluster/v6.3.3-SNAPSHOT#oldClusterTestCluster node0/cwd Command: /var/lib/jenkins/workspace/elastic+elasticsearch+master+matrix-java-periodic/ES_BUILD_JAVA/java11/ES_RUNTIME_JAVA/java8fips/nodes/virtual&&linux/x-pack/qa/full-cluster-restart/with-system-key/build/cluster/v6.3.3-SNAPSHOT#oldClusterTestCluster node0/elasticsearch-6.3.3-SNAPSHOT/bin/elasticsearch-keystore add-file xpack.watcher.encryption_key /var/lib/jenkins/workspace/elastic+elasticsearch+master+matrix-java-periodic/ES_BUILD_JAVA/java11/ES_RUNTIME_JAVA/java8fips/nodes/virtual&&linux/x-pack/qa/full-cluster-restart/src/test/resources/system_key
18:02:02 Successfully started process 'command '/var/lib/jenkins/workspace/elastic+elasticsearch+master+matrix-java-periodic/ES_BUILD_JAVA/java11/ES_RUNTIME_JAVA/java8fips/nodes/virtual&&linux/x-pack/qa/full-cluster-restart/with-system-key/build/cluster/v6.3.3-SNAPSHOT#oldClusterTestCluster node0/elasticsearch-6.3.3-SNAPSHOT/bin/elasticsearch-keystore''
18:02:02 warning: ignoring JAVA_TOOL_OPTIONS=-Dfile.encoding=UTF8
18:02:02 at sun.security.util.AnchorCertificates$1.run(AnchorCertificates.java:61)
18:02:02 at sun.security.util.AnchorCertificates$1.run(AnchorCertificates.java:52)
18:02:02 at java.security.AccessController.doPrivileged(Native Method)
18:02:02 at sun.security.util.AnchorCertificates.<clinit>(AnchorCertificates.java:52)
18:02:02 at sun.security.provider.certpath.AlgorithmChecker.checkFingerprint(AlgorithmChecker.java:214)
18:02:02 at sun.security.provider.certpath.AlgorithmChecker.<init>(AlgorithmChecker.java:164)
18:02:02 at sun.security.provider.certpath.AlgorithmChecker.<init>(AlgorithmChecker.java:118)
18:02:02 at sun.security.validator.SimpleValidator.engineValidate(SimpleValidator.java:157)
18:02:02 at sun.security.validator.Validator.validate(Validator.java:262)
18:02:02 at sun.security.validator.Validator.validate(Validator.java:238)
18:02:02 at sun.security.validator.Validator.validate(Validator.java:207)
18:02:02 at javax.crypto.JarVerifier.isTrusted(JarVerifier.java:610)
18:02:02 at javax.crypto.JarVerifier.verifySingleJar(JarVerifier.java:530)
18:02:02 at javax.crypto.JarVerifier.verifyJars(JarVerifier.java:363)
18:02:02 at javax.crypto.JarVerifier.verify(JarVerifier.java:289)
18:02:02 at javax.crypto.JceSecurity.verifyProviderJar(JceSecurity.java:164)
18:02:02 at javax.crypto.JceSecurity.getVerificationResult(JceSecurity.java:190)
18:02:02 at javax.crypto.JceSecurity.canUseProvider(JceSecurity.java:204)
18:02:02 at javax.crypto.SecretKeyFactory.nextSpi(SecretKeyFactory.java:295)
18:02:02 at javax.crypto.SecretKeyFactory.<init>(SecretKeyFactory.java:121)
18:02:02 at javax.crypto.SecretKeyFactory.getInstance(SecretKeyFactory.java:160)
18:02:02 at org.elasticsearch.common.settings.KeyStoreWrapper.createCipher(KeyStoreWrapper.java:288)
18:02:02 at org.elasticsearch.common.settings.KeyStoreWrapper.decrypt(KeyStoreWrapper.java:336)
18:02:02 at org.elasticsearch.common.settings.AddFileKeyStoreCommand.execute(AddFileKeyStoreCommand.java:73)
18:02:02 at org.elasticsearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:86)
18:02:02 at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:124)
18:02:02 at org.elasticsearch.cli.MultiCommand.execute(MultiCommand.java:79)
18:02:02 at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:124)
18:02:02 at org.elasticsearch.cli.Command.main(Command.java:90)
18:02:02 at org.elasticsearch.common.settings.KeyStoreCli.main(KeyStoreCli.java:41)
18:02:02 Exception in thread "main" java.lang.SecurityException: Keystore has been corrupted or tampered with
18:02:02 at org.elasticsearch.common.settings.KeyStoreWrapper.decrypt(KeyStoreWrapper.java:349)
18:02:02 at org.elasticsearch.common.settings.AddFileKeyStoreCommand.execute(AddFileKeyStoreCommand.java:73)
18:02:02 at org.elasticsearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:86)
18:02:02 at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:124)
18:02:02 at org.elasticsearch.cli.MultiCommand.execute(MultiCommand.java:79)
18:02:02 at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:124)
18:02:02 at org.elasticsearch.cli.Command.main(Command.java:90)
18:02:02 at org.elasticsearch.common.settings.KeyStoreCli.main(KeyStoreCli.java:41)
The test is calling elasticsearch-keystore add xpack.watcher.encryption_key -x