All,

This is solved. For those that find themselves in the same ship as I do, it was versioning, as Fraser said.

The dir /var/lib/pki/pki-tomcat/ca/webapps was pointing to the wrong pki package.

# Correct:
[root@starkey webapps]# rpm -qf /usr/share/pki/ca/webapps/ca/WEB-INF/lib/pki-cmscore.jar
pki-ca-10.6.8-3.fc29.noarch

# Wrong:
[root@starkey webapps]# rpm -qf /usr/share/java/pki/pki-cmscore.jar
pki-server-10.6.8-3.fc29.noarch

In the meantime I am wondering how other's dir's are looking. More symlinks? This installation is ancient (the 10 yead root-CA expired two months ago), perhaps something went missing in the fedora updates.


[root@starkey ca]# pwd
/var/lib/pki/pki-tomcat/ca
[root@starkey ca]# ll
total 32
lrwxrwxrwx. 1 pkiuser pkiuser   29 Dec  7  2014 alias -> /var/lib/pki/pki-tomcat/alias
lrwxrwxrwx. 1 pkiuser pkiuser   22 Dec  7  2014 conf -> /etc/pki/pki-tomcat/ca
drwxrwx---. 2 pkiuser pkiuser 4096 Dec  7  2014 emails
lrwxrwxrwx. 1 pkiuser pkiuser   26 Dec  7  2014 logs -> /var/log/pki/pki-tomcat/ca
drwxrwx---. 3 pkiuser pkiuser 4096 Dec  7  2014 profiles
lrwxrwxrwx. 1 pkiuser pkiuser   36 Dec  7  2014 registry -> /etc/sysconfig/pki/tomcat/pki-tomcat
lrwxrwxrwx. 1 root    root      25 Dec 20 14:12 webapps -> /usr/share/pki/ca/webapps

Kind Regards,

Arjen Heidinga


Op 14-12-18 om 15:52 schreef Arjen Heidinga via FreeIPA-users:
Dear all,

I fear somehow my freeipa server is broken. Perhaps it is time to create
a new one, however that would be very time-consuming.

Yesterday everything broke, after FreeIPA was upgraded. It is worth
mentioning that I had certificate issues recently. My root-CA, and
httpd-cert expired.

When I start the tomcat-pki daemon, I get presented the stacktrace
below. Note to mention, the pcscd lines are everytime exactly there when
trying to start.

I'd appreciate it if someone has a clue.

Kind Regards,

Arjen Heidinga


Dec 14 15:31:44 starkey.platypusnet.org systemd[1]: Starting PKI Tomcat
Server pki-tomcat...
-- Subject: Unit pki-tomcatd@pki-tomcat.service has begun start-up
-- Defined-By: systemd
-- Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel


_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org