Skip to content

Testing out RCE 10.7 #2

Description

@ArneBachmannDLR

First start

tells me

  • java.lang.IllegalStateException: RCE was started with admin privileges without setting the --allow-privileged option:
  • OK, can be done on the invocation command line or in rce.ini, or move to an unprivileged account

Second issue

  • 2026-01-08 08:52:05,042 WARN - de.rcenvironment.core.configuration.internal.SecureStorageServiceImpl - Failed to decrypt existing Secure Storage entry authorization.accessGroups/external_ALICIA:cdb9984ee17f694e as it was written with a different Secure Storage login/password. You can open the Secure Storage file D:\rce10\profiles\SL_HF_Public_relay_rce10_sl-333009\internal\settings.secure.dat (while RCE is not running) and delete the line starting with this entry to remove this warning.
  • this looks like an incompatible change. Do I need to recreate and distribute all authorization keys ?

Also

Early startup complete, running main application
____________________________
Welcome to Apache Felix Gogo

g! 
  • what is this?

Access error

  • 2026-01-08 09:11:49,321 WARN - org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider - resolveKeyPair(EC)[C:\apps\RCE_Uplink\profiles\SL_HF_Public_uplink_rce10_sl-333009\internal\ssh_host_key.dat] Failed (AccessDeniedException) to write EC key: C:\apps\RCE_Uplink\profiles\SL_HF_Public_uplink_rce10_sl-333009\internal\ssh_host_key.dat
  • weird, because the local system user has full acccess, but maybe that's a mixup. Also - why would RCE write to that file? It contains a private key that should be read only

More surprises

2026-01-08 08:52:04,554 INFO  - de.rcenvironment.core.communication.transport.jms.activemq.internal.ActiveMQBroker - Listening for standard connections on 0.0.0.0:40000
2026-01-08 08:52:05,042 WARN  - de.rcenvironment.core.configuration.internal.SecureStorageServiceImpl - Failed to decrypt existing Secure Storage entry authorization.accessGroups/external_ALICIA:cdb9984ee17f694e as it was written with a different Secure Storage login/password. You can open the Secure Storage file D:\rce10\profiles\SL_HF_Public_relay_rce10_sl-333009\internal\settings.secure.dat (while RCE is not running) and delete the line starting with this entry to remove this warning.
2026-01-08 08:52:05,308 ERROR - de.rcenvironment.core.authorization.internal.AuthorizationServiceImpl - Error while restoring access group external_ALICIA:cdb9984ee17f694e: de.rcenvironment.core.utils.common.exception.OperationFailureException: Failed to read secure storage entry external_ALICIA:cdb9984ee17f694e in section authorization.accessGroups: org.eclipse.equinox.security.storage.StorageException: Given final block not properly padded. Such issues can arise if a bad key is used during decryption.
2026-01-08 08:52:05,715 INFO  - de.rcenvironment.core.configuration.internal.SecureStorageImportServiceImpl - Successfully imported and deleted D:\rce10\profiles\SL_HF_Public_relay_rce10_sl-333009\import\uplink-pws\sl-333009.txt

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions