This message was deleted.
# bolts
Slackbot
06/30/2023, 11:02 AMThis message was deleted.
y
Yury Bushmelev
06/30/2023, 11:07 AMI can see some examples here: https://forge.puppet.com/modules/puppetlabs/pkcs7/readme
j
Jim
06/30/2023, 11:23 AMYeah. I read thought and I am pretty sure I am following the instructions to the letter. I am getting precisely the same issue per this issue:
https://github.com/puppetlabs/bolt/issues/1451
But my version of bolt is current.
y
Yury Bushmelev
06/30/2023, 11:29 AMCould you maybe then share some minimal reproducer here (via gist or pastebin better)
š 1
j
Jim
06/30/2023, 11:51 AMThanks for the prompt reply!! I realize I was taking the instructions too literally. My issue was that I was expecting the cli to be able to somehow fantastically read and understand my bolt inventory.yaml.
The decrypt task needs to be passed the actual encrypted PKCS7 string. Which is obvious if you actually read.
Thanks Yury.
šš» 1
y
Yury Bushmelev
06/30/2023, 12:19 PMAh, good to know itās resolved!
j
Jim
06/30/2023, 12:20 PMSadly itās now returning BAD_PASSWORD and I know the password is right!!
š¤ 1
Jim
06/30/2023, 12:23 PMWhen I pass <encrypted value> to bolt secret decrypt it works. And when I use that password manually in sudo it works. And then I use that password as the sudo-pasword keys value it works.
y
Yury Bushmelev
06/30/2023, 12:27 PMIād try to put it under targetās vars in the inventory and check bolt inventory show ādetails
Yury Bushmelev
06/30/2023, 12:28 PMThough it might show the password as well maybe
j
Jim
06/30/2023, 12:29 PMThanks for the pointer. I will try that!
Jim
06/30/2023, 12:42 PMYeah. So that shows the value correctly. I noticed my <encrypted value> was prefixed with āENC[PKCS8]ā and not āENC[PKCS7]ā I changed that and it decrypts the pasword correctly with bolt inventory show -details butā¦ still BAD_PASSWORD when bolt tries to use it.
y
Yury Bushmelev
06/30/2023, 1:43 PMCan you login manually with the username and password? Iād check with native-ssh as well.. maybe ruby net-ssh does something unexpected