On Tue, Oct 6, 2020 at 12:31 PM Alexander Scheel <ascheel@redhat.com> wrote:

Hi,

I've created a NSS DB on F32 and tested with recent Dogtag PKI / JSS
packages and can't reproduce.

Could you rerun PKCS12Export under gdb (modify /usr/bin/PKCS12Export
and change the last execution (${JAVA} ${JAVA_OPTIONS} ...) to start
with `gdb --args`)? This should give us a better stacktrace (press
"run" then press "c" to continue past the mandatory initial
segmentation fault caused by the JVM) and then when the program
crashes again, type "backtrace" for a backtrace and copy/paste here?
That's the easiest way to get a usable stacktrace out of this that
doesn't require us being able to fully reproduce your environment.

-- Alex

On Tue, Oct 6, 2020 at 2:15 PM Uzor Ide via FreeIPA-users
<freeipa-users@lists.fedorahosted.org> wrote:
>
> Hi All,
>
> I have a curious issue where ipa-replica-install fails or rather crashes just as it is about for complete.
> Both the master and the replica are Centos 8 Stream. I have also tested a replica on fedora 32 with the same result.
> Just after ipa-custodia setup is complete I get the following error
>
> ERROR CalledProcessError(Command ['/usr/bin/PKCS12Export', '-d', '/tmp/tmpdysxuo2a', '-p', '/tmp/tmpdysxuo2a/pwdfile.txt', '-w', '/tmp/tmpdysxuo2a/crtpwfile', '-o', '/tmp/tmpii01v5iyipa/cacert.p12'] returned non-zero exit status 134: '/usr/bin/PKCS12Export: line 94: 9156 Aborted (core dumped) ${JAVA} ${JAVA_OPTIONS} -cp "${PKI_LIB}/*" -Djava.util.logging.config.file=${PKI_LOGGING_CONFIG} com.netscape.cmstools.${COMMAND} "$@"\n')
> 2020-10-06T03:32:12Z ERROR The ipa-replica-install command
> failed. See /var/log/ipareplica-install.log for more information
>
> From replica-install-log, It appears that is trying to export some certificates
>
> 2020-10-06T03:32:09Z DEBUG Starting external process
> 2020-10-06T03:32:09Z DEBUG args=['/usr/bin/PKCS12Export', '-d', '/tmp/tmpdysxuo2a', '-p', '/tmp/tmpdysxuo2a/pwdfile.txt', '-w', '/tmp/tmpdysxuo2a/crtpwfile', '-o', '/tmp/tmpii01v5iyipa/cacert.p12']
> 2020-10-06T03:32:12Z DEBUG Process finished, return code=134
> 2020-10-06T03:32:12Z DEBUG stdout=#
> # A fatal error has been detected by the Java Runtime Environment:
> #
> # SIGSEGV (0xb) at pc=0x00007f479d6ce313, pid=9156, tid=0x00007f479ed46700
> #
> # JRE version: OpenJDK Runtime Environment (8.0_265-b01) (build 1.8.0_265-b01)
> # Java VM: OpenJDK 64-Bit Server VM (25.265-b01 mixed mode linux-amd64 compressed oops)
> # Problematic frame:
> # V [libjvm.so+0x818313] LinkResolver::runtime_resolve_virtual_method(CallInfo&, methodHandle, KlassHandle, Handle, KlassHandle, bool, Thread*)+0x83
> #
> # Core dump written. Default location: /root/core or core.9156
> #
> # An error report file with more information is saved as:
> # /root/hs_err_pid9156.log
> #
> # If you would like to submit a bug report, please visit:
> # http://bugreport.java.com/bugreport/crash.jsp
> #
>
> 2020-10-06T03:32:12Z DEBUG stderr=/usr/bin/PKCS12Export: line 94: 9156 Aborted (core dumped) ${JAVA} ${JAVA_OPTIONS} -cp "${PKI_LIB}/*" -Djava.util.logging.config.file=${PKI_LOGGING_CONFIG} com.netscape.cmstools.${COMMAND} "$@"
>
> 2020-10-06T03:32:12Z DEBUG File "/usr/lib/python3.6/site-packages/ipapython/admintool.py", line 179, in execute
> return_value = self.run()
> File "/usr/lib/python3.6/site-packages/ipapython/install/cli.py", line 340, in run
> return cfgr.run()
> File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 360, in run
> return self.execute()
> File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 386, in execute
> for rval in self._executor():
> File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 431, in __runner
> exc_handler(exc_info)
> File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 460, in _handle_execute_exception
> self._handle_exception(exc_info)
> File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 450, in _handle_exception
> six.reraise(*exc_info)
> File "/usr/lib/python3.6/site-packages/six.py", line 693, in reraise
> raise value
> File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 421, in __runner
> step()
> File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 418, in <lambda>
> step = lambda: next(self.__gen)
> File "/usr/lib/python3.6/site-packages/ipapython/install/util.py", line 81, in run_generator_with_yield_from
> six.reraise(*exc_info)
> File "/usr/lib/python3.6/site-packages/six.py", line 693, in reraise
> raise value
> File "/usr/lib/python3.6/site-packages/ipapython/install/util.py", line 59, in run_generator_with_yield_from
> value = gen.send(prev_value)
> File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 655, in _configure
> next(executor)
> File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 431, in __runner
> exc_handler(exc_info)
> File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 460, in _handle_execute_exception
> self._handle_exception(exc_info)
> File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 518, in _handle_exception
> self.__parent._handle_exception(exc_info)
> File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 450, in _handle_exception
> six.reraise(*exc_info)
> File "/usr/lib/python3.6/site-packages/six.py", line 693, in reraise
> raise value
> File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 515, in _handle_exception
> super(ComponentBase, self)._handle_exception(exc_info)
> File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 450, in _handle_exception
> six.reraise(*exc_info)
> File "/usr/lib/python3.6/site-packages/six.py", line 693, in reraise
> raise value
> File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 421, in __runner
> step()
> File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 418, in <lambda>
> step = lambda: next(self.__gen)
> File "/usr/lib/python3.6/site-packages/ipapython/install/util.py", line 81, in run_generator_with_yield_from
> six.reraise(*exc_info)
> File "/usr/lib/python3.6/site-packages/six.py", line 693, in reraise
> raise value
> File "/usr/lib/python3.6/site-packages/ipapython/install/util.py", line 59, in run_generator_with_yield_from
> value = gen.send(prev_value)
> File "/usr/lib/python3.6/site-packages/ipapython/install/common.py", line 65, in _install
> for unused in self._installer(self.parent):
> File "/usr/lib/python3.6/site-packages/ipaserver/install/server/__init__.py", line 602, in main
> replica_install(self)
> File "/usr/lib/python3.6/site-packages/ipaserver/install/server/replicainstall.py", line 402, in decorated
> func(installer)
> File "/usr/lib/python3.6/site-packages/ipaserver/install/server/replicainstall.py", line 1318, in install
> ca.install(False, config, options, custodia=custodia)
> File "/usr/lib/python3.6/site-packages/ipaserver/install/ca.py", line 270, in install
> install_step_0(standalone, replica_config, options, custodia=custodia)
> File "/usr/lib/python3.6/site-packages/ipaserver/install/ca.py", line 308, in install_step_0
> replica_config.dirman_password)
> File "/usr/lib/python3.6/site-packages/ipaserver/install/custodiainstance.py", line 305, in get_ca_keys
> self._get_keys(cacerts_file, cacerts_pwd, data)
> File "/usr/lib/python3.6/site-packages/ipaserver/install/custodiainstance.py", line 295, in _get_keys
> '-o', cacerts_file
> File "/usr/lib/python3.6/site-packages/ipapython/ipautil.py", line 598, in run
> p.returncode, arg_string, output_log, error_log
>
> 2020-10-06T03:32:12Z DEBUG The ipa-replica-install command failed, exception: CalledProcessError: CalledProcessError(Command ['/usr/bin/PKCS12Export', '-d', '/tmp/tmpdysxuo2a', '-p', '/tmp/tmpdysxuo2a/pwdfile.txt', '-w', '/tmp/tmpdysxuo2a/crtpwfile', '-o', '/tmp/tmpii01v5iyipa/cacert.p12'] returned non-zero exit status 134: '/usr/bin/PKCS12Export: line 94: 9156 Aborted (core dumped) ${JAVA} ${JAVA_OPTIONS} -cp "${PKI_LIB}/*" -Djava.util.logging.config.file=${PKI_LOGGING_CONFIG} com.netscape.cmstools.${COMMAND} "$@"\n')
>
> It also core dumps
>
> Master/Replica IPA Packages
> =================
> ipa-healthcheck-core-0.4-6.module_el8.3.0+482+9e103aab.noarch
> ipa-server-trust-ad-4.8.7-12.module_el8.3.0+511+8a502f20.x86_64
> libipa_hbac-2.3.0-9.el8.x86_64
> python3-ipalib-4.8.7-12.module_el8.3.0+511+8a502f20.noarch
> python3-ipaserver-4.8.7-12.module_el8.3.0+511+8a502f20.noarch
> ipa-client-common-4.8.7-12.module_el8.3.0+511+8a502f20.noarch
> ipa-selinux-4.8.7-12.module_el8.3.0+511+8a502f20.noarch
> ipa-client-4.8.7-12.module_el8.3.0+511+8a502f20.x86_64
> ipa-server-dns-4.8.7-12.module_el8.3.0+511+8a502f20.noarch
> ipa-common-4.8.7-12.module_el8.3.0+511+8a502f20.noarch
> ipa-server-common-4.8.7-12.module_el8.3.0+511+8a502f20.noarch
> python3-ipaclient-4.8.7-12.module_el8.3.0+511+8a502f20.noarch
> ipa-server-4.8.7-12.module_el8.3.0+511+8a502f20.x86_64
> python3-libipa_hbac-2.3.0-9.el8.x86_64.
>
>
> _______________________________________________
> FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
> To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org
> Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org