I restored the earlier image where it was working well with self-signed
certs and just did the steps again.
The pki-tomcatd restart was attempted at 10:47 local time and failed out
several minutes later at 10:52.
Your suggested debug steps reveal:
root@prime prime.ipa.kkgpitt.org]# ipa-server-certinstall -w fullchain.pem
privkey.pem
Directory Manager password:
Enter private key unlock password:
Please restart ipa services after installing certificate (ipactl restart)
The ipa-server-certinstall command was successful
[root@prime prime.ipa.kkgpitt.org]# ipactl restart
Stopping pki-tomcatd Service
Restarting Directory Service
Restarting krb5kdc Service
Restarting kadmin Service
Restarting named Service
Restarting httpd Service
Restarting ipa-custodia Service
Restarting ntpd Service
Restarting pki-tomcatd Service
Failed to restart pki-tomcatd Service
Shutting down
Hint: You can use --ignore-service-failure option for forced start in case
that a non-critical service failed
Aborting ipactl
[root@prime prime.ipa.kkgpitt.org]# cd /etc/dirsrv/slapd-IPA-KKGPITT-ORG/
[root@prime slapd-IPA-KKGPITT-ORG]# certutil -d
/etc/dirsrv/slapd-IPA-KKGPITT-ORG -L
Certificate Nickname Trust
Attributes
SSL,S/MIME,JAR/XPI
IPA.KKGPITT.ORG IPA CA CT,C,C
Server-Cert u,u,u
ISRG_Root_X1 C,,
DSTRootCAX3 C,,
LetsEncryptX3CrossSigned C,,
LetsEncryptX3CrossSigned C,,
and
cat /var/log/pki/pki-tomcat/ca/debug.2018-05-09.log
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: restart at
autoShutdown? false
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: autoShutdown
crumb file path? /var/lib/pki/pki-tomcat/logs/autoShutdown.crumb
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: about to look
for cert for auto-shutdown support:auditSigningCert cert-pki-ca
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: found
cert:auditSigningCert cert-pki-ca
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: done init
id=debug
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: initialized
debug
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: initSubsystem
id=log
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: ready to init
id=log
2018-05-09 10:47:45 [localhost-startStop-1] FINE: Event filters:
2018-05-09 10:47:45 [localhost-startStop-1] FINE: -
CMC_SIGNED_REQUEST_SIG_VERIFY: (Outcome=Failure)
2018-05-09 10:47:45 [localhost-startStop-1] FINE: -
CMC_USER_SIGNED_REQUEST_SIG_VERIFY: (Outcome=Failure)
2018-05-09 10:47:45 [localhost-startStop-1] FINE: - DELTA_CRL_GENERATION:
(Outcome=Failure)
2018-05-09 10:47:45 [localhost-startStop-1] FINE: - FULL_CRL_GENERATION:
(Outcome=Failure)
2018-05-09 10:47:45 [localhost-startStop-1] FINE: - OCSP_GENERATION:
(Outcome=Failure)
2018-05-09 10:47:45 [localhost-startStop-1] FINE: - RANDOM_GENERATION:
(Outcome=Failure)
2018-05-09 10:47:45 [localhost-startStop-1] FINE: - SELFTESTS_EXECUTION:
(Outcome=Failure)
2018-05-09 10:47:45 [localhost-startStop-1] FINE: Creating
RollingLogFile(/var/lib/pki/pki-tomcat/logs/ca/signedAudit/ca_audit)
2018-05-09 10:47:45 [localhost-startStop-1] FINE: Event filters:
2018-05-09 10:47:45 [localhost-startStop-1] FINE: Creating
RollingLogFile(/var/lib/pki/pki-tomcat/logs/ca/system)
2018-05-09 10:47:45 [localhost-startStop-1] FINE: Event filters:
2018-05-09 10:47:45 [localhost-startStop-1] FINE: Creating
RollingLogFile(/var/lib/pki/pki-tomcat/logs/ca/transactions)
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: restart at
autoShutdown? false
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: autoShutdown
crumb file path? /var/lib/pki/pki-tomcat/logs/autoShutdown.crumb
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: about to look
for cert for auto-shutdown support:auditSigningCert cert-pki-ca
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: found
cert:auditSigningCert cert-pki-ca
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: done init
id=log
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: initialized log
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: initSubsystem
id=jss
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: ready to init
id=jss
2018-05-09 10:47:45 [localhost-startStop-1] FINE: JssSubsystem:
initializing JSS subsystem
2018-05-09 10:47:45 [localhost-startStop-1] FINE: JssSubsystem: enabled:
true
2018-05-09 10:47:45 [localhost-startStop-1] FINE: JssSubsystem: NSS
database: /var/lib/pki/pki-tomcat/alias/
2018-05-09 10:47:45 [localhost-startStop-1] FINE: JssSubsystem:
initializing CryptoManager
2018-05-09 10:47:45 [localhost-startStop-1] FINE: JssSubsystem:
initializing SSL
2018-05-09 10:47:45 [localhost-startStop-1] FINE: JssSubsystem: random:
2018-05-09 10:47:45 [localhost-startStop-1] FINE: JssSubsystem: -
algorithm: pkcs11prng
2018-05-09 10:47:45 [localhost-startStop-1] FINE: JssSubsystem: - provider:
Mozilla-JSS
2018-05-09 10:47:45 [localhost-startStop-1] FINE: JssSubsystem:
initialization complete
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: restart at
autoShutdown? false
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: autoShutdown
crumb file path? /var/lib/pki/pki-tomcat/logs/autoShutdown.crumb
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: about to look
for cert for auto-shutdown support:auditSigningCert cert-pki-ca
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: found
cert:auditSigningCert cert-pki-ca
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: done init
id=jss
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: initialized jss
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: initSubsystem
id=dbs
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: ready to init
id=dbs
2018-05-09 10:47:45 [localhost-startStop-1] FINE: DBSubsystem: init()
mEnableSerialMgmt=false
2018-05-09 10:47:45 [localhost-startStop-1] FINE: Creating
LdapBoundConnFactor(DBSubsystem)
2018-05-09 10:47:45 [localhost-startStop-1] FINE: Setting
internaldb.basedn=o=ipaca
2018-05-09 10:47:45 [localhost-startStop-1] FINE: LdapBoundConnFactory:
init
2018-05-09 10:47:45 [localhost-startStop-1] FINE:
LdapBoundConnFactory:doCloning true
2018-05-09 10:47:45 [localhost-startStop-1] FINE: LdapAuthInfo: init()
2018-05-09 10:47:45 [localhost-startStop-1] FINE: LdapAuthInfo: init begins
2018-05-09 10:47:45 [localhost-startStop-1] FINE: LdapAuthInfo: init ends
2018-05-09 10:47:45 [localhost-startStop-1] FINE: init: before
makeConnection errorIfDown is true
2018-05-09 10:47:45 [localhost-startStop-1] FINE: makeConnection:
errorIfDown true
2018-05-09 10:47:45 [localhost-startStop-1] FINE: TCP Keep-Alive: true
2018-05-09 10:47:45 [localhost-startStop-1] FINE:
SSLClientCertificateSelectionCB: Setting desired cert nickname to:
subsystemCert cert-pki-ca
2018-05-09 10:47:45 [localhost-startStop-1] FINE: LdapJssSSLSocket: set
client auth cert nickname subsystemCert cert-pki-ca
2018-05-09 10:47:45 [localhost-startStop-1] FINE:
SSLClientCertificatSelectionCB: Entering!
2018-05-09 10:47:45 [localhost-startStop-1] FINE: Candidate cert:
Server-Cert cert-pki-ca
2018-05-09 10:47:45 [localhost-startStop-1] FINE: Candidate cert:
auditSigningCert cert-pki-ca
2018-05-09 10:47:45 [localhost-startStop-1] FINE: Candidate cert:
subsystemCert cert-pki-ca
2018-05-09 10:47:45 [localhost-startStop-1] FINE:
SSLClientCertificateSelectionCB: desired cert found in list: subsystemCert
cert-pki-ca
2018-05-09 10:47:45 [localhost-startStop-1] FINE:
SSLClientCertificateSelectionCB: returning: subsystemCert cert-pki-ca
2018-05-09 10:47:45 [localhost-startStop-1] FINE: SSL handshake happened
2018-05-09 10:47:45 [localhost-startStop-1] FINE: Established LDAP
connection with SSL client auth to prime.ipa.kkgpitt.org:636
2018-05-09 10:47:45 [localhost-startStop-1] FINE: initializing with mininum
3 and maximum 15 connections to host
prime.ipa.kkgpitt.org port 636, secure
connection, true, authentication type 2
2018-05-09 10:47:45 [localhost-startStop-1] FINE: increasing minimum
connections by 3
2018-05-09 10:47:45 [localhost-startStop-1] FINE: new total available
connections 3
2018-05-09 10:47:45 [localhost-startStop-1] FINE: new number of connections
3
2018-05-09 10:47:45 [localhost-startStop-1] FINE: registered: false
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: restart at
autoShutdown? false
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: autoShutdown
crumb file path? /var/lib/pki/pki-tomcat/logs/autoShutdown.crumb
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: about to look
for cert for auto-shutdown support:auditSigningCert cert-pki-ca
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: found
cert:auditSigningCert cert-pki-ca
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: done init
id=dbs
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: initialized dbs
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: initSubsystem
id=usrgrp
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: ready to init
id=usrgrp
2018-05-09 10:47:45 [localhost-startStop-1] FINE: Creating
LdapBoundConnFactor(UGSubsystem)
2018-05-09 10:47:45 [localhost-startStop-1] FINE: LdapBoundConnFactory:
init
2018-05-09 10:47:45 [localhost-startStop-1] FINE:
LdapBoundConnFactory:doCloning true
2018-05-09 10:47:45 [localhost-startStop-1] FINE: LdapAuthInfo: init()
2018-05-09 10:47:45 [localhost-startStop-1] FINE: LdapAuthInfo: init begins
2018-05-09 10:47:45 [localhost-startStop-1] FINE: LdapAuthInfo: init ends
2018-05-09 10:47:45 [localhost-startStop-1] FINE: init: before
makeConnection errorIfDown is false
2018-05-09 10:47:45 [localhost-startStop-1] FINE: makeConnection:
errorIfDown false
2018-05-09 10:47:45 [localhost-startStop-1] FINE: TCP Keep-Alive: true
2018-05-09 10:47:45 [localhost-startStop-1] FINE:
SSLClientCertificateSelectionCB: Setting desired cert nickname to:
subsystemCert cert-pki-ca
2018-05-09 10:47:45 [localhost-startStop-1] FINE: LdapJssSSLSocket: set
client auth cert nickname subsystemCert cert-pki-ca
2018-05-09 10:47:45 [localhost-startStop-1] FINE: SSL handshake happened
2018-05-09 10:47:45 [localhost-startStop-1] FINE: Established LDAP
connection with SSL client auth to prime.ipa.kkgpitt.org:636
2018-05-09 10:47:45 [localhost-startStop-1] FINE: initializing with mininum
3 and maximum 15 connections to host
prime.ipa.kkgpitt.org port 636, secure
connection, true, authentication type 2
2018-05-09 10:47:45 [localhost-startStop-1] FINE: increasing minimum
connections by 3
2018-05-09 10:47:45 [localhost-startStop-1] FINE: new total available
connections 3
2018-05-09 10:47:45 [localhost-startStop-1] FINE: new number of connections
3
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: restart at
autoShutdown? false
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: autoShutdown
crumb file path? /var/lib/pki/pki-tomcat/logs/autoShutdown.crumb
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: about to look
for cert for auto-shutdown support:auditSigningCert cert-pki-ca
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: found
cert:auditSigningCert cert-pki-ca
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: done init
id=usrgrp
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: initialized
usrgrp
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: initSubsystem
id=registry
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: ready to init
id=registry
2018-05-09 10:47:45 [localhost-startStop-1] FINE: RegistrySubsystem: start
init
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin profile
caEnrollImpl Generic Certificate Enrollment Profile Certificate Authority
Generic Certificate Enrollment Profile
com.netscape.cms.profile.common.CAEnrollProfile
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin profile
caCACertEnrollImpl CA Certificate Enrollment Profile Certificate Authority
CA Certificate Enrollment Profile
com.netscape.cms.profile.common.CACertCAEnrollProfile
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin profile
caServerCertEnrollImpl Server Certificate Enrollment Profile Certificate
Authority Server Certificate Enrollment Profile
com.netscape.cms.profile.common.ServerCertCAEnrollProfile
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin profile
caUserCertEnrollImpl User Certificate Enrollment Profile Certificate
Authority User Certificate Enrollment Profile
com.netscape.cms.profile.common.UserCertCAEnrollProfile
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
defaultPolicy noDefaultImpl No Default No Default
com.netscape.cms.profile.def.NoDefault
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
defaultPolicy genericExtDefaultImpl Generic Extension Generic Extension
com.netscape.cms.profile.def.GenericExtDefault
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
defaultPolicy autoAssignDefaultImpl Auto Request Assignment Default Auto
Request Assignment Default com.netscape.cms.profile.def.AutoAssignDefault
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
defaultPolicy subjectNameDefaultImpl Subject Name Default Subject Name
Default com.netscape.cms.profile.def.SubjectNameDefault
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
defaultPolicy validityDefaultImpl Validity Default Validty Default
com.netscape.cms.profile.def.ValidityDefault
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
defaultPolicy randomizedValidityDefaultImpl Randomized Validity Default
Randomized Validity Default
com.netscape.cms.profile.def.RandomizedValidityDefault
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
defaultPolicy caValidityDefaultImpl CA Certificate Validity Default CA
Certificate Validty Default com.netscape.cms.profile.def.CAValidityDefault
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
defaultPolicy subjectKeyIdentifierExtDefaultImpl Subject Key Identifier
Default Subject Key Identifier Default
com.netscape.cms.profile.def.SubjectKeyIdentifierExtDefault
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
defaultPolicy authorityKeyIdentifierExtDefaultImpl Authority Key Identifier
Extension Default Authority Key Identifier Extension Default
com.netscape.cms.profile.def.AuthorityKeyIdentifierExtDefault
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
defaultPolicy basicConstraintsExtDefaultImpl Basic Constraints Extension
Default Basic Constraints Extension Default
com.netscape.cms.profile.def.BasicConstraintsExtDefault
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
defaultPolicy keyUsageExtDefaultImpl Key Usage Extension Default Key Usage
Extension Default com.netscape.cms.profile.def.KeyUsageExtDefault
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
defaultPolicy nsCertTypeExtDefaultImpl Netscape Certificate Type Extension
Default Netscape Certificate Type Extension Default
com.netscape.cms.profile.def.NSCertTypeExtDefault
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
defaultPolicy extendedKeyUsageExtDefaultImpl Extended Key Usage Extension
Default Extended Key Usage Extension Default
com.netscape.cms.profile.def.ExtendedKeyUsageExtDefault
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
defaultPolicy ocspNoCheckExtDefaultImpl OCSP No Check Extension Default
OCSP No Check Extension Default
com.netscape.cms.profile.def.OCSPNoCheckExtDefault
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
defaultPolicy issuerAltNameExtDefaultImpl Issuer Alternative Name Extension
Default Issuer Alternative Name Extension Default
com.netscape.cms.profile.def.IssuerAltNameExtDefault
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
defaultPolicy subjectAltNameExtDefaultImpl Subject Alternative Name
Extension Default Subject Alternative Name Extension Default
com.netscape.cms.profile.def.SubjectAltNameExtDefault
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
defaultPolicy userSubjectNameDefaultImpl User Supplied Subject Name Default
User Supplied Subject Name Default
com.netscape.cms.profile.def.UserSubjectNameDefault
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
defaultPolicy cmcUserSignedSubjectNameDefaultImpl CMC User Signed Subject
Name Default CMC User Signed Subject Name Default
com.netscape.cms.profile.def.CMCUserSignedSubjectNameDefault
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
defaultPolicy signingAlgDefaultImpl Signing Algorithm Default Signing
Algorithm Default com.netscape.cms.profile.def.SigningAlgDefault
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
defaultPolicy userKeyDefaultImpl User Supplied Key Default User Supplied
Key Default com.netscape.cms.profile.def.UserKeyDefault
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
defaultPolicy userValidityDefaultImpl User Supplied Validity Default User
Supplied Validity Default com.netscape.cms.profile.def.UserValidityDefault
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
defaultPolicy userExtensionDefaultImpl User Supplied Extension Default User
Supplied Extension Default com.netscape.cms.profile.def.UserExtensionDefault
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
defaultPolicy userSigningAlgDefaultImpl User Supplied Signing Alg Default
User Supplied Signing Alg Default
com.netscape.cms.profile.def.UserSigningAlgDefault
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
defaultPolicy authTokenSubjectNameDefaultImpl Token Supplied Subject Name
Default Token Supplied Subject Name Default
com.netscape.cms.profile.def.AuthTokenSubjectNameDefault
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
defaultPolicy subjectInfoAccessExtDefaultImpl Subject Info Access Extension
Default Subject Info Access Extension Default
com.netscape.cms.profile.def.SubjectInfoAccessExtDefault
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
defaultPolicy authInfoAccessExtDefaultImpl Authority Info Access Extension
Default Authority Info Access Extension Default
com.netscape.cms.profile.def.AuthInfoAccessExtDefault
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
defaultPolicy nscCommentExtDefaultImpl Netscape Comment Extension Default
Netscape Comment Extension Default
com.netscape.cms.profile.def.NSCCommentExtDefault
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
defaultPolicy freshestCRLExtDefaultImpl Freshest CRL Extension Default
Freshest CRL Extension Default
com.netscape.cms.profile.def.FreshestCRLExtDefault
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
defaultPolicy crlDistributionPointsExtDefaultImpl CRL Distribution Points
Extension Default CRL Distribution Points Extension Default
com.netscape.cms.profile.def.CRLDistributionPointsExtDefault
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
defaultPolicy policyConstraintsExtDefaultImpl Policy Constraints Extension
Default Policy Constraints Extension Default
com.netscape.cms.profile.def.PolicyConstraintsExtDefault
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
defaultPolicy policyMappingsExtDefaultImpl Policy Mappings Extension
Default Policy Mappings Extension Default
com.netscape.cms.profile.def.PolicyMappingsExtDefault
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
defaultPolicy nameConstraintsExtDefaultImpl Name Constraints Extension
Default Name Constraints Extension Default
com.netscape.cms.profile.def.NameConstraintsExtDefault
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
defaultPolicy certificateVersionDefaultImpl Certificate Version Default
Certificate Version Default
com.netscape.cms.profile.def.CertificateVersionDefault
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
defaultPolicy certificatePoliciesExtDefaultImpl Certificate Policies
Extension Default Certificate Policies Extension Default
com.netscape.cms.profile.def.CertificatePoliciesExtDefault
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
defaultPolicy subjectDirAttributesExtDefaultImpl Subject Directory
Attributes Extension Default Subject Directory Attributes Extension Default
com.netscape.cms.profile.def.SubjectDirAttributesExtDefault
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
defaultPolicy privateKeyPeriodExtDefaultImpl Private Key Period Ext Default
Private Key Period Ext Default
com.netscape.cms.profile.def.PrivateKeyUsagePeriodExtDefault
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
defaultPolicy inhibitAnyPolicyExtDefaultImpl Inhibit Any-Policy Extension
Default Inhibit Any-Policy Extension Default
com.netscape.cms.profile.def.InhibitAnyPolicyExtDefault
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
defaultPolicy imageDefaultImpl Image Default Image Default
com.netscape.cms.profile.def.ImageDefault
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
defaultPolicy nsTokenDeviceKeySubjectNameDefaultImpl
nsTokenDeviceKeySubjectNameDefault nsTokenDeviceKeySubjectNameDefaultImpl
com.netscape.cms.profile.def.nsTokenDeviceKeySubjectNameDefault
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
defaultPolicy nsTokenUserKeySubjectNameDefaultImpl
nsTokenUserKeySubjectNameDefault nsTokenUserKeySubjectNameDefaultImpl
com.netscape.cms.profile.def.nsTokenUserKeySubjectNameDefault
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
defaultPolicy authzRealmDefaultImpl Authz Realm Default Authz Realm Default
com.netscape.cms.profile.def.AuthzRealmDefault
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
defaultPolicy commonNameToSANDefaultImpl Copy Common Name to Subject
Alternative Name Copy Common Name to Subject Alternative Name
com.netscape.cms.profile.def.CommonNameToSANDefault
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
constraintPolicy noConstraintImpl No Constraint No Constraint
com.netscape.cms.profile.constraint.NoConstraint
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
constraintPolicy subjectNameConstraintImpl Subject Name Constraint Subject
Name Constraint com.netscape.cms.profile.constraint.SubjectNameConstraint
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
constraintPolicy uniqueSubjectNameConstraintImpl Unique Subject Name
Constraint Unique Subject Name Constraint
com.netscape.cms.profile.constraint.UniqueSubjectNameConstraint
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
constraintPolicy userSubjectNameConstraintImpl User Subject Name Constraint
User Subject Name Constraint
com.netscape.cms.profile.constraint.UserSubjectNameConstraint
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
constraintPolicy cmcUserSignedSubjectNameConstraintImpl CMC User Subject
Name Constraint CMC User Subject Name Constraint
com.netscape.cms.profile.constraint.CMCUserSignedSubjectNameConstraint
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
constraintPolicy caValidityConstraintImpl CA Validity Constraint CA
Validity Constraint com.netscape.cms.profile.constraint.CAValidityConstraint
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
constraintPolicy validityConstraintImpl Validity Constraint Validity
Constraint com.netscape.cms.profile.constraint.ValidityConstraint
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
constraintPolicy keyUsageExtConstraintImpl Key Usage Extension Constraint
Key Usage Extension Constraint
com.netscape.cms.profile.constraint.KeyUsageExtConstraint
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
constraintPolicy nsCertTypeExtConstraintImpl Netscape Certificate Type
Extension Constraint Netscape Certificate Type Extension Constraint
com.netscape.cms.profile.constraint.NSCertTypeExtConstraint
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
constraintPolicy extendedKeyUsageExtConstraintImpl Extended Key Usage
Extension Constraint Extended Key Usage Extension Constraint
com.netscape.cms.profile.constraint.ExtendedKeyUsageExtConstraint
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
constraintPolicy keyConstraintImpl Key Constraint Key Constraint
com.netscape.cms.profile.constraint.KeyConstraint
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
constraintPolicy basicConstraintsExtConstraintImpl Basic Constraints
Extension Constraint Basic Constraints Extension Constraint
com.netscape.cms.profile.constraint.BasicConstraintsExtConstraint
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
constraintPolicy extensionConstraintImpl Extension Constraint Extension
Constraint com.netscape.cms.profile.constraint.ExtensionConstraint
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
constraintPolicy signingAlgConstraintImpl Signing Algorithm Constraint
Signing Algorithm Constraint
com.netscape.cms.profile.constraint.SigningAlgConstraint
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
constraintPolicy uniqueKeyConstraintImpl Unique Public Key Constraint
Unique Public Key Constraint
com.netscape.cms.profile.constraint.UniqueKeyConstraint
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
constraintPolicy renewGracePeriodConstraintImpl Renewal Grace Period
Constraint Renewal Grace Period Constraint
com.netscape.cms.profile.constraint.RenewGracePeriodConstraint
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
constraintPolicy authzRealmConstraintImpl Authz Realm Constraint Authz
Realm Constraint com.netscape.cms.profile.constraint.AuthzRealmConstraint
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
constraintPolicy externalProcessConstraintImpl External Process Constraint
External Process Constraint
com.netscape.cms.profile.constraint.ExternalProcessConstraint
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin profileInput
cmcCertReqInputImpl CMC Certificate Request Input CMC Certificate Request
Input com.netscape.cms.profile.input.CMCCertReqInput
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin profileInput
certReqInputImpl Certificate Request Input Certificate Request Input
com.netscape.cms.profile.input.CertReqInput
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin profileInput
keyGenInputImpl Key Generation Input Key Generation Input
com.netscape.cms.profile.input.KeyGenInput
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin profileInput
encKeyGenInputImpl Encryption Key Generation Input Encryption Key
Generation Input com.netscape.cms.profile.input.EncryptionKeyGenInput
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin profileInput
signKeyGenInputImpl Encryption Key Generation Input Encryption Key
Generation Input com.netscape.cms.profile.input.SigningKeyGenInput
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin profileInput
dualKeyGenInputImpl Dual Key Generation Input Dual Key Generation Input
com.netscape.cms.profile.input.DualKeyGenInput
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin profileInput
subjectNameInputImpl Subject Name Input Subject Name Input
com.netscape.cms.profile.input.SubjectNameInput
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin profileInput
submitterInfoInputImpl Submitter Information Input Submitter Information
Input com.netscape.cms.profile.input.SubmitterInfoInput
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin profileInput
genericInputImpl Generic Input Generic Input
com.netscape.cms.profile.input.GenericInput
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin profileInput
fileSigningInputImpl File Signing Input File Signing Input
com.netscape.cms.profile.input.FileSigningInput
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin profileInput
imageInputImpl Image Input Image Input
com.netscape.cms.profile.input.ImageInput
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin profileInput
subjectDNInputImpl Subject DN Input Subject DN Input
com.netscape.cms.profile.input.SubjectDNInput
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin profileInput
nsNKeyCertReqInputImpl nsNKeyCertReqInputImpl nsNKeyCertReqInputImpl
com.netscape.cms.profile.input.nsNKeyCertReqInput
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin profileInput
nsHKeyCertReqInputImpl nsHKeyCertReqInputImpl nsHKeyCertReqInputImpl
com.netscape.cms.profile.input.nsHKeyCertReqInput
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin profileInput
serialNumRenewInputImpl Certificate Renewal Request Serial Number Input
Certificate Renewal Request Serial Number Input
com.netscape.cms.profile.input.SerialNumRenewInput
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin profileInput
subjectAltNameExtInputImpl SAN Input SAN Input
com.netscape.cms.profile.input.SubjectAltNameExtInput
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
profileOutput certOutputImpl Certificate Output Certificate Output
com.netscape.cms.profile.output.CertOutput
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
profileOutput cmmfOutputImpl CMMF Response Output CMMF Response Output
com.netscape.cms.profile.output.CMMFOutput
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
profileOutput pkcs7OutputImpl PKCS7 Output PKCS7 Output
com.netscape.cms.profile.output.PKCS7Output
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
profileOutput nsNKeyOutputImpl nsNKeyOutputImpl nsNKeyOutputImpl
com.netscape.cms.profile.output.nsNKeyOutput
2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin
profileUpdater subsystemGroupUpdaterImpl Updater for Subsystem Group
Updater for Subsystem Group
com.netscape.cms.profile.updater.SubsystemGroupUpdater
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: restart at
autoShutdown? false
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: autoShutdown
crumb file path? /var/lib/pki/pki-tomcat/logs/autoShutdown.crumb
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: about to look
for cert for auto-shutdown support:auditSigningCert cert-pki-ca
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: found
cert:auditSigningCert cert-pki-ca
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: done init
id=registry
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: initialized
registry
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: initSubsystem
id=oidmap
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: ready to init
id=oidmap
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: restart at
autoShutdown? false
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: autoShutdown
crumb file path? /var/lib/pki/pki-tomcat/logs/autoShutdown.crumb
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: about to look
for cert for auto-shutdown support:auditSigningCert cert-pki-ca
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: found
cert:auditSigningCert cert-pki-ca
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: done init
id=oidmap
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: initialized
oidmap
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: initSubsystem
id=X500Name
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: ready to init
id=X500Name
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: restart at
autoShutdown? false
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: autoShutdown
crumb file path? /var/lib/pki/pki-tomcat/logs/autoShutdown.crumb
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: about to look
for cert for auto-shutdown support:auditSigningCert cert-pki-ca
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: found
cert:auditSigningCert cert-pki-ca
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: done init
id=X500Name
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: initialized
X500Name
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: initSubsystem
id=request
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: ready to init
id=request
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: restart at
autoShutdown? false
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: autoShutdown
crumb file path? /var/lib/pki/pki-tomcat/logs/autoShutdown.crumb
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: about to look
for cert for auto-shutdown support:auditSigningCert cert-pki-ca
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: found
cert:auditSigningCert cert-pki-ca
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: done init
id=request
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: initialized
request
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: initSubsystem
id=ca
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: ready to init
id=ca
2018-05-09 10:47:45 [localhost-startStop-1] FINE:
CertificateAuthority.init(MAIN, ca)
2018-05-09 10:47:45 [localhost-startStop-1] FINE: Creating
LdapBoundConnFactor(CertificateAuthority)
2018-05-09 10:47:45 [localhost-startStop-1] FINE: LdapBoundConnFactory:
init
2018-05-09 10:47:45 [localhost-startStop-1] FINE:
LdapBoundConnFactory:doCloning true
2018-05-09 10:47:45 [localhost-startStop-1] FINE: LdapAuthInfo: init()
2018-05-09 10:47:45 [localhost-startStop-1] FINE: LdapAuthInfo: init begins
2018-05-09 10:47:45 [localhost-startStop-1] FINE: LdapAuthInfo: init ends
2018-05-09 10:47:45 [localhost-startStop-1] FINE: init: before
makeConnection errorIfDown is false
2018-05-09 10:47:45 [localhost-startStop-1] FINE: makeConnection:
errorIfDown false
2018-05-09 10:47:45 [localhost-startStop-1] FINE: TCP Keep-Alive: true
2018-05-09 10:47:45 [localhost-startStop-1] FINE:
SSLClientCertificateSelectionCB: Setting desired cert nickname to:
subsystemCert cert-pki-ca
2018-05-09 10:47:45 [localhost-startStop-1] FINE: LdapJssSSLSocket: set
client auth cert nickname subsystemCert cert-pki-ca
2018-05-09 10:47:45 [localhost-startStop-1] FINE: SSL handshake happened
2018-05-09 10:47:45 [localhost-startStop-1] FINE: Established LDAP
connection with SSL client auth to prime.ipa.kkgpitt.org:636
2018-05-09 10:47:45 [localhost-startStop-1] FINE: initializing with mininum
3 and maximum 15 connections to host
prime.ipa.kkgpitt.org port 636, secure
connection, true, authentication type 2
2018-05-09 10:47:45 [localhost-startStop-1] FINE: increasing minimum
connections by 3
2018-05-09 10:47:45 [localhost-startStop-1] FINE: new total available
connections 3
2018-05-09 10:47:45 [localhost-startStop-1] FINE: new number of connections
3
2018-05-09 10:47:45 [localhost-startStop-1] FINE: Cert Repot inited
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CRL Repot inited
2018-05-09 10:47:45 [localhost-startStop-1] FINE: Replica Repot inited
2018-05-09 10:47:45 [localhost-startStop-1] FINE:
CertificateAuthority:initSigUnit: ca cert found
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CertificateAuthority:
initSigUnit 1- setting mIssuerObj and mSubjectObj
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CA SigningUnit.init(ca,
ca.signing, null)
2018-05-09 10:47:45 [localhost-startStop-1] FINE: Setting
ca.signing.newNickname=caSigningCert cert-pki-ca
2018-05-09 10:47:45 [localhost-startStop-1] FINE: SigningUnit: Logging into
token Internal Key Storage Token
2018-05-09 10:47:45 [localhost-startStop-1] FINE: SigningUnit: Loading
certificate caSigningCert cert-pki-ca
2018-05-09 10:47:45 [localhost-startStop-1] FINE: SigningUnit: Unable to
find certificate caSigningCert cert-pki-ca
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CA signing key and cert
not (yet) present in NSSDB
2018-05-09 10:47:45 [localhost-startStop-1] FINE: null authorityID -> host
authority; not starting KeyRetriever
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CertificateAuthority
init: initRequestQueue
2018-05-09 10:47:45 [localhost-startStop-1] FINE: selected policy processor
= classic
2018-05-09 10:47:45 [localhost-startStop-1] FINE:
GenericPolicyProcessor::init begins
2018-05-09 10:47:45 [localhost-startStop-1] FINE:
GenericPolicyProcessor::init Certificate Policy Framework (deprecated) is
DISABLED
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CA policy inited
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CA service inited
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CA notifier inited
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CA pending notifier inited
2018-05-09 10:47:45 [localhost-startStop-1] FINE: RequestRepository:
constructor2.
2018-05-09 10:47:45 [localhost-startStop-1] FINE: In
setCertStatusUpdateInterval 600
2018-05-09 10:47:45 [localhost-startStop-1] FINE: In
setCertStatusUpdateInterval listenToCloneModifications=true
2018-05-09 10:47:45 [localhost-startStop-1] FINE: In
setCertStatusUpdateInterval listening to modifications
2018-05-09 10:47:45 [localhost-startStop-1] FINE: In
setCertStatusUpdateInterval scheduling cert status update every 600 seconds.
2018-05-09 10:47:45 [RetrieveModificationsTask] FINE: In
LdapBoundConnFactory::getConn()
2018-05-09 10:47:45 [RetrieveModificationsTask] FINE: masterConn is
connected: true
2018-05-09 10:47:45 [RetrieveModificationsTask] FINE: getConn: conn is
connected true
2018-05-09 10:47:45 [RetrieveModificationsTask] FINE: getConn: mNumConns
now 2
2018-05-09 10:47:45 [RetrieveModificationsTask] FINE: Starting persistent
search.
2018-05-09 10:47:45 [localhost-startStop-1] FINE: In
setCertStatusUpdateInterval 600
2018-05-09 10:47:45 [localhost-startStop-1] FINE: In
setSerialNumberUpdateInterval scheduling serial number update every 600
seconds.
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: About to start
updateCertStatus
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: Starting updateCertStatus
(entered lock)
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: In updateCertStatus()
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: In
LdapBoundConnFactory::getConn()
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: masterConn is connected:
true
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: getConn: conn is connected
true
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: getConn: mNumConns now 1
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE:
getInvalidCertificatesByNotBeforeDate filter (certStatus=INVALID)
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE:
getInvalidCertificatesByNotBeforeDate: about to call findCertRecordsInList
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: In
LdapBoundConnFactory::getConn()
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: masterConn is connected:
true
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: getConn: conn is connected
true
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: getConn: mNumConns now 0
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: In
findCertRecordsInListRawJumpto with Jumpto 20180509104745Z
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: In DBVirtualList filter
attrs startFrom sortKey pageSize filter: (certStatus=INVALID) attrs:
[objectclass, certRecordId, x509cert] pageSize -200 startFrom
20180509104745Z
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CertificateFactory Type :
X.509
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CertificateFactory
Provider : SUN (DSA key/parameter generation; DSA signing; SHA-1, MD5
digests; SecureRandom; X.509 certificates; JKS & DKS keystores; PKIX
CertPathValidator; PKIX CertPathBuilder; LDAP, Collection CertStores,
JavaPolicy Policy; JavaLoginConfig Configuration)
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: About to start
updateSerialNumbers
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: Starting
updateSerialNumbers (entered lock)
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: CertificateRepository:
updateCounter mEnableRandomSerialNumbers=false mCounter=null
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: In
LdapBoundConnFactory::getConn()
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: masterConn is connected:
true
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: increasing minimum
connections by 3
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: new total available
connections 6
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: new number of
connections 3
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: getConn: conn is
connected true
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: getConn: mNumConns now 2
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: Repository:
getSerialNumber()
2018-05-09 10:47:45 [localhost-startStop-1] FINE: Setting
ca.publish.publisher.instance.FileBaseCRLPublisher.directory=/var/lib/ipa/pki-ca/publish
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: returnConn: mNumConns now 3
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: In
getInvalidCertsByNotBeforeDate finally.
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: returnConn: mNumConns now 4
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: DBVirtualList: searching
for entry 20180509104745Z
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: DBVirtualList.getEntries()
2018-05-09 10:47:45 [RetrieveModificationsTask] FINE: Waiting for next
result.
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: returnConn: mNumConns
now 5
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: Repository:
getSerialNumber serial=1
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: DBVirtualList: entries: 0
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: DBVirtualList: top: 0
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: DBVirtualList: size: 0
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: index may be empty
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: In
LdapBoundConnFactory::getConn()
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: masterConn is connected:
true
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: getConn: conn is connected
true
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: getConn: mNumConns now 4
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE:
getValidCertsByNotAfterDate filter (certStatus=VALID)
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: In
LdapBoundConnFactory::getConn()
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: masterConn is connected:
true
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: getConn: conn is connected
true
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: getConn: mNumConns now 3
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: In
findCertRecordsInListRawJumpto with Jumpto 20180509104745Z
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: In DBVirtualList filter
attrs startFrom sortKey pageSize filter: (certStatus=VALID) attrs:
[objectclass, certRecordId, x509cert] pageSize -200 startFrom
20180509104745Z
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: returnConn: mNumConns now 4
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: returnConn: mNumConns now 5
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: DBVirtualList: searching
for entry 20180509104745Z
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE:
Repository:setSerialNumber 2
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: Repository: in InitCache
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: Repository: Instance of
Certificate Repository.
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: Repository: minSerial:1
maxSerial: 10000000
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: Repository:
nextMinSerial: nextMaxSerial:
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: Repository:
increment:10000000 lowWaterMark: 2000000
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: CertificateRepository:
in getLastSerialNumberInRange: low 1 high 268435456
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: In
LdapBoundConnFactory::getConn()
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: masterConn is connected:
true
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: getConn: conn is
connected true
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: getConn: mNumConns now 4
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: DBVirtualList.getEntries()
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: Releasing ldap connection
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: returnConn: mNumConns
now 5
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: DBSubsystem:
getEntryAttribute: dn=ou=certificateRepository, ou=ca, o=ipaca
attr=description:;
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: CertificateRepository:
getLastSerialNumberInRange mEnableRandomSerialNumbers=false
mMinRandomBitLength=4 CollisionRecovery=3,10
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: CertificateRepository:
getLastSerialNumberInRange modeChange=false enableRsnAtConfig=false
mForceModeChange=false mode=
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: Setting
dbs.randomSerialNumberCounter=-1
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: DBVirtualList: entries: 1
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: DBVirtualList: top: 0
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: DBVirtualList: size: 10
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: transidValidCertificates:
list size: 10
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: transitValidCertificates:
ltSize 1
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: Record does not
qualify,notAfter Mon Apr 27 10:58:21 EDT 2020 date Wed May 09 10:47:45 EDT
2018
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: transitCertList EXPIRED
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: In
LdapBoundConnFactory::getConn()
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: masterConn is connected:
true
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: getConn: conn is connected
true
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: getConn: mNumConns now 4
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE:
getRevokedCertificatesByNotAfterDate filter (certStatus=REVOKED)
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE:
getRevokedCertificatesByNotAfterDate: about to call findCertRecordsInList
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: In
LdapBoundConnFactory::getConn()
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: masterConn is connected:
true
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: getConn: conn is connected
true
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: getConn: mNumConns now 3
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: In
findCertRecordsInListRawJumpto with Jumpto 20180509104745Z
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: In DBVirtualList filter
attrs startFrom sortKey pageSize filter: (certStatus=REVOKED) attrs:
[objectclass, certRevokedOn, certRecordId, certRevoInfo, notAfter,
x509cert] pageSize -200 startFrom 20180509104745Z
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: returnConn: mNumConns now 4
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: returnConn: mNumConns now 5
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: DBVirtualList: searching
for entry 20180509104745Z
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: DBVirtualList.getEntries()
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: DBVirtualList: entries: 0
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: DBVirtualList: top: 0
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: DBVirtualList: size: 0
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: index may be empty
2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: updateCertStatus done
2018-05-09 10:47:45 [localhost-startStop-1] FINE: PublisherProcessor:
startup()
2018-05-09 10:47:45 [localhost-startStop-1] FINE: No LdapPublishing enabled
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: CertificateRepository:
getLastSerialNumberInRange mEnableRandomSerialNumbers=false
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: In
LdapBoundConnFactory::getConn()
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: masterConn is connected:
true
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: getConn: conn is
connected true
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: getConn: mNumConns now 4
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: In findCertRecordsInList
with Jumpto 268435456
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: In DBVirtualList filter
attrs startFrom sortKey pageSize filter: (certStatus=*) attrs: null
pageSize -5 startFrom 09268435456
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: returnConn: mNumConns
now 5
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: DBVirtualList: searching
for entry 09268435456
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE:
DBVirtualList.getEntries()
2018-05-09 10:47:45 [localhost-startStop-1] FINE: PublisherProcessor:
startup: Publishing Queue Enabled: true Priority Level: 0 Maximum Number
of Threads: 3 Page Size: 40
2018-05-09 10:47:45 [localhost-startStop-1] FINE: setPublishingQueue:
Publishing Queue Enabled: true Priority Level: 0 Maximum Number of
Threads: 3 Page Size: 40
2018-05-09 10:47:45 [localhost-startStop-1] FINE: In
LdapBoundConnFactory::getConn()
2018-05-09 10:47:45 [localhost-startStop-1] FINE: masterConn is connected:
true
2018-05-09 10:47:45 [localhost-startStop-1] FINE: getConn: conn is
connected true
2018-05-09 10:47:45 [localhost-startStop-1] FINE: getConn: mNumConns now 4
2018-05-09 10:47:45 [localhost-startStop-1] FINE: returnConn: mNumConns now
5
2018-05-09 10:47:45 [localhost-startStop-1] FINE: RequestRepository:
getPublishingStatus mBaseDN: ou=ca,ou=requests,o=ipaca status: -1
2018-05-09 10:47:45 [localhost-startStop-1] FINE: Publishing inited
2018-05-09 10:47:45 [localhost-startStop-1] FINE: initializing crl issue
point MasterCRL
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CRL Page Size: 100
2018-05-09 10:47:45 [localhost-startStop-1] FINE: getTimeListSize:
ListSize=1
2018-05-09 10:47:45 [localhost-startStop-1] FINE:
CRLIssuingPoint:initConfig: mUnexpectedExceptionWaitTime set to 1800000
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: DBVirtualList: entries: 6
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: DBVirtualList: top: 4
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: DBVirtualList: size: 10
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE:
CertificateRepository:getLastSerialNumberInRange: recList size 10
2018-05-09 10:47:45 [localhost-startStop-1] FINE:
CRLIssuingPoint:initConfig: mUnexpectedExceptionLoopMax set to 10
2018-05-09 10:47:45 [localhost-startStop-1] WARNING:
java.lang.NullPointerException
at com.netscape.ca.CRLIssuingPoint.initConfig(CRLIssuingPoint.java:752)
at com.netscape.ca.CRLIssuingPoint.init(CRLIssuingPoint.java:485)
at
com.netscape.ca.CertificateAuthority.initCRL(CertificateAuthority.java:2271)
at
com.netscape.ca.CertificateAuthority.init(CertificateAuthority.java:634)
at
com.netscape.cmscore.apps.CMSEngine.initSubsystem(CMSEngine.java:1059)
at
com.netscape.cmscore.apps.CMSEngine.initSubsystems(CMSEngine.java:965)
at com.netscape.cmscore.apps.CMSEngine.init(CMSEngine.java:581)
at com.netscape.certsrv.apps.CMS.init(CMS.java:191)
at com.netscape.certsrv.apps.CMS.start(CMS.java:1606)
at
com.netscape.cms.servlet.base.CMSStartServlet.init(CMSStartServlet.java:117)
at javax.servlet.GenericServlet.init(GenericServlet.java:158)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:498)
at
org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:282)
at
org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:279)
at java.security.AccessController.doPrivileged(Native Method)
at javax.security.auth.Subject.doAsPrivileged(Subject.java:549)
at
org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:314)
at
org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:170)
at
org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:123)
at
org.apache.catalina.core.StandardWrapper.initServlet(StandardWrapper.java:1132)
at
org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:1091)
at
org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:983)
at
org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java:4939)
at
org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5249)
at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:150)
at
org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:754)
at
org.apache.catalina.core.ContainerBase.access$000(ContainerBase.java:129)
at
org.apache.catalina.core.ContainerBase$PrivilegedAddChild.run(ContainerBase.java:150)
at
org.apache.catalina.core.ContainerBase$PrivilegedAddChild.run(ContainerBase.java:140)
at java.security.AccessController.doPrivileged(Native Method)
at
org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:728)
at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:734)
at
org.apache.catalina.startup.HostConfig.deployDescriptor(HostConfig.java:629)
at
org.apache.catalina.startup.HostConfig$DeployDescriptor.run(HostConfig.java:1839)
at
java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
at java.util.concurrent.FutureTask.run(FutureTask.java:266)
at
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
at
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
at java.lang.Thread.run(Thread.java:748)
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE:
CertificateRepository:getLastSerialNumberInRange: ltSize 10
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE:
CertificateRepository:getLastCertRecordSerialNo: serialno 10
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE:
getLastSerialNumberInRange returning: 10
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: Repository:
mLastSerialNo: 10
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: In
LdapBoundConnFactory::getConn()
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: masterConn is connected:
true
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: getConn: conn is
connected true
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: getConn: mNumConns now 4
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: Releasing ldap connection
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: returnConn: mNumConns
now 5
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: DBSubsystem:
getEntryAttribute: dn=ou=certificateRepository, ou=ca, o=ipaca
attr=description:;
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: CertificateRepository:
updateCounter mEnableRandomSerialNumbers=false
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: CertificateRepository:
updateCounter CertificateRepositoryMode =
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: CertificateRepository:
updateCounter modeChange=false
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: CertificateRepository:
UpdateCounter mEnableRandomSerialNumbers=false mCounter=-1
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: Starting cert checkRanges
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: Repository: Serial
Management not enabled. Returning ..
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: Starting request
checkRanges
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: Repository: Serial
Management not enabled. Returning ..
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: updateSerialNumbers done
2018-05-09 10:47:45 [http-nio-8080-exec-1] FINE: according to ccMode,
authorization for servlet: caGetStatus is LDAP based, not XML {1}, use
default authz mgr: {2}.
2018-05-09 10:47:45 [http-nio-8080-exec-1] SEVERE: Servlet.service() for
servlet [caGetStatus] in context with path [/ca] threw exception
java.io.IOException: CS server is not ready to serve.
at com.netscape.cms.servlet.base.CMSServlet.service(CMSServlet.java:442)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:742)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:498)
at
org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:282)
at
org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:279)
at java.security.AccessController.doPrivileged(Native Method)
at javax.security.auth.Subject.doAsPrivileged(Subject.java:549)
at
org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:314)
at
org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:170)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:225)
at
org.apache.catalina.core.ApplicationFilterChain.access$000(ApplicationFilterChain.java:47)
at
org.apache.catalina.core.ApplicationFilterChain$1.run(ApplicationFilterChain.java:149)
at
org.apache.catalina.core.ApplicationFilterChain$1.run(ApplicationFilterChain.java:145)
at java.security.AccessController.doPrivileged(Native Method)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:144)
at
org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:498)
at
org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:282)
at
org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:279)
at java.security.AccessController.doPrivileged(Native Method)
at javax.security.auth.Subject.doAsPrivileged(Subject.java:549)
at
org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:314)
at
org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:253)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:191)
at
org.apache.catalina.core.ApplicationFilterChain.access$000(ApplicationFilterChain.java:47)
at
org.apache.catalina.core.ApplicationFilterChain$1.run(ApplicationFilterChain.java:149)
at
org.apache.catalina.core.ApplicationFilterChain$1.run(ApplicationFilterChain.java:145)
at java.security.AccessController.doPrivileged(Native Method)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:144)
at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:199)
at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:96)
at
org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:496)
at
com.netscape.cms.tomcat.ExternalAuthenticationValve.invoke(ExternalAuthenticationValve.java:82)
at
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:140)
at
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:81)
at
org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:650)
at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:87)
at
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:342)
at
org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:803)
at
org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:66)
at
org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:790)
at
org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1459)
at
org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)
at
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
at
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
at
org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
at java.lang.Thread.run(Thread.java:748)
2018-05-09 10:47:46 [http-nio-8080-exec-3] SEVERE: Servlet.service() for
servlet [caGetStatus] in context with path [/ca] threw exception
java.io.IOException: CS server is not ready to serve.
at com.netscape.cms.servlet.base.CMSServlet.service(CMSServlet.java:442)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:742)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:498)
at
org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:282)
at
org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:279)
at java.security.AccessController.doPrivileged(Native Method)
at javax.security.auth.Subject.doAsPrivileged(Subject.java:549)
at
org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:314)
at
org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:170)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:225)
at
org.apache.catalina.core.ApplicationFilterChain.access$000(ApplicationFilterChain.java:47)
at
org.apache.catalina.core.ApplicationFilterChain$1.run(ApplicationFilterChain.java:149)
at
org.apache.catalina.core.ApplicationFilterChain$1.run(ApplicationFilterChain.java:145)
at java.security.AccessController.doPrivileged(Native Method)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:144)
at
org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:498)
at
org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:282)
at
org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:279)
at java.security.AccessController.doPrivileged(Native Method)
at javax.security.auth.Subject.doAsPrivileged(Subject.java:549)
at
org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:314)
at
org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:253)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:191)
at
org.apache.catalina.core.ApplicationFilterChain.access$000(ApplicationFilterChain.java:47)
at
org.apache.catalina.core.ApplicationFilterChain$1.run(ApplicationFilterChain.java:149)
at
org.apache.catalina.core.ApplicationFilterChain$1.run(ApplicationFilterChain.java:145)
at java.security.AccessController.doPrivileged(Native Method)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:144)
at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:199)
at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:96)
at
org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:496)
at
com.netscape.cms.tomcat.ExternalAuthenticationValve.invoke(ExternalAuthenticationValve.java:82)
at
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:140)
at
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:81)
at
org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:650)
at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:87)
at
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:342)
at
org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:803)
at
org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:66)
at
org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:790)
at
org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1459)
at
org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)
at
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
at
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
at
org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
at java.lang.Thread.run(Thread.java:748)
2018-05-09 10:47:47 [http-nio-8080-exec-4] SEVERE: Servlet.service() for
servlet [caGetStatus] in context with path [/ca] threw exception
java.io.IOException: CS server is not ready to serve.
at com.netscape.cms.servlet.base.CMSServlet.service(CMSServlet.java:442)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:742)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:498)
at
org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:282)
at
org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:279)
at java.security.AccessController.doPrivileged(Native Method)
at javax.security.auth.Subject.doAsPrivileged(Subject.java:549)
at
org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:314)
at
org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:170)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:225)
at
org.apache.catalina.core.ApplicationFilterChain.access$000(ApplicationFilterChain.java:47)
at
org.apache.catalina.core.ApplicationFilterChain$1.run(ApplicationFilterChain.java:149)
at
org.apache.catalina.core.ApplicationFilterChain$1.run(ApplicationFilterChain.java:145)
at java.security.AccessController.doPrivileged(Native Method)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:144)
at
org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:498)
at
org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:282)
at
org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:279)
at java.security.AccessController.doPrivileged(Native Method)
at javax.security.auth.Subject.doAsPrivileged(Subject.java:549)
at org.apache.catalina.security