The /var/lib/pki/pki-tomcat/logs/ca/selftests.log reads:
0.localhost-startStop-2 - [06/Nov/2018:15:55:02 PST] [20] [1] SelfTestSubsystem:
Initializing self test plugins:
0.localhost-startStop-2 - [06/Nov/2018:15:55:02 PST] [20] [1] SelfTestSubsystem: loading
all self test plugin logger parameters
0.localhost-startStop-2 - [06/Nov/2018:15:55:02 PST] [20] [1] SelfTestSubsystem: loading
all self test plugin instances
0.localhost-startStop-2 - [06/Nov/2018:15:55:02 PST] [20] [1] SelfTestSubsystem: loading
all self test plugin instance parameters
0.localhost-startStop-2 - [06/Nov/2018:15:55:02 PST] [20] [1] SelfTestSubsystem: loading
self test plugins in on-demand order
0.localhost-startStop-2 - [06/Nov/2018:15:55:02 PST] [20] [1] SelfTestSubsystem: loading
self test plugins in startup order
0.localhost-startStop-2 - [06/Nov/2018:15:55:02 PST] [20] [1] SelfTestSubsystem: Self test
plugins have been successfully loaded!
0.localhost-startStop-2 - [06/Nov/2018:15:55:03 PST] [20] [1] SelfTestSubsystem: Running
self test plugins specified to be executed at startup:
0.localhost-startStop-2 - [06/Nov/2018:15:55:03 PST] [20] [1] CAPresence: CA is present
0.localhost-startStop-2 - [06/Nov/2018:15:55:03 PST] [20] [1] SystemCertsVerification:
system certs verification failure: Certificate Server-Cert cert-pki-ca is invalid: Invalid
certificate: (-8181) Peer's Certificate has expired.
0.localhost-startStop-2 - [06/Nov/2018:15:55:03 PST] [20] [1] SelfTestSubsystem: The
CRITICAL self test plugin called selftests.container.instance.SystemCertsVerification
running at startup FAILED!
0.localhost-startStop-3 - [06/Nov/2018:15:55:17 PST] [20] [1] SelfTestSubsystem:
Initializing self test plugins:
0.localhost-startStop-3 - [06/Nov/2018:15:55:17 PST] [20] [1] SelfTestSubsystem: loading
all self test plugin logger parameters
0.localhost-startStop-3 - [06/Nov/2018:15:55:17 PST] [20] [1] SelfTestSubsystem: loading
all self test plugin instances
0.localhost-startStop-3 - [06/Nov/2018:15:55:17 PST] [20] [1] SelfTestSubsystem: loading
all self test plugin instance parameters
0.localhost-startStop-3 - [06/Nov/2018:15:55:17 PST] [20] [1] SelfTestSubsystem: loading
self test plugins in on-demand order
0.localhost-startStop-3 - [06/Nov/2018:15:55:17 PST] [20] [1] SelfTestSubsystem: loading
self test plugins in startup order
0.localhost-startStop-3 - [06/Nov/2018:15:55:17 PST] [20] [1] SelfTestSubsystem: Self test
plugins have been successfully loaded!
0.localhost-startStop-3 - [06/Nov/2018:15:55:17 PST] [20] [1] SelfTestSubsystem: Running
self test plugins specified to be executed at startup:
0.localhost-startStop-3 - [06/Nov/2018:15:55:17 PST] [20] [1] CAPresence: CA is present
0.localhost-startStop-3 - [06/Nov/2018:15:55:17 PST] [20] [1] SystemCertsVerification:
system certs verification failure: Certificate Server-Cert cert-pki-ca is invalid: Invalid
certificate: (-8181) Peer's Certificate has expired.
0.localhost-startStop-3 - [06/Nov/2018:15:55:17 PST] [20] [1] SelfTestSubsystem: The
CRITICAL self test plugin called selftests.container.instance.SystemCertsVerification
running at startup FAILED!
Okay, we know cert has expired, but I am configuring basic auth for PKI, so why is this
relevant now?