Why do I receive an encryption exception running the ROCS utility.

Problem

I am getting the following error when I apply the client credential in the configuration.properties file for this property CLIENT_CREDENTIALS.

Answer

The ROCS Utility supports both password and client credentials authentication. When we reviewed the configuration.properties file, we observed that the property was set as:

CLIENT_CREDENTIALS=ENC(RGF0YW6S…==)

The ENC(...) wrapper indicated to ROCS that the value should be decrypted using Jasypt. However, the value had not been encrypted with Jasypt, and no decryption password had been provided. As a result, ROCS threw an EncryptionOperationNotPossibleException.

Recommended Action

The property should have been updated to use either a properly Jasypt-encrypted value (with the corresponding decryption password provided at runtime) or a plain Base64-encoded string without the ENC(...) wrapper.

To validate the client credentials, the following POST request could have been used:

POST https://na03.reltio.com/oauth/token?grant_type=client_credentials
Authorization: Basic <your_base64_encoded_credentials>

Where <your_base64_encoded_credentials> is the Base64-encoded form of client_id:client_secret.

Resource

https://bitbucket.org/reltio-ondemand/reltio-cst-core/src/e6aa6b78df6f15e8f7423b28d31fb5fef8181747/src/main/java/com/reltio/cst/util/Util.java#lines-99