How To Recover Custom Identity And Custom Trust Keystore Password

==> Password information are stored in security data file  SerializedSystemIni.dat which cannot be readable like text files.

==> Encrypted passwords are stored in config.xml, boot.properties And DataSource-jdbc.xml file can be visible to user.

==> Using Encrypted password and SerializedSystemIni.dat file we can recover passwords

==> Using this method one can recover password for 

• weblogic Admin Console
• KeyStore password
• Data source Password 

1) Create a file DecryptTest.py  with below content in $DOMAIN_HOME/security directory

from weblogic.security.internal import *
from weblogic.security.internal.encryption import *

#This will prompt you to make sure you have SerializedSystemIni.dat file under #current directory from where you are running command
raw_input("Please make sure you have SerializedSystemIni.dat inside the current directory, if yes press ENTER to continue.")

# Encryption service
encryptionService = SerializedSystemIni.getEncryptionService(".")
clearOrEncryptService = ClearOrEncryptedService(encryptionService)

# Take encrypt password from user
pwd = raw_input("Please enter encrypted password (Eg. {3DES}Bxt5E3...): ")

# Delete unnecessary escape characters
preppwd = pwd.replace("\\", "")

# Decrypt password
print "Your password is: " + clearOrEncryptService.decrypt(preppwd)

2) Source the environment using setDomainEnv.sh 

cd /oracle/Middleware/user_projects/domains/prod_domain/bin
. ./setDomainEnv.sh

3) Get the custom identity keystore password from config.xml

<custom-identity-key-store-pass-phrase-encrypted>{AES}NtJU+ki8yu5Pr2K+c4jHtLKs//Th3ZXnAvKgnt0LFmE=</custom-identity-key-store-pass-phrase-encrypted>

4) Now Navigate to $DOMAIN_HOME/security directory and execute below command and enter

cd /oracle/Middleware/user_projects/domains/prod_domain/security
java weblogic.WLST DecryptTest.py

5) Enter the password from step 3

 {AES}NtJU+ki8yu5Pr2K+c4jHtLKs//Th3ZXnAvKgnt0LFmE=

COMPLETED...................