cipher: message authentication failed

[israaaa270]

when I run
-hydra serve all
I get that error.
time=2021-01-20T11:49:03+02:00 level=fatal msg=Could not ensure that signing keys for "hydra.openid.id-token" exists. If you are running against a persistent SQL database this is most
likely because your "secrets.system" ("SECRETS_SYSTEM" environment variable) is not set or changed. When running with an SQL database backend you need to make sure that the secret is s
et and stays the same, unless when doing key rotation. This may also happen when you forget to run "hydra migrate sql".. audience=application error=map[message:cipher: message authenti
cation failed] service_name=ORY Hydra service_version=master

I before run hydra migrate sql .

[vinckr]

You ran hydra migrate sql before?

this is most likely because your "secrets.system" ("SECRETS_SYSTEM" environment variable) is not set or changed.

Did you check your SECRETS?

Are your running Hydra in docker, kubernetes or plain install?

[aeneasr]

It is the Ory Hydra configuration file. Please check out the Quickstart (@vinckr could you add a link to or embed the configuration file itself in the docs here?). Maybe it makes sense to do an FAQ item around this as well, and link in the ORY Hydra CLI to that FAQ entry if the config file is not found.

Check out the reference as well: https://www.ory.sh/hydra/docs/reference/configuration

[israaaa270]

thank you @aeneasr

[israaaa270]

thanks so much @aeneasr @vinckr

[israaaa270]

this error is returned again when run hydra serve all: but returned message: malformed ciphertext

time=2021-01-31T11:06:03+02:00 level=fatal msg=Could not ensure that signing keys for "hydra.openid.id-token" exists. If you are running against a persistent SQL database this is most likely because your "secrets.system" ("SECRETS_SYSTEM" environment variable) is not set or changed. When running with an SQL database backend you need to make sure that the secret is s et and stays the same, unless when doing key rotation. This may also happen when you forget to run "hydra migrate sql".. audience=application error=map[message:malformed ciphertext] service_name=ORY Hydra service_version=master

what are the reason it returned message:malformed ciphertext when it decrypt in GetKeySet in persister jwk?

[vinckr]

Going by the error message, something with the SECRETS_SYSTEM is not working.
You have the same setup as here: #2315 (reply in thread) ?
Did you start with a new SQL database ?
Did you run hydra migrate sql ?

What hydra.yaml are you using now ?

Can you go through the First Aid again just to make sure it is not a wrong URL or potentially find more information:
https://www.ory.sh/hydra/docs/debug/#first-aid

[steowens]

According to this documentation: https://github.com/ory/hydra

This set of commands ought to get a QuickStart hydra set up:
make docker
docker compose -f quickstart.yml up # ....

Maybe spend a little time on the documentation to clarify the missing pieces that would be known to the development team but unknown to newcomers to hydra who are relying on your documentation?

[vinckr]

Hello Steven,
thanks, yea that is the correct set of commands.

Did you run into any issues running Ory Hydra?

As for documentation, we are always open to requests and feedback as well as any form of contributions - ideally directly in the documentation repository: https://github.com/ory/docs/issues

Thanks!

[steowens]

Yes I have tried everything I can find on the web and the only thing that seems to even begin to get Dry Hydra up and running is for me to create my own Dockerfile, and build from source . All of the other junk out there simply doesn't work.