Cannot start Bamboo due to pad block corrupted error

[Andreas Pohl]

We cloned the database schema to a test instance.

Bamboo doesn't start afterwards because of the following error message:

FATAL [localhost-startStop-1] [BambooContainer] Cannot start bamboo
com.google.common.util.concurrent.UncheckedExecutionException: java.lang.RuntimeException: org.bouncycastle.crypto.InvalidCipherTextException: pad block corrupted

Editing the bamboo-mail.cfg.xml as described at https://confluence.atlassian.com/bamkb/upgrade-task-51602-fails-pad-block-corrupted-915474011.html doesn't help.

Any idea how can we start Bamboo?

[Elias Zeidan (they/them) · Accepted solution]

Hi Andreas,

Thanks for reaching out to the Atlassian Community!

The "Pad block corrupted" error occurs when we're unable to correctly use the Bamboo Cipher. 

The Cipher is split between the database and filesystem, and the filesystem part is stored in

<bamboo-home>/xml-data/configuration/cipher/cipher.key_0

When you cloned the Bamboo database, did you also copy the Bamboo Home directory? If you did not, please:

1. Stop Bamboo
2. Copy the cipher.key_0 file from the original Bamboo instance to the clone into the correct directory – you may need to create the `<bamboo-home>/xml-data/configuration/cipher/cipher.key_x`
3. Start Bamboo

Please let us know if this works, or if you have any other questions!

Thanks,

Elias | Bamboo Support

[Andreas Pohl]

Hi Elias,

Thanks a lot for your quick reply!

That fixed the issue, Bamboo was able to start up after I copied the cipher.key_x from the cloned system.

Cheers

Andreas

[Elias Zeidan (they/them)]

Hi Andreas, 

I'm glad we were able to help you get back up and running!

Could you please "Accept" this answer by clicking on the checkmark symbol near my first comment in case other users might find this helpful?

Thanks again for reaching out. If you have any other questions, please do not hesitate to ask!

Elias | Bamboo Support

[cnp rayan]

@Elias Zeidan (they/them) 

What if we miss that cipher?

[Elias Zeidan (they/them)]

Hi @cnp rayan ,

Thanks for your question.

For security reasons, if the cipher is missing Bamboo will not start under default configuration.

There is a system parameter that can be added to Bamboo to disable the encryption/decryption.

-Dbamboo.security.encryption.disable=true

With this added Bamboo can start, but any data that had been encrypted previously will not be available. Depending on your version of Bamboo, this could include variables, Repository configurations, secrets, passwords, and more.

If you can, I would strongly encourage you to contact Bamboo Support for assistance with a restore.

Thanks,

Elias | Former Bamboo Support Engineer