Check, if keytool exists, before trying to execute it

Use Case

If keytool does not exist, sensitive Password is not “redacted” in Error-Message:

Error: /Stage[main]/Myprofilemodule/Java_ks[myRootCA]/ensure: change from 'absent' to 'latest' failed:  
Execution of 'keytool -importcert -noprompt -alias myrootca -file /etc/pki/tls/certs/myCA_root.pem -keystore /path/to/mykeystore -srcstorepass MyPassword -deststorepass MyPassword' returned 1:  
Error: Could not execute posix command: No such file or directory - keytool

Describe the Solution You Would Like

check, if keytool exists, before trying to execute it
prevent Password-Leak in other Error-Situations

@david22swan

@david22swan (apologies for tagging you, you seem to be the last one who contributed to the latest version of this module)

I have a similar issue, I have installed 2 different version of java on the same machine and java_ks does not find the keytool one I'd like to use.

It there a way to implement a way to provide the PATH where keytool is installed? Thanks

I worked around it creating a link:

  file { '/usr/local/bin/keytool':
    ensure  => link,
    target  => "${java_binaries_path}/keytool",
    require => Class['java'],
  }

@danifr

@danifr: But you know, that this is not the Point of this Issue, right? This Issue is about leaking Secrets.

Yes yes sorry for hijacking your ticket :)

Navigation Menu

Repository navigation

Check, if keytool exists, before trying to execute it #445

Use Case

Describe the Solution You Would Like

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Check, if keytool exists, before trying to execute it #445

Description

Use Case

Describe the Solution You Would Like

Activity

danifr commented on Nov 10, 2023

danifr commented on Nov 13, 2023

cocker-cc commented on Nov 13, 2023

danifr commented on Nov 13, 2023

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions