All,
This is solved. For those that find themselves in the same ship as I do, it was versioning, as Fraser said.
The dir /var/lib/pki/pki-tomcat/ca/webapps was pointing to the wrong pki package.
# Correct: [root@starkey webapps]# rpm -qf /usr/share/pki/ca/webapps/ca/WEB-INF/lib/pki-cmscore.jar pki-ca-10.6.8-3.fc29.noarch
# Wrong: [root@starkey webapps]# rpm -qf /usr/share/java/pki/pki-cmscore.jar pki-server-10.6.8-3.fc29.noarch
In the meantime I am wondering how other's dir's are looking. More symlinks? This installation is ancient (the 10 yead root-CA expired two months ago), perhaps something went missing in the fedora updates.
[root@starkey ca]# pwd /var/lib/pki/pki-tomcat/ca [root@starkey ca]# ll total 32 lrwxrwxrwx. 1 pkiuser pkiuser 29 Dec 7 2014 alias -> /var/lib/pki/pki-tomcat/alias lrwxrwxrwx. 1 pkiuser pkiuser 22 Dec 7 2014 conf -> /etc/pki/pki-tomcat/ca drwxrwx---. 2 pkiuser pkiuser 4096 Dec 7 2014 emails lrwxrwxrwx. 1 pkiuser pkiuser 26 Dec 7 2014 logs -> /var/log/pki/pki-tomcat/ca drwxrwx---. 3 pkiuser pkiuser 4096 Dec 7 2014 profiles lrwxrwxrwx. 1 pkiuser pkiuser 36 Dec 7 2014 registry -> /etc/sysconfig/pki/tomcat/pki-tomcat lrwxrwxrwx. 1 root root 25 Dec 20 14:12 webapps -> /usr/share/pki/ca/webapps
Kind Regards,
Arjen Heidinga
Op 14-12-18 om 15:52 schreef Arjen Heidinga via FreeIPA-users:
Dear all,
I fear somehow my freeipa server is broken. Perhaps it is time to create a new one, however that would be very time-consuming.
Yesterday everything broke, after FreeIPA was upgraded. It is worth mentioning that I had certificate issues recently. My root-CA, and httpd-cert expired.
When I start the tomcat-pki daemon, I get presented the stacktrace below. Note to mention, the pcscd lines are everytime exactly there when trying to start.
I'd appreciate it if someone has a clue.
Kind Regards,
Arjen Heidinga
Dec 14 15:31:44 starkey.platypusnet.org systemd[1]: Starting PKI Tomcat Server pki-tomcat... -- Subject: Unit pki-tomcatd@pki-tomcat.service has begun start-up -- Defined-By: systemd -- Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahoste...