WSO2 Carbon 加密服务缺少属性

Question

当 WSO2 Identity Server 5.7.0 启动时，我在控制台输出中得到以下信息:

INFO {org.wso2.carbon.crypto.provider.internal.DefaultCryptoProviderComponent} -  'CryptoService.Secret' property has not been set. 'org.wso2.carbon.crypto.provider.SymmetricKeyInternalCryptoProvider' won't be registered as an internal crypto provider. Please set the secret if the provider needs to be registered.

这是我在/repository/conf/carbon.xml 中使用的配置:

<!--
       Configurations related to Carbon Crypto Service which is a crypto framework used inside Carbon products.
    -->
    <CryptoService>

        <Enabled>true</Enabled>

        <!-- The crypto provider which is used for internal data encryption and decryption -->
        <InternalCryptoProviderClassName>org.wso2.carbon.crypto.provider.KeyStoreBasedInternalCryptoProvider</InternalCryptoProviderClassName>

        <!--
            The crypto provider which is used for the crypto needs which come when communicating with external parties.
            e.g. Signing, Decrypting.
        -->
        <ExternalCryptoProviderClassName>org.wso2.carbon.core.encryption.KeyStoreBasedExternalCryptoProvider</ExternalCryptoProviderClassName>

        <!--
            The list of key resolvers which will be used based on the context when handling crypto with external parties.

            e.g. Resolving the public key of an external entity.
        -->
        <KeyResolvers>
            <KeyResolver className="org.wso2.carbon.crypto.defaultProvider.resolver.ContextIndependentKeyResolver" priority="-1"/>
        </KeyResolvers>

    </CryptoService>

<!--
            The KeyStore which is used for encrypting/decrypting internal data.
            This block is read by Carbon Crypto Service.
        -->
        <InternalKeyStore>
            <!-- Keystore file location-->
            <Location>${carbon.home}/repository/resources/security/internal.jks</Location>
            <!-- Keystore type (JKS/PKCS12 etc.)-->
            <Type>JKS</Type>
            <!-- Keystore password-->
            <!-- <Password svns:secretAlias="Carbon.Security.KeyStore.Password">password</Password> -->
            <Password>wso2carbon</Password>
            <Secret>wso2carbon</Secret>
            <!-- Private Key alias-->
            <KeyAlias>wso2carbon</KeyAlias>
            <!-- Private Key password-->
            <KeyPassword>wso2carbon</KeyPassword>
        </InternalKeyStore>

我该如何解决这个问题？

Answer 1

使用 deployment.toml 文件的 WSO2 API Manager 3.0.0+ 或 EI6.6.0+:

[encryption]
key = "CryptoService.Secret"

这将在启动时向 carbon.xml 添加适当的配置。

有关新配置如何工作的更多信息:deployment.toml configuration options

对于旧版本应用 carbon.xml 中的配置 .. 添加标签 Secret 到 CryptoService 标签:

<CryptoService>
..
<Secret>SECRET_KEY</Secret>
</CryptoService>