Re: [I] The documented RabbitMQ credential encryption feature using Jasypt is non-functional on CloudStack 4.22.x [cloudstack]

["github-actions[bot] (via GitHub)" <gi...@apache.org>]

github-actions[bot] commented on issue #13352:
URL: https://github.com/apache/cloudstack/issues/13352#issuecomment-5346145622

   ## 🎯 Triage report
   
   Following the documented Jasypt-based RabbitMQ credential encryption setup fails with `ClassNotFoundException: org.jasypt.spring3.properties.EncryptablePropertyPlaceholderConfigurer`. The reporter traced this to Jasypt's `spring3` module being incompatible with the Spring 5 version CloudStack uses. A maintainer has since pointed at PR #13676 as a possible fix, pending confirmation from the reporter.
   
   ### 📊 Assessment
   
   | Dimension | Value | Reasoning |
   |---|---|---|
   | **Type** | type:bug | Documented, officially supported configuration does not work as documented — a functional defect (and doc/config mismatch). |
   | **Component** | component:management-server | Event bus/RabbitMQ integration is part of the management server. |
   | **Severity** | n/a | Not independently assessed; feature is non-functional but has a workaround (skip encryption) and a candidate fix already in flight. |
   | **Labels** | type:bug, component:management-server | See above |
   | **Coding agent** | Needs more info | A candidate PR (#13676) already exists; work should be verification/finishing that PR rather than a fresh implementation, and requires reporter/maintainer confirmation it resolves the issue. |
   
   <details><summary>💡 Notes and suggestions</summary>
   
   - Related PR: https://github.com/apache/cloudstack/pull/13676 (maintainer-linked, pending confirmation from reporter as of 2026-07-24).
   - The reporter also flagged that even if the class-loading issue is fixed, `PBEWithMD5AndDES` (the cipher used) is weak and should be replaced with a modern algorithm as part of any fix.
   - No other similar existing issues were found in a quick search.
   
   </details>
   
   
   
   > Generated by [Daily Issue Triage](https://github.com/apache/cloudstack/actions/runs/32259459580) · sonnet50 262K · [◷](https://github.com/search?q=repo%3Aapache%2Fcloudstack+%22gh-aw-workflow-call-id%3A+apache%2Fcloudstack%2Fdaily-issue-triage%22&type=issues)
   >
   <details>
   <summary>Add this agentic workflows to your repo</summary>
   
   To install this agentic workflow, run
   
   ```
   gh aw add githubnext/agentics/workflows/daily-issue-triage.md@d7c1dc4b72b00607a67caaffdcc216cb64379cf9
   ```
   </details>
   
   
   <!-- gh-aw-agentic-workflow: Daily Issue Triage, engine: copilot, version: 1.0.52, model: claude-sonnet-5, id: 32259459580, workflow_id: daily-issue-triage, run: https://github.com/apache/cloudstack/actions/runs/32259459580 -->
   <!-- gh-aw-workflow-call-id: apache/cloudstack/daily-issue-triage -->


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@cloudstack.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org