ERROR! Decryption failed (no vault secrets were found that could decrypt)

847 views
Skip to first unread message

Nikolay Georgiev

unread,
Oct 18, 2019, 3:58:47 AM10/18/19
to Ansible Project
Hey,
i do experience a bug.. i cannot descrypt/edit/view vault.. did someone have it and how do you resolve it?

Ansible:2.8.5
OS/env : centos 7 1810


``` .venv) [centos@localhost ebrctl]$ ansible-vault edit group_vars/sandbox/vault  -vvvvv
ansible-vault 2.8.5
  config file = /home/centos/git/ebrctl/ansible.cfg
  configured module search path = [u'/home/centos/.ansible/plugins/modules', u'/usr/share/ansible/plugins/modules']
  ansible python module location = /usr/lib/python2.7/site-packages/ansible
  executable location = /usr/bin/ansible-vault
  python version = 2.7.5 (default, Aug  7 2019, 00:51:29) [GCC 4.8.5 20150623 (Red Hat 4.8.5-39)]
Using /home/centos/git/ebrctl/ansible.cfg as config file
Reading vault password file: /tmp/sb_vault_password
Reading vault password file: /tmp/prod_vault_password
Found a vault_id (default) in the vaulttext
Found a vault_id (default) in the vault text, but we do not have a associated secret (--vault-id)
Trying to use vault secret=(FileVaultSecret(filename='/tmp/sb_vault_password')) id=sandbox to decrypt None
Trying secret FileVaultSecret(filename='/tmp/sb_vault_password') for vault_id=sandbox
Tried to use the vault secret (sandbox) to decrypt (None) but it failed. Error: HMAC verification failed: Signature did not match digest.
Trying to use vault secret=(FileVaultSecret(filename='/tmp/prod_vault_password')) id=production to decrypt None
Trying secret FileVaultSecret(filename='/tmp/prod_vault_password') for vault_id=production
Tried to use the vault secret (production) to decrypt (None) but it failed. Error: HMAC verification failed: Signature did not match digest.
ERROR! Decryption failed (no vault secrets were found that could decrypt) for /home/centos/git/ebrctl/group_vars/sandbox/vault
```
Reply all
Reply to author
Forward
0 new messages