Title: The documented RabbitMQ credential encryption feature using Jasypt is non-functional on CloudStack 4.22.x · Issue #13352 · apache/cloudstack · GitHub
Open Graph Title: The documented RabbitMQ credential encryption feature using Jasypt is non-functional on CloudStack 4.22.x · Issue #13352 · apache/cloudstack
X Title: The documented RabbitMQ credential encryption feature using Jasypt is non-functional on CloudStack 4.22.x · Issue #13352 · apache/cloudstack
Description: problem If we follow the documented RabbitMQ credential encryption feature, literally copy paste the configuration from https://docs.cloudstack.apache.org/en/4.22.0.0/adminguide/events.html , the encrypted credentials are not being decry...
Open Graph Description: problem If we follow the documented RabbitMQ credential encryption feature, literally copy paste the configuration from https://docs.cloudstack.apache.org/en/4.22.0.0/adminguide/events.html , the e...
X Description: problem If we follow the documented RabbitMQ credential encryption feature, literally copy paste the configuration from https://docs.cloudstack.apache.org/en/4.22.0.0/adminguide/events.html , the e...
Opengraph URL: https://github.com/apache/cloudstack/issues/13352
X: @github
Domain: github.com
{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"The documented RabbitMQ credential encryption feature using Jasypt is non-functional on CloudStack 4.22.x","articleBody":"### problem\n\nIf we follow the documented RabbitMQ credential encryption feature, literally copy paste the configuration from https://docs.cloudstack.apache.org/en/4.22.0.0/adminguide/events.html , the encrypted credentials are not being decrypted and RabbitMQ connection is not established. Instead the error messages are thrown to the management server log about missing classes.\n\nUpon further analysis it seems the jasypt library is incompatible with Spring 5+. There is a https://github.com/jasypt/jasypt/issues/25 and/or https://github.com/jasypt/jasypt/issues/35 . And so this is most probably the root cause as the class fails to load on Spring 5 which CloudStack is using.\n\n\n\n### versions\n\nCloudStack 4.22.1.0 and also 4.22.0.1, Standard management server install, Ubuntu\n\n### The steps to reproduce the bug\n\nSTEPS TO REPRODUCE \n1. Follow the AMQP configuration documentation at https://docs.cloudstack.apache.org/en/4.22.0.0/adminguide/events.html\n2. Add the documented Jasypt bean configuration to spring-event-bus-context.xml\n3. Restart cloudstack-management\n\nEXPECTED BEHAVIOUR:\nEncrypted credentials are decrypted and RabbitMQ connection is established.\n\nACTUAL BEHAVIOUR:\n``` \nError creating bean with name 'org.apache.cloudstack.spring.lifecycle.ConfigDepotLifeCycle#0': Unsatisfied dependency expressed through field 'configDepotAdmin'; nested exception is org.springframework.beans.factory.CannotLoadBeanClassException: Cannot find class [org.jasypt.spring3.properties.EncryptablePropertyPlaceholderConfigurer] for bean with name 'propertyConfigurer' defined in file [/etc/cloudstack/management/META-INF/cloudstack/event/spring-event-bus-context.xml]; nested exception is java.lang.ClassNotFoundException: org.jasypt.spring3.properties.EncryptablePropertyPlaceholderConfigurer\n/var/log/cloudstack/management/management-server.log.2026-06-03.gz:Caused by: org.springframework.beans.factory.CannotLoadBeanClassException: Cannot find class [org.jasypt.spring3.properties.EncryptablePropertyPlaceholderConfigurer] for bean with name 'propertyConfigurer' defined in file [/etc/cloudstack/management/META-INF/cloudstack/event/spring-event-bus-context.xml]; nested exception is java.lang.ClassNotFoundException: org.jasypt.spring3.properties.EncryptablePropertyPlaceholderConfigurer\n/var/log/cloudstack/management/management-server.log.2026-06-03.gz:Caused by: java.lang.ClassNotFoundException: org.jasypt.spring3.properties.EncryptablePropertyPlaceholderConfigurer\n```\n\n### What to do about it?\n\nReplace the implementation with a Spring 5-compatible alternative\nand/or document a supported workaround. Also, there is second issue with the PBEWithMD5AndDES is no longer considered secure, so the solution shall be future proof. ","author":{"url":"https://github.com/durdin85","@type":"Person","name":"durdin85"},"datePublished":"2026-06-05T08:19:05.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":1},"url":"https://github.com/13352/cloudstack/issues/13352"}
| route-pattern | /_view_fragments/issues/show/:user_id/:repository/:id/issue_layout(.:format) |
| route-controller | voltron_issues_fragments |
| route-action | issue_layout |
| fetch-nonce | v2:574c3cf0-2464-3694-08b4-4f4f7ef35e55 |
| current-catalog-service-hash | 81bb79d38c15960b92d99bca9288a9108c7a47b18f2423d0f6438c5b7bcd2114 |
| request-id | 8ED6:2BCCB3:B7166B:1027D39:6A4D20BB |
| html-safe-nonce | c0d2f6cca251752f282a53ab216494c1b534cddb11e1b20c0f8a350fd303a9a8 |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiI4RUQ2OjJCQ0NCMzpCNzE2NkI6MTAyN0QzOTo2QTREMjBCQiIsInZpc2l0b3JfaWQiOiI3NzExMjgzMTg5NTI4NzMxODM1IiwicmVnaW9uX2VkZ2UiOiJpYWQiLCJyZWdpb25fcmVuZGVyIjoiaWFkIn0= |
| visitor-hmac | 9a7311067425a1a4f424998a8e234fe590008f10e126010c94419ab9cde2bebc |
| hovercard-subject-tag | issue:4595433819 |
| github-keyboard-shortcuts | repository,issues,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | / |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/_view_fragments/issues/show/apache/cloudstack/13352/issue_layout |
| twitter:image | https://opengraph.githubassets.com/c3dad6e3766062a6c2c8dbb2205951ce367fb8baf0bf4f8db98a021c43774a63/apache/cloudstack/issues/13352 |
| twitter:card | summary_large_image |
| og:image | https://opengraph.githubassets.com/c3dad6e3766062a6c2c8dbb2205951ce367fb8baf0bf4f8db98a021c43774a63/apache/cloudstack/issues/13352 |
| og:image:alt | problem If we follow the documented RabbitMQ credential encryption feature, literally copy paste the configuration from https://docs.cloudstack.apache.org/en/4.22.0.0/adminguide/events.html , the e... |
| og:image:width | 1200 |
| og:image:height | 600 |
| og:site_name | GitHub |
| og:type | object |
| og:author:username | durdin85 |
| hostname | github.com |
| expected-hostname | github.com |
| None | 92571a8944142227b7e19cd10918b1ddd06e5066c1ad5bc7e4769cf6140a87e6 |
| turbo-cache-control | no-preview |
| go-import | github.com/apache/cloudstack git https://github.com/apache/cloudstack.git |
| octolytics-dimension-user_id | 47359 |
| octolytics-dimension-user_login | apache |
| octolytics-dimension-repository_id | 9759448 |
| octolytics-dimension-repository_nwo | apache/cloudstack |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 9759448 |
| octolytics-dimension-repository_network_root_nwo | apache/cloudstack |
| turbo-body-classes | logged-out env-production page-responsive |
| disable-turbo | false |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | 93f17a978ee60bc4668e1d7b90e6bd2d622261fd |
| ui-target | full |
| theme-color | #1e2327 |
| color-scheme | light dark |
Links:
Viewport: width=device-width