I restored the earlier image where it was working well with self-signed certs and just did the steps again.
The pki-tomcatd restart was attempted at 10:47 local time and failed out several minutes later at 10:52.
Your suggested debug steps reveal:
root@prime prime.ipa.kkgpitt.org]# ipa-server-certinstall -w fullchain.pem privkey.pem Directory Manager password:
Enter private key unlock password:
Please restart ipa services after installing certificate (ipactl restart) The ipa-server-certinstall command was successful [root@prime prime.ipa.kkgpitt.org]# ipactl restart Stopping pki-tomcatd Service Restarting Directory Service Restarting krb5kdc Service Restarting kadmin Service Restarting named Service Restarting httpd Service Restarting ipa-custodia Service Restarting ntpd Service Restarting pki-tomcatd Service Failed to restart pki-tomcatd Service Shutting down Hint: You can use --ignore-service-failure option for forced start in case that a non-critical service failed Aborting ipactl [root@prime prime.ipa.kkgpitt.org]# cd /etc/dirsrv/slapd-IPA-KKGPITT-ORG/ [root@prime slapd-IPA-KKGPITT-ORG]# certutil -d /etc/dirsrv/slapd-IPA-KKGPITT-ORG -L
Certificate Nickname Trust Attributes
SSL,S/MIME,JAR/XPI
IPA.KKGPITT.ORG IPA CA CT,C,C Server-Cert u,u,u ISRG_Root_X1 C,, DSTRootCAX3 C,, LetsEncryptX3CrossSigned C,, LetsEncryptX3CrossSigned C,,
and
cat /var/log/pki/pki-tomcat/ca/debug.2018-05-09.log
2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: restart at autoShutdown? false 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: autoShutdown crumb file path? /var/lib/pki/pki-tomcat/logs/autoShutdown.crumb 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: about to look for cert for auto-shutdown support:auditSigningCert cert-pki-ca 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: found cert:auditSigningCert cert-pki-ca 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: done init id=debug 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: initialized debug 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: initSubsystem id=log 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: ready to init id=log 2018-05-09 10:47:45 [localhost-startStop-1] FINE: Event filters: 2018-05-09 10:47:45 [localhost-startStop-1] FINE: - CMC_SIGNED_REQUEST_SIG_VERIFY: (Outcome=Failure) 2018-05-09 10:47:45 [localhost-startStop-1] FINE: - CMC_USER_SIGNED_REQUEST_SIG_VERIFY: (Outcome=Failure) 2018-05-09 10:47:45 [localhost-startStop-1] FINE: - DELTA_CRL_GENERATION: (Outcome=Failure) 2018-05-09 10:47:45 [localhost-startStop-1] FINE: - FULL_CRL_GENERATION: (Outcome=Failure) 2018-05-09 10:47:45 [localhost-startStop-1] FINE: - OCSP_GENERATION: (Outcome=Failure) 2018-05-09 10:47:45 [localhost-startStop-1] FINE: - RANDOM_GENERATION: (Outcome=Failure) 2018-05-09 10:47:45 [localhost-startStop-1] FINE: - SELFTESTS_EXECUTION: (Outcome=Failure) 2018-05-09 10:47:45 [localhost-startStop-1] FINE: Creating RollingLogFile(/var/lib/pki/pki-tomcat/logs/ca/signedAudit/ca_audit) 2018-05-09 10:47:45 [localhost-startStop-1] FINE: Event filters: 2018-05-09 10:47:45 [localhost-startStop-1] FINE: Creating RollingLogFile(/var/lib/pki/pki-tomcat/logs/ca/system) 2018-05-09 10:47:45 [localhost-startStop-1] FINE: Event filters: 2018-05-09 10:47:45 [localhost-startStop-1] FINE: Creating RollingLogFile(/var/lib/pki/pki-tomcat/logs/ca/transactions) 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: restart at autoShutdown? false 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: autoShutdown crumb file path? /var/lib/pki/pki-tomcat/logs/autoShutdown.crumb 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: about to look for cert for auto-shutdown support:auditSigningCert cert-pki-ca 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: found cert:auditSigningCert cert-pki-ca 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: done init id=log 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: initialized log 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: initSubsystem id=jss 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: ready to init id=jss 2018-05-09 10:47:45 [localhost-startStop-1] FINE: JssSubsystem: initializing JSS subsystem 2018-05-09 10:47:45 [localhost-startStop-1] FINE: JssSubsystem: enabled: true 2018-05-09 10:47:45 [localhost-startStop-1] FINE: JssSubsystem: NSS database: /var/lib/pki/pki-tomcat/alias/ 2018-05-09 10:47:45 [localhost-startStop-1] FINE: JssSubsystem: initializing CryptoManager 2018-05-09 10:47:45 [localhost-startStop-1] FINE: JssSubsystem: initializing SSL 2018-05-09 10:47:45 [localhost-startStop-1] FINE: JssSubsystem: random: 2018-05-09 10:47:45 [localhost-startStop-1] FINE: JssSubsystem: - algorithm: pkcs11prng 2018-05-09 10:47:45 [localhost-startStop-1] FINE: JssSubsystem: - provider: Mozilla-JSS 2018-05-09 10:47:45 [localhost-startStop-1] FINE: JssSubsystem: initialization complete 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: restart at autoShutdown? false 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: autoShutdown crumb file path? /var/lib/pki/pki-tomcat/logs/autoShutdown.crumb 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: about to look for cert for auto-shutdown support:auditSigningCert cert-pki-ca 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: found cert:auditSigningCert cert-pki-ca 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: done init id=jss 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: initialized jss 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: initSubsystem id=dbs 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: ready to init id=dbs 2018-05-09 10:47:45 [localhost-startStop-1] FINE: DBSubsystem: init() mEnableSerialMgmt=false 2018-05-09 10:47:45 [localhost-startStop-1] FINE: Creating LdapBoundConnFactor(DBSubsystem) 2018-05-09 10:47:45 [localhost-startStop-1] FINE: Setting internaldb.basedn=o=ipaca 2018-05-09 10:47:45 [localhost-startStop-1] FINE: LdapBoundConnFactory: init 2018-05-09 10:47:45 [localhost-startStop-1] FINE: LdapBoundConnFactory:doCloning true 2018-05-09 10:47:45 [localhost-startStop-1] FINE: LdapAuthInfo: init() 2018-05-09 10:47:45 [localhost-startStop-1] FINE: LdapAuthInfo: init begins 2018-05-09 10:47:45 [localhost-startStop-1] FINE: LdapAuthInfo: init ends 2018-05-09 10:47:45 [localhost-startStop-1] FINE: init: before makeConnection errorIfDown is true 2018-05-09 10:47:45 [localhost-startStop-1] FINE: makeConnection: errorIfDown true 2018-05-09 10:47:45 [localhost-startStop-1] FINE: TCP Keep-Alive: true 2018-05-09 10:47:45 [localhost-startStop-1] FINE: SSLClientCertificateSelectionCB: Setting desired cert nickname to: subsystemCert cert-pki-ca 2018-05-09 10:47:45 [localhost-startStop-1] FINE: LdapJssSSLSocket: set client auth cert nickname subsystemCert cert-pki-ca 2018-05-09 10:47:45 [localhost-startStop-1] FINE: SSLClientCertificatSelectionCB: Entering! 2018-05-09 10:47:45 [localhost-startStop-1] FINE: Candidate cert: Server-Cert cert-pki-ca 2018-05-09 10:47:45 [localhost-startStop-1] FINE: Candidate cert: auditSigningCert cert-pki-ca 2018-05-09 10:47:45 [localhost-startStop-1] FINE: Candidate cert: subsystemCert cert-pki-ca 2018-05-09 10:47:45 [localhost-startStop-1] FINE: SSLClientCertificateSelectionCB: desired cert found in list: subsystemCert cert-pki-ca 2018-05-09 10:47:45 [localhost-startStop-1] FINE: SSLClientCertificateSelectionCB: returning: subsystemCert cert-pki-ca 2018-05-09 10:47:45 [localhost-startStop-1] FINE: SSL handshake happened 2018-05-09 10:47:45 [localhost-startStop-1] FINE: Established LDAP connection with SSL client auth to prime.ipa.kkgpitt.org:636 2018-05-09 10:47:45 [localhost-startStop-1] FINE: initializing with mininum 3 and maximum 15 connections to host prime.ipa.kkgpitt.org port 636, secure connection, true, authentication type 2 2018-05-09 10:47:45 [localhost-startStop-1] FINE: increasing minimum connections by 3 2018-05-09 10:47:45 [localhost-startStop-1] FINE: new total available connections 3 2018-05-09 10:47:45 [localhost-startStop-1] FINE: new number of connections 3 2018-05-09 10:47:45 [localhost-startStop-1] FINE: registered: false 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: restart at autoShutdown? false 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: autoShutdown crumb file path? /var/lib/pki/pki-tomcat/logs/autoShutdown.crumb 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: about to look for cert for auto-shutdown support:auditSigningCert cert-pki-ca 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: found cert:auditSigningCert cert-pki-ca 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: done init id=dbs 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: initialized dbs 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: initSubsystem id=usrgrp 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: ready to init id=usrgrp 2018-05-09 10:47:45 [localhost-startStop-1] FINE: Creating LdapBoundConnFactor(UGSubsystem) 2018-05-09 10:47:45 [localhost-startStop-1] FINE: LdapBoundConnFactory: init 2018-05-09 10:47:45 [localhost-startStop-1] FINE: LdapBoundConnFactory:doCloning true 2018-05-09 10:47:45 [localhost-startStop-1] FINE: LdapAuthInfo: init() 2018-05-09 10:47:45 [localhost-startStop-1] FINE: LdapAuthInfo: init begins 2018-05-09 10:47:45 [localhost-startStop-1] FINE: LdapAuthInfo: init ends 2018-05-09 10:47:45 [localhost-startStop-1] FINE: init: before makeConnection errorIfDown is false 2018-05-09 10:47:45 [localhost-startStop-1] FINE: makeConnection: errorIfDown false 2018-05-09 10:47:45 [localhost-startStop-1] FINE: TCP Keep-Alive: true 2018-05-09 10:47:45 [localhost-startStop-1] FINE: SSLClientCertificateSelectionCB: Setting desired cert nickname to: subsystemCert cert-pki-ca 2018-05-09 10:47:45 [localhost-startStop-1] FINE: LdapJssSSLSocket: set client auth cert nickname subsystemCert cert-pki-ca 2018-05-09 10:47:45 [localhost-startStop-1] FINE: SSL handshake happened 2018-05-09 10:47:45 [localhost-startStop-1] FINE: Established LDAP connection with SSL client auth to prime.ipa.kkgpitt.org:636 2018-05-09 10:47:45 [localhost-startStop-1] FINE: initializing with mininum 3 and maximum 15 connections to host prime.ipa.kkgpitt.org port 636, secure connection, true, authentication type 2 2018-05-09 10:47:45 [localhost-startStop-1] FINE: increasing minimum connections by 3 2018-05-09 10:47:45 [localhost-startStop-1] FINE: new total available connections 3 2018-05-09 10:47:45 [localhost-startStop-1] FINE: new number of connections 3 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: restart at autoShutdown? false 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: autoShutdown crumb file path? /var/lib/pki/pki-tomcat/logs/autoShutdown.crumb 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: about to look for cert for auto-shutdown support:auditSigningCert cert-pki-ca 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: found cert:auditSigningCert cert-pki-ca 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: done init id=usrgrp 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: initialized usrgrp 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: initSubsystem id=registry 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: ready to init id=registry 2018-05-09 10:47:45 [localhost-startStop-1] FINE: RegistrySubsystem: start init 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin profile caEnrollImpl Generic Certificate Enrollment Profile Certificate Authority Generic Certificate Enrollment Profile com.netscape.cms.profile.common.CAEnrollProfile 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin profile caCACertEnrollImpl CA Certificate Enrollment Profile Certificate Authority CA Certificate Enrollment Profile com.netscape.cms.profile.common.CACertCAEnrollProfile 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin profile caServerCertEnrollImpl Server Certificate Enrollment Profile Certificate Authority Server Certificate Enrollment Profile com.netscape.cms.profile.common.ServerCertCAEnrollProfile 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin profile caUserCertEnrollImpl User Certificate Enrollment Profile Certificate Authority User Certificate Enrollment Profile com.netscape.cms.profile.common.UserCertCAEnrollProfile 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin defaultPolicy noDefaultImpl No Default No Default com.netscape.cms.profile.def.NoDefault 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin defaultPolicy genericExtDefaultImpl Generic Extension Generic Extension com.netscape.cms.profile.def.GenericExtDefault 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin defaultPolicy autoAssignDefaultImpl Auto Request Assignment Default Auto Request Assignment Default com.netscape.cms.profile.def.AutoAssignDefault 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin defaultPolicy subjectNameDefaultImpl Subject Name Default Subject Name Default com.netscape.cms.profile.def.SubjectNameDefault 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin defaultPolicy validityDefaultImpl Validity Default Validty Default com.netscape.cms.profile.def.ValidityDefault 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin defaultPolicy randomizedValidityDefaultImpl Randomized Validity Default Randomized Validity Default com.netscape.cms.profile.def.RandomizedValidityDefault 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin defaultPolicy caValidityDefaultImpl CA Certificate Validity Default CA Certificate Validty Default com.netscape.cms.profile.def.CAValidityDefault 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin defaultPolicy subjectKeyIdentifierExtDefaultImpl Subject Key Identifier Default Subject Key Identifier Default com.netscape.cms.profile.def.SubjectKeyIdentifierExtDefault 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin defaultPolicy authorityKeyIdentifierExtDefaultImpl Authority Key Identifier Extension Default Authority Key Identifier Extension Default com.netscape.cms.profile.def.AuthorityKeyIdentifierExtDefault 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin defaultPolicy basicConstraintsExtDefaultImpl Basic Constraints Extension Default Basic Constraints Extension Default com.netscape.cms.profile.def.BasicConstraintsExtDefault 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin defaultPolicy keyUsageExtDefaultImpl Key Usage Extension Default Key Usage Extension Default com.netscape.cms.profile.def.KeyUsageExtDefault 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin defaultPolicy nsCertTypeExtDefaultImpl Netscape Certificate Type Extension Default Netscape Certificate Type Extension Default com.netscape.cms.profile.def.NSCertTypeExtDefault 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin defaultPolicy extendedKeyUsageExtDefaultImpl Extended Key Usage Extension Default Extended Key Usage Extension Default com.netscape.cms.profile.def.ExtendedKeyUsageExtDefault 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin defaultPolicy ocspNoCheckExtDefaultImpl OCSP No Check Extension Default OCSP No Check Extension Default com.netscape.cms.profile.def.OCSPNoCheckExtDefault 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin defaultPolicy issuerAltNameExtDefaultImpl Issuer Alternative Name Extension Default Issuer Alternative Name Extension Default com.netscape.cms.profile.def.IssuerAltNameExtDefault 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin defaultPolicy subjectAltNameExtDefaultImpl Subject Alternative Name Extension Default Subject Alternative Name Extension Default com.netscape.cms.profile.def.SubjectAltNameExtDefault 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin defaultPolicy userSubjectNameDefaultImpl User Supplied Subject Name Default User Supplied Subject Name Default com.netscape.cms.profile.def.UserSubjectNameDefault 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin defaultPolicy cmcUserSignedSubjectNameDefaultImpl CMC User Signed Subject Name Default CMC User Signed Subject Name Default com.netscape.cms.profile.def.CMCUserSignedSubjectNameDefault 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin defaultPolicy signingAlgDefaultImpl Signing Algorithm Default Signing Algorithm Default com.netscape.cms.profile.def.SigningAlgDefault 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin defaultPolicy userKeyDefaultImpl User Supplied Key Default User Supplied Key Default com.netscape.cms.profile.def.UserKeyDefault 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin defaultPolicy userValidityDefaultImpl User Supplied Validity Default User Supplied Validity Default com.netscape.cms.profile.def.UserValidityDefault 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin defaultPolicy userExtensionDefaultImpl User Supplied Extension Default User Supplied Extension Default com.netscape.cms.profile.def.UserExtensionDefault 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin defaultPolicy userSigningAlgDefaultImpl User Supplied Signing Alg Default User Supplied Signing Alg Default com.netscape.cms.profile.def.UserSigningAlgDefault 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin defaultPolicy authTokenSubjectNameDefaultImpl Token Supplied Subject Name Default Token Supplied Subject Name Default com.netscape.cms.profile.def.AuthTokenSubjectNameDefault 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin defaultPolicy subjectInfoAccessExtDefaultImpl Subject Info Access Extension Default Subject Info Access Extension Default com.netscape.cms.profile.def.SubjectInfoAccessExtDefault 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin defaultPolicy authInfoAccessExtDefaultImpl Authority Info Access Extension Default Authority Info Access Extension Default com.netscape.cms.profile.def.AuthInfoAccessExtDefault 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin defaultPolicy nscCommentExtDefaultImpl Netscape Comment Extension Default Netscape Comment Extension Default com.netscape.cms.profile.def.NSCCommentExtDefault 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin defaultPolicy freshestCRLExtDefaultImpl Freshest CRL Extension Default Freshest CRL Extension Default com.netscape.cms.profile.def.FreshestCRLExtDefault 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin defaultPolicy crlDistributionPointsExtDefaultImpl CRL Distribution Points Extension Default CRL Distribution Points Extension Default com.netscape.cms.profile.def.CRLDistributionPointsExtDefault 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin defaultPolicy policyConstraintsExtDefaultImpl Policy Constraints Extension Default Policy Constraints Extension Default com.netscape.cms.profile.def.PolicyConstraintsExtDefault 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin defaultPolicy policyMappingsExtDefaultImpl Policy Mappings Extension Default Policy Mappings Extension Default com.netscape.cms.profile.def.PolicyMappingsExtDefault 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin defaultPolicy nameConstraintsExtDefaultImpl Name Constraints Extension Default Name Constraints Extension Default com.netscape.cms.profile.def.NameConstraintsExtDefault 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin defaultPolicy certificateVersionDefaultImpl Certificate Version Default Certificate Version Default com.netscape.cms.profile.def.CertificateVersionDefault 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin defaultPolicy certificatePoliciesExtDefaultImpl Certificate Policies Extension Default Certificate Policies Extension Default com.netscape.cms.profile.def.CertificatePoliciesExtDefault 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin defaultPolicy subjectDirAttributesExtDefaultImpl Subject Directory Attributes Extension Default Subject Directory Attributes Extension Default com.netscape.cms.profile.def.SubjectDirAttributesExtDefault 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin defaultPolicy privateKeyPeriodExtDefaultImpl Private Key Period Ext Default Private Key Period Ext Default com.netscape.cms.profile.def.PrivateKeyUsagePeriodExtDefault 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin defaultPolicy inhibitAnyPolicyExtDefaultImpl Inhibit Any-Policy Extension Default Inhibit Any-Policy Extension Default com.netscape.cms.profile.def.InhibitAnyPolicyExtDefault 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin defaultPolicy imageDefaultImpl Image Default Image Default com.netscape.cms.profile.def.ImageDefault 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin defaultPolicy nsTokenDeviceKeySubjectNameDefaultImpl nsTokenDeviceKeySubjectNameDefault nsTokenDeviceKeySubjectNameDefaultImpl com.netscape.cms.profile.def.nsTokenDeviceKeySubjectNameDefault 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin defaultPolicy nsTokenUserKeySubjectNameDefaultImpl nsTokenUserKeySubjectNameDefault nsTokenUserKeySubjectNameDefaultImpl com.netscape.cms.profile.def.nsTokenUserKeySubjectNameDefault 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin defaultPolicy authzRealmDefaultImpl Authz Realm Default Authz Realm Default com.netscape.cms.profile.def.AuthzRealmDefault 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin defaultPolicy commonNameToSANDefaultImpl Copy Common Name to Subject Alternative Name Copy Common Name to Subject Alternative Name com.netscape.cms.profile.def.CommonNameToSANDefault 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin constraintPolicy noConstraintImpl No Constraint No Constraint com.netscape.cms.profile.constraint.NoConstraint 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin constraintPolicy subjectNameConstraintImpl Subject Name Constraint Subject Name Constraint com.netscape.cms.profile.constraint.SubjectNameConstraint 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin constraintPolicy uniqueSubjectNameConstraintImpl Unique Subject Name Constraint Unique Subject Name Constraint com.netscape.cms.profile.constraint.UniqueSubjectNameConstraint 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin constraintPolicy userSubjectNameConstraintImpl User Subject Name Constraint User Subject Name Constraint com.netscape.cms.profile.constraint.UserSubjectNameConstraint 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin constraintPolicy cmcUserSignedSubjectNameConstraintImpl CMC User Subject Name Constraint CMC User Subject Name Constraint com.netscape.cms.profile.constraint.CMCUserSignedSubjectNameConstraint 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin constraintPolicy caValidityConstraintImpl CA Validity Constraint CA Validity Constraint com.netscape.cms.profile.constraint.CAValidityConstraint 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin constraintPolicy validityConstraintImpl Validity Constraint Validity Constraint com.netscape.cms.profile.constraint.ValidityConstraint 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin constraintPolicy keyUsageExtConstraintImpl Key Usage Extension Constraint Key Usage Extension Constraint com.netscape.cms.profile.constraint.KeyUsageExtConstraint 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin constraintPolicy nsCertTypeExtConstraintImpl Netscape Certificate Type Extension Constraint Netscape Certificate Type Extension Constraint com.netscape.cms.profile.constraint.NSCertTypeExtConstraint 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin constraintPolicy extendedKeyUsageExtConstraintImpl Extended Key Usage Extension Constraint Extended Key Usage Extension Constraint com.netscape.cms.profile.constraint.ExtendedKeyUsageExtConstraint 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin constraintPolicy keyConstraintImpl Key Constraint Key Constraint com.netscape.cms.profile.constraint.KeyConstraint 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin constraintPolicy basicConstraintsExtConstraintImpl Basic Constraints Extension Constraint Basic Constraints Extension Constraint com.netscape.cms.profile.constraint.BasicConstraintsExtConstraint 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin constraintPolicy extensionConstraintImpl Extension Constraint Extension Constraint com.netscape.cms.profile.constraint.ExtensionConstraint 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin constraintPolicy signingAlgConstraintImpl Signing Algorithm Constraint Signing Algorithm Constraint com.netscape.cms.profile.constraint.SigningAlgConstraint 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin constraintPolicy uniqueKeyConstraintImpl Unique Public Key Constraint Unique Public Key Constraint com.netscape.cms.profile.constraint.UniqueKeyConstraint 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin constraintPolicy renewGracePeriodConstraintImpl Renewal Grace Period Constraint Renewal Grace Period Constraint com.netscape.cms.profile.constraint.RenewGracePeriodConstraint 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin constraintPolicy authzRealmConstraintImpl Authz Realm Constraint Authz Realm Constraint com.netscape.cms.profile.constraint.AuthzRealmConstraint 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin constraintPolicy externalProcessConstraintImpl External Process Constraint External Process Constraint com.netscape.cms.profile.constraint.ExternalProcessConstraint 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin profileInput cmcCertReqInputImpl CMC Certificate Request Input CMC Certificate Request Input com.netscape.cms.profile.input.CMCCertReqInput 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin profileInput certReqInputImpl Certificate Request Input Certificate Request Input com.netscape.cms.profile.input.CertReqInput 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin profileInput keyGenInputImpl Key Generation Input Key Generation Input com.netscape.cms.profile.input.KeyGenInput 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin profileInput encKeyGenInputImpl Encryption Key Generation Input Encryption Key Generation Input com.netscape.cms.profile.input.EncryptionKeyGenInput 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin profileInput signKeyGenInputImpl Encryption Key Generation Input Encryption Key Generation Input com.netscape.cms.profile.input.SigningKeyGenInput 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin profileInput dualKeyGenInputImpl Dual Key Generation Input Dual Key Generation Input com.netscape.cms.profile.input.DualKeyGenInput 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin profileInput subjectNameInputImpl Subject Name Input Subject Name Input com.netscape.cms.profile.input.SubjectNameInput 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin profileInput submitterInfoInputImpl Submitter Information Input Submitter Information Input com.netscape.cms.profile.input.SubmitterInfoInput 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin profileInput genericInputImpl Generic Input Generic Input com.netscape.cms.profile.input.GenericInput 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin profileInput fileSigningInputImpl File Signing Input File Signing Input com.netscape.cms.profile.input.FileSigningInput 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin profileInput imageInputImpl Image Input Image Input com.netscape.cms.profile.input.ImageInput 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin profileInput subjectDNInputImpl Subject DN Input Subject DN Input com.netscape.cms.profile.input.SubjectDNInput 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin profileInput nsNKeyCertReqInputImpl nsNKeyCertReqInputImpl nsNKeyCertReqInputImpl com.netscape.cms.profile.input.nsNKeyCertReqInput 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin profileInput nsHKeyCertReqInputImpl nsHKeyCertReqInputImpl nsHKeyCertReqInputImpl com.netscape.cms.profile.input.nsHKeyCertReqInput 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin profileInput serialNumRenewInputImpl Certificate Renewal Request Serial Number Input Certificate Renewal Request Serial Number Input com.netscape.cms.profile.input.SerialNumRenewInput 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin profileInput subjectAltNameExtInputImpl SAN Input SAN Input com.netscape.cms.profile.input.SubjectAltNameExtInput 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin profileOutput certOutputImpl Certificate Output Certificate Output com.netscape.cms.profile.output.CertOutput 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin profileOutput cmmfOutputImpl CMMF Response Output CMMF Response Output com.netscape.cms.profile.output.CMMFOutput 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin profileOutput pkcs7OutputImpl PKCS7 Output PKCS7 Output com.netscape.cms.profile.output.PKCS7Output 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin profileOutput nsNKeyOutputImpl nsNKeyOutputImpl nsNKeyOutputImpl com.netscape.cms.profile.output.nsNKeyOutput 2018-05-09 10:47:45 [localhost-startStop-1] FINE: added plugin profileUpdater subsystemGroupUpdaterImpl Updater for Subsystem Group Updater for Subsystem Group com.netscape.cms.profile.updater.SubsystemGroupUpdater 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: restart at autoShutdown? false 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: autoShutdown crumb file path? /var/lib/pki/pki-tomcat/logs/autoShutdown.crumb 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: about to look for cert for auto-shutdown support:auditSigningCert cert-pki-ca 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: found cert:auditSigningCert cert-pki-ca 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: done init id=registry 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: initialized registry 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: initSubsystem id=oidmap 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: ready to init id=oidmap 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: restart at autoShutdown? false 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: autoShutdown crumb file path? /var/lib/pki/pki-tomcat/logs/autoShutdown.crumb 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: about to look for cert for auto-shutdown support:auditSigningCert cert-pki-ca 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: found cert:auditSigningCert cert-pki-ca 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: done init id=oidmap 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: initialized oidmap 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: initSubsystem id=X500Name 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: ready to init id=X500Name 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: restart at autoShutdown? false 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: autoShutdown crumb file path? /var/lib/pki/pki-tomcat/logs/autoShutdown.crumb 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: about to look for cert for auto-shutdown support:auditSigningCert cert-pki-ca 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: found cert:auditSigningCert cert-pki-ca 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: done init id=X500Name 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: initialized X500Name 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: initSubsystem id=request 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: ready to init id=request 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: restart at autoShutdown? false 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: autoShutdown crumb file path? /var/lib/pki/pki-tomcat/logs/autoShutdown.crumb 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: about to look for cert for auto-shutdown support:auditSigningCert cert-pki-ca 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: found cert:auditSigningCert cert-pki-ca 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: done init id=request 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: initialized request 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: initSubsystem id=ca 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CMSEngine: ready to init id=ca 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CertificateAuthority.init(MAIN, ca) 2018-05-09 10:47:45 [localhost-startStop-1] FINE: Creating LdapBoundConnFactor(CertificateAuthority) 2018-05-09 10:47:45 [localhost-startStop-1] FINE: LdapBoundConnFactory: init 2018-05-09 10:47:45 [localhost-startStop-1] FINE: LdapBoundConnFactory:doCloning true 2018-05-09 10:47:45 [localhost-startStop-1] FINE: LdapAuthInfo: init() 2018-05-09 10:47:45 [localhost-startStop-1] FINE: LdapAuthInfo: init begins 2018-05-09 10:47:45 [localhost-startStop-1] FINE: LdapAuthInfo: init ends 2018-05-09 10:47:45 [localhost-startStop-1] FINE: init: before makeConnection errorIfDown is false 2018-05-09 10:47:45 [localhost-startStop-1] FINE: makeConnection: errorIfDown false 2018-05-09 10:47:45 [localhost-startStop-1] FINE: TCP Keep-Alive: true 2018-05-09 10:47:45 [localhost-startStop-1] FINE: SSLClientCertificateSelectionCB: Setting desired cert nickname to: subsystemCert cert-pki-ca 2018-05-09 10:47:45 [localhost-startStop-1] FINE: LdapJssSSLSocket: set client auth cert nickname subsystemCert cert-pki-ca 2018-05-09 10:47:45 [localhost-startStop-1] FINE: SSL handshake happened 2018-05-09 10:47:45 [localhost-startStop-1] FINE: Established LDAP connection with SSL client auth to prime.ipa.kkgpitt.org:636 2018-05-09 10:47:45 [localhost-startStop-1] FINE: initializing with mininum 3 and maximum 15 connections to host prime.ipa.kkgpitt.org port 636, secure connection, true, authentication type 2 2018-05-09 10:47:45 [localhost-startStop-1] FINE: increasing minimum connections by 3 2018-05-09 10:47:45 [localhost-startStop-1] FINE: new total available connections 3 2018-05-09 10:47:45 [localhost-startStop-1] FINE: new number of connections 3 2018-05-09 10:47:45 [localhost-startStop-1] FINE: Cert Repot inited 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CRL Repot inited 2018-05-09 10:47:45 [localhost-startStop-1] FINE: Replica Repot inited 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CertificateAuthority:initSigUnit: ca cert found 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CertificateAuthority: initSigUnit 1- setting mIssuerObj and mSubjectObj 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CA SigningUnit.init(ca, ca.signing, null) 2018-05-09 10:47:45 [localhost-startStop-1] FINE: Setting ca.signing.newNickname=caSigningCert cert-pki-ca 2018-05-09 10:47:45 [localhost-startStop-1] FINE: SigningUnit: Logging into token Internal Key Storage Token 2018-05-09 10:47:45 [localhost-startStop-1] FINE: SigningUnit: Loading certificate caSigningCert cert-pki-ca 2018-05-09 10:47:45 [localhost-startStop-1] FINE: SigningUnit: Unable to find certificate caSigningCert cert-pki-ca 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CA signing key and cert not (yet) present in NSSDB 2018-05-09 10:47:45 [localhost-startStop-1] FINE: null authorityID -> host authority; not starting KeyRetriever 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CertificateAuthority init: initRequestQueue 2018-05-09 10:47:45 [localhost-startStop-1] FINE: selected policy processor = classic 2018-05-09 10:47:45 [localhost-startStop-1] FINE: GenericPolicyProcessor::init begins 2018-05-09 10:47:45 [localhost-startStop-1] FINE: GenericPolicyProcessor::init Certificate Policy Framework (deprecated) is DISABLED 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CA policy inited 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CA service inited 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CA notifier inited 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CA pending notifier inited 2018-05-09 10:47:45 [localhost-startStop-1] FINE: RequestRepository: constructor2. 2018-05-09 10:47:45 [localhost-startStop-1] FINE: In setCertStatusUpdateInterval 600 2018-05-09 10:47:45 [localhost-startStop-1] FINE: In setCertStatusUpdateInterval listenToCloneModifications=true 2018-05-09 10:47:45 [localhost-startStop-1] FINE: In setCertStatusUpdateInterval listening to modifications 2018-05-09 10:47:45 [localhost-startStop-1] FINE: In setCertStatusUpdateInterval scheduling cert status update every 600 seconds. 2018-05-09 10:47:45 [RetrieveModificationsTask] FINE: In LdapBoundConnFactory::getConn() 2018-05-09 10:47:45 [RetrieveModificationsTask] FINE: masterConn is connected: true 2018-05-09 10:47:45 [RetrieveModificationsTask] FINE: getConn: conn is connected true 2018-05-09 10:47:45 [RetrieveModificationsTask] FINE: getConn: mNumConns now 2 2018-05-09 10:47:45 [RetrieveModificationsTask] FINE: Starting persistent search. 2018-05-09 10:47:45 [localhost-startStop-1] FINE: In setCertStatusUpdateInterval 600 2018-05-09 10:47:45 [localhost-startStop-1] FINE: In setSerialNumberUpdateInterval scheduling serial number update every 600 seconds. 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: About to start updateCertStatus 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: Starting updateCertStatus (entered lock) 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: In updateCertStatus() 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: In LdapBoundConnFactory::getConn() 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: masterConn is connected: true 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: getConn: conn is connected true 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: getConn: mNumConns now 1 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: getInvalidCertificatesByNotBeforeDate filter (certStatus=INVALID) 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: getInvalidCertificatesByNotBeforeDate: about to call findCertRecordsInList 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: In LdapBoundConnFactory::getConn() 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: masterConn is connected: true 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: getConn: conn is connected true 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: getConn: mNumConns now 0 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: In findCertRecordsInListRawJumpto with Jumpto 20180509104745Z 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: In DBVirtualList filter attrs startFrom sortKey pageSize filter: (certStatus=INVALID) attrs: [objectclass, certRecordId, x509cert] pageSize -200 startFrom 20180509104745Z 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CertificateFactory Type : X.509 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CertificateFactory Provider : SUN (DSA key/parameter generation; DSA signing; SHA-1, MD5 digests; SecureRandom; X.509 certificates; JKS & DKS keystores; PKIX CertPathValidator; PKIX CertPathBuilder; LDAP, Collection CertStores, JavaPolicy Policy; JavaLoginConfig Configuration) 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: About to start updateSerialNumbers 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: Starting updateSerialNumbers (entered lock) 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: CertificateRepository: updateCounter mEnableRandomSerialNumbers=false mCounter=null 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: In LdapBoundConnFactory::getConn() 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: masterConn is connected: true 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: increasing minimum connections by 3 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: new total available connections 6 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: new number of connections 3 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: getConn: conn is connected true 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: getConn: mNumConns now 2 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: Repository: getSerialNumber() 2018-05-09 10:47:45 [localhost-startStop-1] FINE: Setting ca.publish.publisher.instance.FileBaseCRLPublisher.directory=/var/lib/ipa/pki-ca/publish 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: returnConn: mNumConns now 3 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: In getInvalidCertsByNotBeforeDate finally. 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: returnConn: mNumConns now 4 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: DBVirtualList: searching for entry 20180509104745Z 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: DBVirtualList.getEntries() 2018-05-09 10:47:45 [RetrieveModificationsTask] FINE: Waiting for next result. 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: returnConn: mNumConns now 5 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: Repository: getSerialNumber serial=1 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: DBVirtualList: entries: 0 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: DBVirtualList: top: 0 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: DBVirtualList: size: 0 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: index may be empty 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: In LdapBoundConnFactory::getConn() 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: masterConn is connected: true 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: getConn: conn is connected true 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: getConn: mNumConns now 4 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: getValidCertsByNotAfterDate filter (certStatus=VALID) 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: In LdapBoundConnFactory::getConn() 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: masterConn is connected: true 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: getConn: conn is connected true 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: getConn: mNumConns now 3 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: In findCertRecordsInListRawJumpto with Jumpto 20180509104745Z 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: In DBVirtualList filter attrs startFrom sortKey pageSize filter: (certStatus=VALID) attrs: [objectclass, certRecordId, x509cert] pageSize -200 startFrom 20180509104745Z 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: returnConn: mNumConns now 4 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: returnConn: mNumConns now 5 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: DBVirtualList: searching for entry 20180509104745Z 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: Repository:setSerialNumber 2 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: Repository: in InitCache 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: Repository: Instance of Certificate Repository. 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: Repository: minSerial:1 maxSerial: 10000000 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: Repository: nextMinSerial: nextMaxSerial: 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: Repository: increment:10000000 lowWaterMark: 2000000 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: CertificateRepository: in getLastSerialNumberInRange: low 1 high 268435456 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: In LdapBoundConnFactory::getConn() 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: masterConn is connected: true 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: getConn: conn is connected true 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: getConn: mNumConns now 4 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: DBVirtualList.getEntries() 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: Releasing ldap connection 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: returnConn: mNumConns now 5 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: DBSubsystem: getEntryAttribute: dn=ou=certificateRepository, ou=ca, o=ipaca attr=description:; 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: CertificateRepository: getLastSerialNumberInRange mEnableRandomSerialNumbers=false mMinRandomBitLength=4 CollisionRecovery=3,10 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: CertificateRepository: getLastSerialNumberInRange modeChange=false enableRsnAtConfig=false mForceModeChange=false mode= 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: Setting dbs.randomSerialNumberCounter=-1 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: DBVirtualList: entries: 1 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: DBVirtualList: top: 0 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: DBVirtualList: size: 10 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: transidValidCertificates: list size: 10 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: transitValidCertificates: ltSize 1 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: Record does not qualify,notAfter Mon Apr 27 10:58:21 EDT 2020 date Wed May 09 10:47:45 EDT 2018 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: transitCertList EXPIRED 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: In LdapBoundConnFactory::getConn() 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: masterConn is connected: true 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: getConn: conn is connected true 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: getConn: mNumConns now 4 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: getRevokedCertificatesByNotAfterDate filter (certStatus=REVOKED) 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: getRevokedCertificatesByNotAfterDate: about to call findCertRecordsInList 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: In LdapBoundConnFactory::getConn() 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: masterConn is connected: true 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: getConn: conn is connected true 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: getConn: mNumConns now 3 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: In findCertRecordsInListRawJumpto with Jumpto 20180509104745Z 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: In DBVirtualList filter attrs startFrom sortKey pageSize filter: (certStatus=REVOKED) attrs: [objectclass, certRevokedOn, certRecordId, certRevoInfo, notAfter, x509cert] pageSize -200 startFrom 20180509104745Z 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: returnConn: mNumConns now 4 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: returnConn: mNumConns now 5 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: DBVirtualList: searching for entry 20180509104745Z 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: DBVirtualList.getEntries() 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: DBVirtualList: entries: 0 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: DBVirtualList: top: 0 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: DBVirtualList: size: 0 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: index may be empty 2018-05-09 10:47:45 [CertStatusUpdateTask] FINE: updateCertStatus done 2018-05-09 10:47:45 [localhost-startStop-1] FINE: PublisherProcessor: startup() 2018-05-09 10:47:45 [localhost-startStop-1] FINE: No LdapPublishing enabled 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: CertificateRepository: getLastSerialNumberInRange mEnableRandomSerialNumbers=false 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: In LdapBoundConnFactory::getConn() 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: masterConn is connected: true 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: getConn: conn is connected true 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: getConn: mNumConns now 4 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: In findCertRecordsInList with Jumpto 268435456 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: In DBVirtualList filter attrs startFrom sortKey pageSize filter: (certStatus=*) attrs: null pageSize -5 startFrom 09268435456 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: returnConn: mNumConns now 5 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: DBVirtualList: searching for entry 09268435456 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: DBVirtualList.getEntries() 2018-05-09 10:47:45 [localhost-startStop-1] FINE: PublisherProcessor: startup: Publishing Queue Enabled: true Priority Level: 0 Maximum Number of Threads: 3 Page Size: 40 2018-05-09 10:47:45 [localhost-startStop-1] FINE: setPublishingQueue: Publishing Queue Enabled: true Priority Level: 0 Maximum Number of Threads: 3 Page Size: 40 2018-05-09 10:47:45 [localhost-startStop-1] FINE: In LdapBoundConnFactory::getConn() 2018-05-09 10:47:45 [localhost-startStop-1] FINE: masterConn is connected: true 2018-05-09 10:47:45 [localhost-startStop-1] FINE: getConn: conn is connected true 2018-05-09 10:47:45 [localhost-startStop-1] FINE: getConn: mNumConns now 4 2018-05-09 10:47:45 [localhost-startStop-1] FINE: returnConn: mNumConns now 5 2018-05-09 10:47:45 [localhost-startStop-1] FINE: RequestRepository: getPublishingStatus mBaseDN: ou=ca,ou=requests,o=ipaca status: -1 2018-05-09 10:47:45 [localhost-startStop-1] FINE: Publishing inited 2018-05-09 10:47:45 [localhost-startStop-1] FINE: initializing crl issue point MasterCRL 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CRL Page Size: 100 2018-05-09 10:47:45 [localhost-startStop-1] FINE: getTimeListSize: ListSize=1 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CRLIssuingPoint:initConfig: mUnexpectedExceptionWaitTime set to 1800000 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: DBVirtualList: entries: 6 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: DBVirtualList: top: 4 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: DBVirtualList: size: 10 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: CertificateRepository:getLastSerialNumberInRange: recList size 10 2018-05-09 10:47:45 [localhost-startStop-1] FINE: CRLIssuingPoint:initConfig: mUnexpectedExceptionLoopMax set to 10 2018-05-09 10:47:45 [localhost-startStop-1] WARNING: java.lang.NullPointerException at com.netscape.ca.CRLIssuingPoint.initConfig(CRLIssuingPoint.java:752) at com.netscape.ca.CRLIssuingPoint.init(CRLIssuingPoint.java:485) at com.netscape.ca.CertificateAuthority.initCRL(CertificateAuthority.java:2271) at com.netscape.ca.CertificateAuthority.init(CertificateAuthority.java:634) at com.netscape.cmscore.apps.CMSEngine.initSubsystem(CMSEngine.java:1059) at com.netscape.cmscore.apps.CMSEngine.initSubsystems(CMSEngine.java:965) at com.netscape.cmscore.apps.CMSEngine.init(CMSEngine.java:581) at com.netscape.certsrv.apps.CMS.init(CMS.java:191) at com.netscape.certsrv.apps.CMS.start(CMS.java:1606) at com.netscape.cms.servlet.base.CMSStartServlet.init(CMSStartServlet.java:117) at javax.servlet.GenericServlet.init(GenericServlet.java:158) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:498) at org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:282) at org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:279) at java.security.AccessController.doPrivileged(Native Method) at javax.security.auth.Subject.doAsPrivileged(Subject.java:549) at org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:314) at org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:170) at org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:123) at org.apache.catalina.core.StandardWrapper.initServlet(StandardWrapper.java:1132) at org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:1091) at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:983) at org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java:4939) at org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5249) at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:150) at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:754) at org.apache.catalina.core.ContainerBase.access$000(ContainerBase.java:129) at org.apache.catalina.core.ContainerBase$PrivilegedAddChild.run(ContainerBase.java:150) at org.apache.catalina.core.ContainerBase$PrivilegedAddChild.run(ContainerBase.java:140) at java.security.AccessController.doPrivileged(Native Method) at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:728) at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:734) at org.apache.catalina.startup.HostConfig.deployDescriptor(HostConfig.java:629) at org.apache.catalina.startup.HostConfig$DeployDescriptor.run(HostConfig.java:1839) at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) at java.util.concurrent.FutureTask.run(FutureTask.java:266) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) at java.lang.Thread.run(Thread.java:748)
2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: CertificateRepository:getLastSerialNumberInRange: ltSize 10 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: CertificateRepository:getLastCertRecordSerialNo: serialno 10 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: getLastSerialNumberInRange returning: 10 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: Repository: mLastSerialNo: 10 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: In LdapBoundConnFactory::getConn() 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: masterConn is connected: true 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: getConn: conn is connected true 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: getConn: mNumConns now 4 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: Releasing ldap connection 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: returnConn: mNumConns now 5 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: DBSubsystem: getEntryAttribute: dn=ou=certificateRepository, ou=ca, o=ipaca attr=description:; 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: CertificateRepository: updateCounter mEnableRandomSerialNumbers=false 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: CertificateRepository: updateCounter CertificateRepositoryMode = 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: CertificateRepository: updateCounter modeChange=false 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: CertificateRepository: UpdateCounter mEnableRandomSerialNumbers=false mCounter=-1 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: Starting cert checkRanges 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: Repository: Serial Management not enabled. Returning .. 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: Starting request checkRanges 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: Repository: Serial Management not enabled. Returning .. 2018-05-09 10:47:45 [SerialNumberUpdateTask] FINE: updateSerialNumbers done 2018-05-09 10:47:45 [http-nio-8080-exec-1] FINE: according to ccMode, authorization for servlet: caGetStatus is LDAP based, not XML {1}, use default authz mgr: {2}. 2018-05-09 10:47:45 [http-nio-8080-exec-1] SEVERE: Servlet.service() for servlet [caGetStatus] in context with path [/ca] threw exception java.io.IOException: CS server is not ready to serve. at com.netscape.cms.servlet.base.CMSServlet.service(CMSServlet.java:442) at javax.servlet.http.HttpServlet.service(HttpServlet.java:742) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:498) at org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:282) at org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:279) at java.security.AccessController.doPrivileged(Native Method) at javax.security.auth.Subject.doAsPrivileged(Subject.java:549) at org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:314) at org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:170) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:225) at org.apache.catalina.core.ApplicationFilterChain.access$000(ApplicationFilterChain.java:47) at org.apache.catalina.core.ApplicationFilterChain$1.run(ApplicationFilterChain.java:149) at org.apache.catalina.core.ApplicationFilterChain$1.run(ApplicationFilterChain.java:145) at java.security.AccessController.doPrivileged(Native Method) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:144) at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:498) at org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:282) at org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:279) at java.security.AccessController.doPrivileged(Native Method) at javax.security.auth.Subject.doAsPrivileged(Subject.java:549) at org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:314) at org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:253) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:191) at org.apache.catalina.core.ApplicationFilterChain.access$000(ApplicationFilterChain.java:47) at org.apache.catalina.core.ApplicationFilterChain$1.run(ApplicationFilterChain.java:149) at org.apache.catalina.core.ApplicationFilterChain$1.run(ApplicationFilterChain.java:145) at java.security.AccessController.doPrivileged(Native Method) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:144) at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:199) at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:96) at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:496) at com.netscape.cms.tomcat.ExternalAuthenticationValve.invoke(ExternalAuthenticationValve.java:82) at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:140) at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:81) at org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:650) at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:87) at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:342) at org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:803) at org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:66) at org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:790) at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1459) at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61) at java.lang.Thread.run(Thread.java:748)
2018-05-09 10:47:46 [http-nio-8080-exec-3] SEVERE: Servlet.service() for servlet [caGetStatus] in context with path [/ca] threw exception java.io.IOException: CS server is not ready to serve. at com.netscape.cms.servlet.base.CMSServlet.service(CMSServlet.java:442) at javax.servlet.http.HttpServlet.service(HttpServlet.java:742) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:498) at org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:282) at org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:279) at java.security.AccessController.doPrivileged(Native Method) at javax.security.auth.Subject.doAsPrivileged(Subject.java:549) at org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:314) at org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:170) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:225) at org.apache.catalina.core.ApplicationFilterChain.access$000(ApplicationFilterChain.java:47) at org.apache.catalina.core.ApplicationFilterChain$1.run(ApplicationFilterChain.java:149) at org.apache.catalina.core.ApplicationFilterChain$1.run(ApplicationFilterChain.java:145) at java.security.AccessController.doPrivileged(Native Method) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:144) at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:498) at org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:282) at org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:279) at java.security.AccessController.doPrivileged(Native Method) at javax.security.auth.Subject.doAsPrivileged(Subject.java:549) at org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:314) at org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:253) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:191) at org.apache.catalina.core.ApplicationFilterChain.access$000(ApplicationFilterChain.java:47) at org.apache.catalina.core.ApplicationFilterChain$1.run(ApplicationFilterChain.java:149) at org.apache.catalina.core.ApplicationFilterChain$1.run(ApplicationFilterChain.java:145) at java.security.AccessController.doPrivileged(Native Method) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:144) at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:199) at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:96) at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:496) at com.netscape.cms.tomcat.ExternalAuthenticationValve.invoke(ExternalAuthenticationValve.java:82) at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:140) at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:81) at org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:650) at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:87) at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:342) at org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:803) at org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:66) at org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:790) at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1459) at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61) at java.lang.Thread.run(Thread.java:748)
2018-05-09 10:47:47 [http-nio-8080-exec-4] SEVERE: Servlet.service() for servlet [caGetStatus] in context with path [/ca] threw exception java.io.IOException: CS server is not ready to serve. at com.netscape.cms.servlet.base.CMSServlet.service(CMSServlet.java:442) at javax.servlet.http.HttpServlet.service(HttpServlet.java:742) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:498) at org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:282) at org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:279) at java.security.AccessController.doPrivileged(Native Method) at javax.security.auth.Subject.doAsPrivileged(Subject.java:549) at org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:314) at org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:170) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:225) at org.apache.catalina.core.ApplicationFilterChain.access$000(ApplicationFilterChain.java:47) at org.apache.catalina.core.ApplicationFilterChain$1.run(ApplicationFilterChain.java:149) at org.apache.catalina.core.ApplicationFilterChain$1.run(ApplicationFilterChain.java:145) at java.security.AccessController.doPrivileged(Native Method) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:144) at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:498) at org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:282) at org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:279) at java.security.AccessController.doPrivileged(Native Method) at javax.security.auth.Subject.doAsPrivileged(Subject.java:549) at org.apache.catalina.security
freeipa-users@lists.fedorahosted.org