[chef] Re: Chef-vault: Unable to read passwords

[Steffen Gebert < >]

Hi,

> I have the problem that I can't read my secrets with chef-vault (on my
> workstation, but it works on nodes).

anybody an idea?

Thanks
Steffen

On 27/11/13 21:13, Steffen Gebert wrote:
> Hi,
> 
> I have the problem that I can't read my secrets with chef-vault (on my
> workstation, but it works on nodes).
> 
>> $ knife encrypt create secrets test '{"test":"foo"}' --admins user1 --mode 
>> client
>> $ knife encrypt update secrets test '{"test":"foo"}' --admins user1,user2 
>> --mode client
>> ERROR: OpenSSL::PKey::RSAError: padding check failed
>> $ knife decrypt secrets test 'test' --mode client
>> ERROR: OpenSSL::PKey::RSAError: padding check failed
> 
> I'm not sure, what's the reason, but it seems to use a different key for
> encryption than for decryption? The same happens for another colleague.
> 
> `knife client show user1` and `knife user show user1` report different
> public keys. Could this be the reason? Why has the user a public key
> (thought it's only for logging into the webui).
> 
> Thanks for your help
> Steffen
> 
>