1580809 - Catch azure error and log something more sensible

Status: RESOLVED FIXED

(Taskcluster :: Services, enhancement, P5)

Description

[Hassan Ali (:hassan)]

I was trying to set up my cluster but noticed that the status of taskcluster-auth-web in the google cloud UI was Does not have minimum availability. Viewing its logs showed:

Error: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt at
Decipheriv.final (internal/crypto/cipher.js:164:28) at
EncryptedTextType.EncryptedBaseType.fromBuffer (/app/node_modules/azure-entitie
/src/entitytypes.js:722:30) at EncryptedTextType.BaseBufferType.deserialize
(/app/node_modules/azure-entities/src/entitytypes.js:512:15) at /app/node_module
/azure-entities/src/entity.js:499:37 at /app/node_modules/lodash/lodash.js:4905:15 at
Function.forIn (/app/node_modules/lodash/lodash.js:12950:11) at subClass.__deserialize
(/app/node_modules/azure-entities/src/entity.js:498:9) at subClass.Entity
(/app/node_modules/azure-entities/src/entity.js:93:30) at subClass (/app/node_module
/azure-entities/src/entity.js:306:12) at subClass (/app/node_modules/azure-entitie
/src/entity.js:306:12) at subClass (/app/node_modules/azure-entities/src/entity.js:306:12) at
new subClass (/app/node_modules/azure-entities/src/entity.js:598:12) at
/app/node_modules/azure-entities/src/entity.js:1267:18 at Array.map (<anonymous>) at
/app/node_modules/azure-entities/src/entity.js:1266:37 at process._tickCallback
(internal/process/next_tick.js:68:7)

To fix this issue, it turns out I had to delete all the tables and blobs of my azure service account then run yarn dev:apply. We should probably catch that error and log something more sensible.

Comment 1

[Dustin J. Mitchell [:dustin] (he/him)]

Hassan, this is probably something we should consider when implementing row encryption / signing support in tc-lib-pg.

Comment 2

[Dustin J. Mitchell [:dustin] (he/him)]

We considered this in the encryption settings -- there's a key name included in the blob now.