I tried it but it doesn't work. The passphrase appears not to be used.
I added the property in the /opt/SecureSpan/Gateway/node/default/etc/conf/system.properties
...
# Uncomment the configuration below if FIPS is enabled and SSL is required to connect to the Gateway database to access
# keystore and policies, etc. This configuration is specific to the CCJ 3.0.2.1 FIPS module.
#jdk.tls.namedGroups=secp256r1, secp384r1, secp521r1, ffdhe2048, ffdhe3072, ffdhe4096, ffdhe6144, ffdhe8192
com.l7tech.bootstrap.graphmanBundles.passphrase=test
EOF
The secret in file /opt/SecureSpan/Gateway/node/default/etc/bootstrap/bundle/aa.json can be installed with this passphrase. Already tested the import with "x-l7-passphrase" header with the Graphman API.
cat aa.json
{
"secrets": [{
"name": "test_bundle_aa",
"description": "test bundle",
"secret": "JEw3RXYwMyT0YlaHkYsE2Uz0uUObTNNC/tPJQ9f9a50ufvwaI7A8rw==",
"secretType": "PASSWORD",
"variableReferencable": true
}]
}
EOF
After restarting the ssg.
systemctl restart ssg
in /opt/SecureSpan/Gateway/node/default/var/logs/ssg_0_0.log
2025-05-15T11:54:10.913+0000 INFO 1 com.l7tech.server.boot.GatewayBoot: Starting Layer7 API Gateway 11.1.1 build 18484, built 20240801015801 by root at baa7cbc0f766
2025-05-15T11:54:11.350+0000 INFO 1 com.l7tech.server.boot.GatewayBoot: Database type: mysql
2025-05-15T11:54:11.352+0000 INFO 1 com.l7tech.server.boot.GatewayBoot: Starting gateway in TRADITIONAL mode
2025-05-15T11:54:11.354+0000 INFO 1 com.l7tech.server.boot.GatewayBoot: Enabled component: [com/l7tech/server/resources/uddiRuntimeContext.xml, com/l7tech/server/resources/uddiAdminContext.xml, com/l7tech/server/resources/databaseReplicationMonitorRuntimeContext.xml, c
om/l7tech/server/resources/databaseReplicationMonitorAdminContext.xml, com/l7tech/server/resources/processControllerRuntimeContext.xml, com/l7tech/server/resources/processControllerAdminContext.xml]
2025-05-15T11:54:12.310+0000 CONFIG 1 com.l7tech.server.SystemProperties: Setting system property org.apache.xml.security.ignoreLineBreaks=true
2025-05-15T11:54:12.311+0000 CONFIG 1 com.l7tech.server.SystemProperties: Setting system property javax.net.ssl.trustStoreType=jks
2025-05-15T11:54:12.312+0000 CONFIG 1 com.l7tech.server.SystemProperties: Setting system property com.l7tech.bootstrap.graphmanBundles.passphrase=test
2025-05-15T11:54:12.312+0000 CONFIG 1 com.l7tech.server.SystemProperties: Setting system property skipDDPKIProvider=true
2025-05-15T11:54:12.313+0000 CONFIG 1 com.l7tech.server.SystemProperties: Setting system property com.l7tech.server.extension.sharedCounterProvider=ssgdb
2025-05-15T11:54:12.314+0000 CONFIG 1 com.l7tech.server.SystemProperties: Setting system property com.l7tech.server.extension.sharedClusterInfoProvider=ssgdb
2025-05-15T11:54:12.314+0000 CONFIG 1 com.l7tech.server.SystemProperties: Setting system property com.l7tech.server.log.syslog.maxLength=1048576
...
2025-05-15T11:54:31.069+0000 INFO 45 com.l7tech.server.transport.http.HttpNamespaceFilter: Router mappings = '[/ssg/soap, /ssg/servlet/soap]'
2025-05-15T11:54:31.070+0000 INFO 45 com.l7tech.server.transport.http.HttpNamespaceFilter: Router servlet name = 'SoapMessageProcessingServlet'
2025-05-15T11:54:33.239+0000 INFO 1 com.l7tech.server.service.GraphmanBundleProcessor: bootstrapping GRAPHMAN bundle: /opt/SecureSpan/Gateway/node/default/etc/bootstrap/bundle/aa.json
2025-05-15T11:54:33.255+0000 INFO 1 com.l7tech.server.admin.AdminSessionManager: Enabling Internal Identity Provider for admin logins
2025-05-15T11:54:33.319+0000 INFO 1 com.l7tech.external.assertions.gatewaygraphql.server.util.AssertionGraphQLSchemaFactory: Transforming the GraphQL mutation operation installBundle/installBundleEntities
2025-05-15T11:54:33.479+0000 INFO 1 com.l7tech.external.assertions.gatewaygraphql.server.resolver.mutation.SecretMutationResolver: Error creating or updating SECURE_PASSWORD entity, Cannot decode the payload
2025-05-15T11:54:33.666+0000 WARNING 1 com.l7tech.external.assertions.gatewaygraphql.server.ServerGatewayGraphQLAssertion: Rolling back the operation-level transaction
2025-05-15T11:54:33.678+0000 INFO 1 com.l7tech.server.service.GraphmanBundleProcessor: Mutation response from GRAPHMAN: result=<class com.l7tech.policy.assertion.AssertionStatus: 0=FINE:No Error> httpStatus=200 body:
{"data":{"setServerModuleFiles":{"detailedStatus":[]},"setClusterProperties":{"detailedStatus":[]},"setServiceResolutionConfigs":{"detailedStatus":[]},"setPasswordPolicies":{"detailedStatus":[]},"setAdministrativeUserAccountProperties":{"detailedStatus":[]},"setFolders":{"detailedStatus":[]},"setRevocationCheckPolicies":{"detailedStatus":[]},"setTrustedCerts":{"detailedStatus":[]},"setSecrets":{"detailedStatus":[{"action":"NEW_OR_UPDATE","status":"ERROR","description":"Error creating or updating SECURE_PASSWORD entity, Cannot decode the payload","source":[{"name":"name","value":"test_bundle_aa"}]}]},"setHttpConfigurations":{"detailedStatus":[]},"setCustomKeyValues":{"detailedStatus":[]},"setSchemas":{"detailedStatus":[]},"setDtds":{"detailedStatus":[]},"setJdbcConnections":{"detailedStatus":[]},"setInternalIdps":{"detailedStatus":[]},"setFederatedIdps":{"detailedStatus":[]},"setLdapIdps":{"detailedStatus":[]},"setSimpleLdapIdps":{"detailedStatus":[]},"setFips":{"detailedStatus":[]},"setLdaps":{"detailedStatus":[]},"setFederatedGroups":{"detailedStatus":[]},"setFipGroups":{"detailedStatus":[]},"setInternalGroups":{"detailedStatus":[]},"setFederatedUsers":{"detailedStatus":[]},"setFipUsers":{"detailedStatus":[]},"setInternalUsers":{"detailedStatus":[]},"setCassandraConnections":{"detailedStatus":[]},"setSMConfigs":{"detailedStatus":[]},"setPolicies":{"detailedStatus":[]},"setPolicyFragments":{"detailedStatus":[]},"setEncassConfigs":{"detailedStatus":[]},"setGlobalPolicies":{"detailedStatus":[]},"setBackgroundTaskPolicies":{"detailedStatus":[]},"setServices":{"detailedStatus":[]},"setWebApiServices":{"detailedStatus":[]},"setSoapServices":{"detailedStatus":[]},"setInternalWebApiServices":{"detailedStatus":[]},"setInternalSoapServices":{"detailedStatus":[]},"setPolicyBackedIdps":{"detailedStatus":[]},"setJmsDestinations":{"detailedStatus":[]},"setEmailListeners":{"detailedStatus":[]},"setListenPorts":{"detailedStatus":[]},"setActiveConnectors":{"detailedStatus":[]},"setScheduledTasks":{"detailedStatus":[]},"setLogSinks":{"detailedStatus":[]},"setGenericEntities":{"detailedStatus":[]},"setRoles":{"detailedStatus":[]},"setAuditConfigurations":{"detailedStatus":[]},"setKeys":{"detailedStatus":[]}},"errors":[{"message":"Rolled back the transaction due to errors"}]}
2025-05-15T11:54:33.680+0000 WARNING 1 com.l7tech.server.boot.GatewayMain: Error starting server : Fatal error encountered while bootstrapping the GRAPHMAN bundles
2025-05-15T11:54:33.681+0000 INFO 1 STDERR: com.l7tech.server.service.MigrationBundleBootstrapService$BundleInstallFailedRuntimeException: Fatal error encountered while bootstrapping the GRAPHMAN bundles
2025-05-15T11:54:33.681+0000 INFO 1 STDERR: at com.l7tech.server.service.MigrationBundleBootstrapService.d(Unknown Source)
2025-05-15T11:54:33.681+0000 INFO 1 STDERR: at com.l7tech.server.service.MigrationBundleBootstrapService.onApplicationEvent(Unknown Source)
2025-05-15T11:54:33.681+0000 INFO 1 STDERR: at com.l7tech.server.util.q.onApplicationEvent(Unknown Source)
2025-05-15T11:54:33.681+0000 INFO 1 STDERR: at org.springframework.context.event.SimpleApplicationEventMulticaster.doInvokeListener(SimpleApplicationEventMulticaster.java:178)
2025-05-15T11:54:33.681+0000 INFO 1 STDERR: at org.springframework.context.event.SimpleApplicationEventMulticaster.invokeListener(SimpleApplicationEventMulticaster.java:171)
2025-05-15T11:54:33.681+0000 INFO 1 STDERR: at org.springframework.context.event.SimpleApplicationEventMulticaster.multicastEvent(SimpleApplicationEventMulticaster.java:145)
2025-05-15T11:54:33.681+0000 INFO 1 STDERR: at org.springframework.context.support.AbstractApplicationContext.publishEvent(AbstractApplicationContext.java:430)
2025-05-15T11:54:33.681+0000 INFO 1 STDERR: at org.springframework.context.support.AbstractApplicationContext.publishEvent(AbstractApplicationContext.java:387)
2025-05-15T11:54:33.681+0000 INFO 1 STDERR: at com.l7tech.policy.AssertionRegistry.publishEvent(Unknown Source)
2025-05-15T11:54:33.681+0000 INFO 1 STDERR: at com.l7tech.server.policy.ServerAssertionRegistry.access$300(Unknown Source)
2025-05-15T11:54:33.681+0000 INFO 1 STDERR: at com.l7tech.server.policy.aq.onScanComplete(Unknown Source)
2025-05-15T11:54:33.681+0000 INFO 1 STDERR: at com.l7tech.server.policy.module.ModulesScanner.scanModules(Unknown Source)
2025-05-15T11:54:33.681+0000 INFO 1 STDERR: at com.l7tech.server.policy.module.ModularAssertionsScanner.scanModules(Unknown Source)
2025-05-15T11:54:33.681+0000 INFO 1 STDERR: at com.l7tech.server.policy.ServerAssertionRegistry.b(Unknown Source)
2025-05-15T11:54:33.682+0000 INFO 1 STDERR: at com.l7tech.server.policy.ServerAssertionRegistry.runNeededScan(Unknown Source)
2025-05-15T11:54:33.682+0000 INFO 1 STDERR: at com.l7tech.server.policy.ServerAssertionRegistry.onApplicationEvent(Unknown Source)
2025-05-15T11:54:33.682+0000 INFO 1 STDERR: at com.l7tech.server.policy.ai.onApplicationEvent(Unknown Source)
2025-05-15T11:54:33.682+0000 INFO 1 STDERR: at org.springframework.context.event.SimpleApplicationEventMulticaster.doInvokeListener(SimpleApplicationEventMulticaster.java:178)
2025-05-15T11:54:33.682+0000 INFO 1 STDERR: at org.springframework.context.event.SimpleApplicationEventMulticaster.invokeListener(SimpleApplicationEventMulticaster.java:171)
2025-05-15T11:54:33.682+0000 INFO 1 STDERR: at org.springframework.context.event.SimpleApplicationEventMulticaster.multicastEvent(SimpleApplicationEventMulticaster.java:145)
2025-05-15T11:54:33.682+0000 INFO 1 STDERR: at org.springframework.context.support.AbstractApplicationContext.publishEvent(AbstractApplicationContext.java:430)
2025-05-15T11:54:33.682+0000 INFO 1 STDERR: at org.springframework.context.support.AbstractApplicationContext.publishEvent(AbstractApplicationContext.java:387)
2025-05-15T11:54:33.682+0000 INFO 1 STDERR: at com.l7tech.server.BootProcess.start(Unknown Source)
2025-05-15T11:54:33.682+0000 INFO 1 STDERR: at com.l7tech.server.boot.GatewayBoot.f(Unknown Source)
2025-05-15T11:54:33.682+0000 INFO 1 STDERR: at com.l7tech.server.boot.GatewayBoot.start(Unknown Source)
2025-05-15T11:54:33.682+0000 INFO 1 STDERR: at com.l7tech.server.boot.GatewayBoot.runUntilShutdown(Unknown Source)
2025-05-15T11:54:33.682+0000 INFO 1 STDERR: at com.l7tech.server.boot.GatewayMain.main(Unknown Source)
2025-05-15T11:54:33.682+0000 INFO 1 STDERR: Caused by: com.l7tech.server.service.MigrationBundleBootstrapService$FatalBundleInstallFailedException: Error encountered while processing the GRAPHMAN bundle: /opt/SecureSpan/Gateway/node/default/etc/bootstrap/bundle/aa.json
2025-05-15T11:54:33.682+0000 INFO 1 STDERR: at com.l7tech.server.service.GraphmanBundleProcessor.a(Unknown Source)
2025-05-15T11:54:33.682+0000 INFO 1 STDERR: at com.l7tech.server.service.GraphmanBundleProcessor.bootstrapBundles(Unknown Source)
2025-05-15T11:54:33.682+0000 INFO 1 STDERR: at com.l7tech.server.service.MigrationBundleBootstrapService.lambda$bootstrapGraphmanBundles$1(Unknown Source)
2025-05-15T11:54:33.682+0000 INFO 1 STDERR: at com.l7tech.gateway.common.spring.remoting.RemoteUtils.callWithConnectionInfo(Unknown Source)
2025-05-15T11:54:33.683+0000 INFO 1 STDERR: at com.l7tech.server.event.c.call(Unknown Source)
2025-05-15T11:54:33.683+0000 INFO 1 STDERR: ... 27 more
2025-05-15T11:54:33.683+0000 INFO 1 STDERR: Caused by: com.l7tech.server.service.GraphmanBundleProcessor$GraphmanBundleException: Errors detected with the GRAPHMAN bootstrapping response
2025-05-15T11:54:33.683+0000 INFO 1 STDERR: at com.l7tech.server.service.GraphmanBundleProcessor.a(Unknown Source)
2025-05-15T11:54:33.683+0000 INFO 1 STDERR: at com.l7tech.server.service.GraphmanBundleProcessor.b(Unknown Source)
2025-05-15T11:54:33.683+0000 INFO 1 STDERR: ... 32 more
2025-05-15T11:54:33.684+0000 INFO 1 STDERR:
**** Unable to start the server: Error starting server : Fatal error encountered while bootstrapping the GRAPHMAN bundles
2025-05-15T11:54:33.688+0000 INFO 91 com.l7tech.util.ShutdownExceptionHandler: Received shutdown notification.
EOF