### ipa-replica-prepare.1: begin ### [02/May/2018:15:34:50][http-bio-8443-exec-1]: SignedAuditEventFactory: create() message created for eventType=ACCESS_SESSION_ESTABLISH_SUCCESS [02/May/2018:15:34:50][http-bio-8443-exec-1]: according to ccMode, authorization for servlet: caProfileSubmitSSLClient is LDAP based, not XML {1}, use default authz mgr: {2}. [02/May/2018:15:34:50][http-bio-8443-exec-1]: according to ccMode, authorization for servlet: caProfileSubmitSSLClient is LDAP based, not XML {1}, use default authz mgr: {2}. [02/May/2018:15:34:50][http-bio-8443-exec-1]: CMSServlet:service() uri = /ca/ee/ca/profileSubmitSSLClient [02/May/2018:15:34:50][http-bio-8443-exec-1]: CMSServlet::service() param name='requestor_name' value='IPA Installer' [02/May/2018:15:34:50][http-bio-8443-exec-1]: CMSServlet::service() param name='profileId' value='caIPAserviceCert' [02/May/2018:15:34:50][http-bio-8443-exec-1]: CMSServlet::service() param name='cert_request' value='(sensitive)' [02/May/2018:15:34:50][http-bio-8443-exec-1]: CMSServlet::service() param name='cert_request_type' value='pkcs10' [02/May/2018:15:34:50][http-bio-8443-exec-1]: CMSServlet::service() param name='xmlOutput' value='true' [02/May/2018:15:34:50][http-bio-8443-exec-1]: CMSServlet: caProfileSubmitSSLClient start to service. [02/May/2018:15:34:50][http-bio-8443-exec-1]: xmlOutput true [02/May/2018:15:34:50][http-bio-8443-exec-1]: ProfileSubmitServlet: isRenewal false [02/May/2018:15:34:50][http-bio-8443-exec-1]: according to ccMode, authorization for servlet: caProfileSubmit is LDAP based, not XML {1}, use default authz mgr: {2}. [02/May/2018:15:34:50][http-bio-8443-exec-1]: ProfileSubmitServlet: profile: caIPAserviceCert [02/May/2018:15:34:50][http-bio-8443-exec-1]: CAProcessor: Input Parameters: [02/May/2018:15:34:50][http-bio-8443-exec-1]: CAProcessor: - isRenewal: false [02/May/2018:15:34:50][http-bio-8443-exec-1]: CAProcessor: - remoteHost: 10.0.0.1 [02/May/2018:15:34:50][http-bio-8443-exec-1]: CAProcessor: - cert_request_type: pkcs10 [02/May/2018:15:34:50][http-bio-8443-exec-1]: CAProcessor: - profileId: caIPAserviceCert [02/May/2018:15:34:50][http-bio-8443-exec-1]: CAProcessor: - cert_request: (sensitive) [02/May/2018:15:34:50][http-bio-8443-exec-1]: CAProcessor: - requestor_name: IPA Installer [02/May/2018:15:34:50][http-bio-8443-exec-1]: CAProcessor: - remoteAddr: 10.0.0.1 [02/May/2018:15:34:50][http-bio-8443-exec-1]: EnrollmentProcessor: isRenewal false [02/May/2018:15:34:50][http-bio-8443-exec-1]: EnrollmentProcessor: profileId caIPAserviceCert [02/May/2018:15:34:50][http-bio-8443-exec-1]: EnrollmentProcessor: set Inputs into profile Context [02/May/2018:15:34:50][http-bio-8443-exec-1]: EnrollmentProcessor: authenticator raCertAuth found [02/May/2018:15:34:50][http-bio-8443-exec-1]: CertProcessor: No authenticator credentials required [02/May/2018:15:34:50][http-bio-8443-exec-1]: EnrollmentProcessor: set sslClientCertProvider [02/May/2018:15:34:50][http-bio-8443-exec-1]: authenticate: authentication required. [02/May/2018:15:34:50][http-bio-8443-exec-1]: CMSServlet: in auditSubjectID [02/May/2018:15:34:50][http-bio-8443-exec-1]: CMSServlet: auditSubjectID auditContext {sslClientCertProvider=com.netscape.cms.servlet.profile.SSLClientCertProvider@2a1f1f13, profileContext=com.netscape.cms.profile.common.ProfileContext@527953bf} [02/May/2018:15:34:50][http-bio-8443-exec-1]: CMSServlet auditSubjectID: subjectID: null [02/May/2018:15:34:50][http-bio-8443-exec-1]: AgentCertAuthentication: start [02/May/2018:15:34:50][http-bio-8443-exec-1]: authenticator instance name is raCertAuth [02/May/2018:15:34:50][http-bio-8443-exec-1]: AgentCertAuthenticator: got provider [02/May/2018:15:34:50][http-bio-8443-exec-1]: AgentCertAuthenticator: retrieving client certificate [02/May/2018:15:34:50][http-bio-8443-exec-1]: AgentCertAuthenticator: got certificates [02/May/2018:15:34:50][http-bio-8443-exec-1]: In LdapBoundConnFactory::getConn() [02/May/2018:15:34:50][http-bio-8443-exec-1]: masterConn is connected: true [02/May/2018:15:34:50][http-bio-8443-exec-1]: getConn: conn is connected true [02/May/2018:15:34:50][http-bio-8443-exec-1]: getConn: mNumConns now 2 [02/May/2018:15:34:50][http-bio-8443-exec-1]: returnConn: mNumConns now 3 [02/May/2018:15:34:50][http-bio-8443-exec-1]: check if ipara is in group Registration Manager Agents [02/May/2018:15:34:50][http-bio-8443-exec-1]: UGSubsystem.isMemberOf() using new lookup code [02/May/2018:15:34:50][http-bio-8443-exec-1]: In LdapBoundConnFactory::getConn() [02/May/2018:15:34:50][http-bio-8443-exec-1]: masterConn is connected: true [02/May/2018:15:34:50][http-bio-8443-exec-1]: getConn: conn is connected true [02/May/2018:15:34:50][http-bio-8443-exec-1]: getConn: mNumConns now 2 [02/May/2018:15:34:50][http-bio-8443-exec-1]: authorization search base: cn=Registration Manager Agents,ou=groups,o=ipaca [02/May/2018:15:34:50][http-bio-8443-exec-1]: authorization search filter: (uniquemember=uid=ipara,ou=people,o=ipaca) [02/May/2018:15:34:50][http-bio-8443-exec-1]: authorization result: true [02/May/2018:15:34:50][http-bio-8443-exec-1]: returnConn: mNumConns now 3 [02/May/2018:15:34:50][http-bio-8443-exec-1]: AgentCertAuthentication: authenticated uid=ipara,ou=people,o=ipaca [02/May/2018:15:34:50][http-bio-8443-exec-1]: SignedAuditEventFactory: create() message created for eventType=AUTH_SUCCESS [02/May/2018:15:34:50][http-bio-8443-exec-1]: CertProcessor authToken not null [02/May/2018:15:34:50][http-bio-8443-exec-1]: CAProcessor: authz using acl: [02/May/2018:15:34:50][http-bio-8443-exec-1]: EnrollProfile: createRequests: begins [02/May/2018:15:34:50][http-bio-8443-exec-1]: Start parsePKCS10(): MIICmj... ... [02/May/2018:15:34:50][http-bio-8443-exec-1]: EnrollProfile: parsePKCS10: signature verification enabled [02/May/2018:15:34:50][http-bio-8443-exec-1]: EnrollProfile: parsePKCS10 setting thread token [02/May/2018:15:34:50][http-bio-8443-exec-1]: EnrollProfile: parsePKCS10 restoring thread token [02/May/2018:15:34:50][http-bio-8443-exec-1]: Repository: in getNextSerialNumber. [02/May/2018:15:34:50][http-bio-8443-exec-1]: Repository: checkRange mLastSerialNo=99990331 [02/May/2018:15:34:50][http-bio-8443-exec-1]: Repository: getNextSerialNumber: returning retSerial 99990331 [02/May/2018:15:34:50][http-bio-8443-exec-1]: EnrollProfile: setDefaultCertInfo: setting issuerDN using exact CA signing cert subjectDN encoding [02/May/2018:15:34:50][http-bio-8443-exec-1]: EnrollProfile: createEnrollmentRequest 99990331 [02/May/2018:15:34:50][http-bio-8443-exec-1]: CertProcessor: request from RA: ipara [02/May/2018:15:34:50][http-bio-8443-exec-1]: CertProcessor: profileSetid=serverCertSet [02/May/2018:15:34:50][http-bio-8443-exec-1]: CertProcessor: request 99990331 [02/May/2018:15:34:50][http-bio-8443-exec-1]: CertProcessor: populating request inputs [02/May/2018:15:34:50][http-bio-8443-exec-1]: CertReqInput: populate: begins [02/May/2018:15:34:50][http-bio-8443-exec-1]: CertReqInput: populate: cert_request_type= REQ_TYPE_PKCS10 [02/May/2018:15:34:50][http-bio-8443-exec-1]: Start parsePKCS10(): MIICmj... ... [02/May/2018:15:34:50][http-bio-8443-exec-1]: EnrollProfile: parsePKCS10: signature verification enabled [02/May/2018:15:34:50][http-bio-8443-exec-1]: EnrollProfile: parsePKCS10 setting thread token [02/May/2018:15:34:50][http-bio-8443-exec-1]: EnrollProfile: parsePKCS10 restoring thread token [02/May/2018:15:34:50][http-bio-8443-exec-1]: EnrollProfile: fillPKCS10: begins [02/May/2018:15:34:50][http-bio-8443-exec-1]: EnrollProfile: fillPKCS10: Found PKCS10 extension [02/May/2018:15:34:50][http-bio-8443-exec-1]: EnrollProfile: fillPKCS10: PKCS10 found extensions [ObjectId: 2.5.29.17 Criticality=false SubjectAlternativeName [ [DNSName: ipa-03.example.com]] ] [02/May/2018:15:34:50][http-bio-8443-exec-1]: EnrollProfile: fillPKCS10: Finish parsePKCS10 - CN=ipa-03.example.com,O=EXAMPLE.COM [02/May/2018:15:34:50][http-bio-8443-exec-1]: EnrollProfile: populate: begins [02/May/2018:15:34:50][http-bio-8443-exec-1]: BasicProfile: populate: policy setid =serverCertSet [02/May/2018:15:34:50][http-bio-8443-exec-1]: EnrollDefault: populate: SubjectNameDefault: start [02/May/2018:15:34:50][http-bio-8443-exec-1]: subjectName=CN=ipa-03.example.com, O=EXAMPLE.COM [02/May/2018:15:34:50][http-bio-8443-exec-1]: EnrollDefault: populate: SubjectNameDefault: end [02/May/2018:15:34:50][http-bio-8443-exec-1]: EnrollDefault: populate: ValidityDefault: start [02/May/2018:15:34:50][http-bio-8443-exec-1]: ValidityDefault: start time: 0 [02/May/2018:15:34:50][http-bio-8443-exec-1]: ValidityDefault: not before: Wed May 02 15:34:50 CEST 2018 [02/May/2018:15:34:50][http-bio-8443-exec-1]: ValidityDefault: range: 731 [02/May/2018:15:34:50][http-bio-8443-exec-1]: ValidityDefault: range unit: day [02/May/2018:15:34:50][http-bio-8443-exec-1]: ValidityDefault: not after: Sat May 02 15:34:50 CEST 2020 [02/May/2018:15:34:50][http-bio-8443-exec-1]: EnrollDefault: populate: ValidityDefault: end [02/May/2018:15:34:50][http-bio-8443-exec-1]: EnrollDefault: populate: UserKeyDefault: start [02/May/2018:15:34:50][http-bio-8443-exec-1]: EnrollDefault: populate: UserKeyDefault: end [02/May/2018:15:34:50][http-bio-8443-exec-1]: EnrollDefault: populate: AuthorityKeyIdentifierExtDefault: start [02/May/2018:15:34:50][http-bio-8443-exec-1]: EnrollDefault: populate: AuthorityKeyIdentifierExtDefault: end [02/May/2018:15:34:50][http-bio-8443-exec-1]: EnrollDefault: populate: AuthInfoAccessExtDefault: start [02/May/2018:15:34:50][http-bio-8443-exec-1]: AuthInfoAccess: createExtension i=0 [02/May/2018:15:34:50][http-bio-8443-exec-1]: EnrollDefault: populate: AuthInfoAccessExtDefault: end [02/May/2018:15:34:50][http-bio-8443-exec-1]: EnrollDefault: populate: KeyUsageExtDefault: start [02/May/2018:15:34:50][http-bio-8443-exec-1]: EnrollDefault: populate: KeyUsageExtDefault: end [02/May/2018:15:34:50][http-bio-8443-exec-1]: EnrollDefault: populate: ExtendedKeyUsageExtDefault: start [02/May/2018:15:34:50][http-bio-8443-exec-1]: EnrollDefault: populate: ExtendedKeyUsageExtDefault: end [02/May/2018:15:34:50][http-bio-8443-exec-1]: EnrollDefault: populate: SigningAlgDefault: start [02/May/2018:15:34:50][http-bio-8443-exec-1]: EnrollDefault: populate: SigningAlgDefault: end [02/May/2018:15:34:50][http-bio-8443-exec-1]: EnrollDefault: populate: CRLDistributionPointsExtDefault: start [02/May/2018:15:34:50][http-bio-8443-exec-1]: EnrollDefault: populate: CRLDistributionPointsExtDefault: end [02/May/2018:15:34:50][http-bio-8443-exec-1]: EnrollDefault: populate: SubjectKeyIdentifierExtDefault: start [02/May/2018:15:34:50][http-bio-8443-exec-1]: EnrollDefault: populate: SubjectKeyIdentifierExtDefault: end [02/May/2018:15:34:50][http-bio-8443-exec-1]: EnrollDefault: populate: UserExtensionDefault: start [02/May/2018:15:34:50][http-bio-8443-exec-1]: UserExtensionDefault: using user supplied ext for 2.5.29.17 [02/May/2018:15:34:50][http-bio-8443-exec-1]: EnrollDefault: populate: UserExtensionDefault: end [02/May/2018:15:34:50][http-bio-8443-exec-1]: CMSServlet: in auditSubjectID [02/May/2018:15:34:50][http-bio-8443-exec-1]: CMSServlet: auditSubjectID auditContext {sslClientCertProvider=com.netscape.cms.servlet.profile.SSLClientCertProvider@2a1f1f13, userid=ipara, profileContext=com.netscape.cms.profile.common.ProfileContext@527953bf, authManagerId=raCertAuth} [02/May/2018:15:34:50][http-bio-8443-exec-1]: CMSServlet auditSubjectID: subjectID: ipara [02/May/2018:15:34:50][http-bio-8443-exec-1]: CertProcessor.submitRequest: calling profile submit [02/May/2018:15:34:50][http-bio-8443-exec-1]: EnrollProfile: submit: begins [02/May/2018:15:34:50][http-bio-8443-exec-1]: EnrollProfile: submit: popChallengeRequired =false [02/May/2018:15:34:50][http-bio-8443-exec-1]: In LdapBoundConnFactory::getConn() [02/May/2018:15:34:50][http-bio-8443-exec-1]: masterConn is connected: true [02/May/2018:15:34:50][http-bio-8443-exec-1]: getConn: conn is connected true [02/May/2018:15:34:50][http-bio-8443-exec-1]: getConn: mNumConns now 2 [02/May/2018:15:34:50][http-bio-8443-exec-1]: returnConn: mNumConns now 3 [02/May/2018:15:34:50][http-bio-8443-exec-1]: EnrollProfile: submit: auth token is not null [02/May/2018:15:34:50][http-bio-8443-exec-1]: EnrollProfile.validate: start [02/May/2018:15:34:50][http-bio-8443-exec-1]: EnrollProfile.validate: cert subject name:CN=ipa-03.example.com,O=EXAMPLE.COM [02/May/2018:15:34:50][http-bio-8443-exec-1]: SignedAuditEventFactory: create() message created for eventType=PROFILE_CERT_REQUEST [02/May/2018:15:34:50][http-bio-8443-exec-1]: BasicProfile: validate start on setId=serverCertSet [02/May/2018:15:34:50][http-bio-8443-exec-1]: SubjectNameConstraint: validate start [02/May/2018:15:34:50][http-bio-8443-exec-1]: SubjectNameConstraint: validate start [02/May/2018:15:34:50][http-bio-8443-exec-1]: SubjectNameConstraint: validate cert subject =CN=ipa-03.example.com,O=EXAMPLE.COM [02/May/2018:15:34:50][http-bio-8443-exec-1]: SubjectNameConstraint: validate() - sn500 dname = CN=ipa-03.example.com,O=EXAMPLE.COM [02/May/2018:15:34:50][http-bio-8443-exec-1]: SubjectNameConstraint: validate end [02/May/2018:15:34:50][http-bio-8443-exec-1]: ValidityConstraint: validate start [02/May/2018:15:34:50][http-bio-8443-exec-1]: ValidityConstraint: not before: Wed May 02 15:34:50 CEST 2018 [02/May/2018:15:34:50][http-bio-8443-exec-1]: ValidityConstraint: not after: Sat May 02 15:34:50 CEST 2020 [02/May/2018:15:34:50][http-bio-8443-exec-1]: ValidityConstraint: range: 740 [02/May/2018:15:34:50][http-bio-8443-exec-1]: ValidityConstraint: range unit: day [02/May/2018:15:34:50][http-bio-8443-exec-1]: ValidityConstraint: limit: Mon May 11 15:34:50 CEST 2020 [02/May/2018:15:34:50][http-bio-8443-exec-1]: ValidityConstraint: validate end [02/May/2018:15:34:50][http-bio-8443-exec-1]: KeyConstraint: validate start [02/May/2018:15:34:50][http-bio-8443-exec-1]: KeyConstraint.validate: RSA key contraints passed. [02/May/2018:15:34:50][http-bio-8443-exec-1]: KeyConstraint: validate end [02/May/2018:15:34:50][http-bio-8443-exec-1]: KeyUsageExtConstraint: validate start [02/May/2018:15:34:50][http-bio-8443-exec-1]: KeyUsageExtConstraint: validate end [02/May/2018:15:34:50][http-bio-8443-exec-1]: SigningAlgConstraint: validate start [02/May/2018:15:34:50][http-bio-8443-exec-1]: SigningAlgConstraint: validate end [02/May/2018:15:34:50][http-bio-8443-exec-1]: BasicProfile: change to pending state [02/May/2018:15:34:50][http-bio-8443-exec-1]: BasicProfile: validate end [02/May/2018:15:34:50][http-bio-8443-exec-1]: EnrollProfile.validate: end [02/May/2018:15:34:50][http-bio-8443-exec-1]: CAEnrollProfile: execute request ID 99990331 [02/May/2018:15:34:50][http-bio-8443-exec-1]: issueX509Cert [02/May/2018:15:34:50][http-bio-8443-exec-1]: dnUTF8Encoding false [02/May/2018:15:34:50][http-bio-8443-exec-1]: CertificateRepository: getNextSerialNumber mEnableRandomSerialNumbers=false [02/May/2018:15:34:50][http-bio-8443-exec-1]: Repository: in getNextSerialNumber. [02/May/2018:15:34:50][http-bio-8443-exec-1]: Repository: checkRange mLastSerialNo=2684289234 [02/May/2018:15:34:50][http-bio-8443-exec-1]: Repository: getNextSerialNumber: returning retSerial 2684289234 [02/May/2018:15:34:50][http-bio-8443-exec-1]: CAService: issueX509Cert: setting issuerDN using exact CA signing cert subjectDN encoding [02/May/2018:15:34:50][http-bio-8443-exec-1]: About to ca.sign cert. [02/May/2018:15:34:50][http-bio-8443-exec-1]: sign cert get algorithm [02/May/2018:15:34:50][http-bio-8443-exec-1]: sign cert encoding cert [02/May/2018:15:34:50][http-bio-8443-exec-1]: sign cert encoding algorithm [02/May/2018:15:34:50][http-bio-8443-exec-1]: CA cert signing: signing cert [02/May/2018:15:34:50][http-bio-8443-exec-1]: Getting algorithm context for SHA256withRSA RSASignatureWithSHA256Digest [02/May/2018:15:34:50][http-bio-8443-exec-1]: Signing Certificate [02/May/2018:15:34:50][http-bio-8443-exec-1]: storeX509Cert 2684289234 [02/May/2018:15:34:50][http-bio-8443-exec-1]: In storeX509Cert [02/May/2018:15:34:50][http-bio-8443-exec-1]: In LdapBoundConnFactory::getConn() [02/May/2018:15:34:50][http-bio-8443-exec-1]: masterConn is connected: true [02/May/2018:15:34:50][http-bio-8443-exec-1]: getConn: conn is connected true [02/May/2018:15:34:50][http-bio-8443-exec-1]: getConn: mNumConns now 2 [02/May/2018:15:34:50][http-bio-8443-exec-1]: returnConn: mNumConns now 3 [02/May/2018:15:34:50][http-bio-8443-exec-1]: done storeX509Cert [02/May/2018:15:34:50][http-bio-8443-exec-1]: SignedAuditEventFactory: create() message created for eventType=CERT_REQUEST_PROCESSED [02/May/2018:15:34:50][http-bio-8443-exec-1]: In LdapBoundConnFactory::getConn() [02/May/2018:15:34:50][http-bio-8443-exec-1]: masterConn is connected: true [02/May/2018:15:34:50][http-bio-8443-exec-1]: getConn: conn is connected true [02/May/2018:15:34:50][http-bio-8443-exec-1]: getConn: mNumConns now 2 [02/May/2018:15:34:50][http-bio-8443-exec-1]: returnConn: mNumConns now 3 [02/May/2018:15:34:50][http-bio-8443-exec-1]: ARequestNotifier notify mIsPublishingQueueEnabled=true mMaxThreads=3 [02/May/2018:15:34:50][http-bio-8443-exec-1]: addToNotify extended buffer to 1(40) requests by adding request 99990331 [02/May/2018:15:34:50][http-bio-8443-exec-1]: morePublishingThreads moreThreads: true [02/May/2018:15:34:50][http-bio-8443-exec-1]: Number of publishing threads: 1 [02/May/2018:15:34:50][http-bio-8443-exec-1]: EnrollmentSubmitter: done serving [02/May/2018:15:34:50][Thread-21]: RunListeners:: Queue: 1 noSingleRequest [02/May/2018:15:34:50][Thread-21]: getRequest mRequests=1 mSearchForRequests=false [02/May/2018:15:34:50][Thread-21]: getRequest getting request: 99990331 [02/May/2018:15:34:50][Thread-21]: In LdapBoundConnFactory::getConn() [02/May/2018:15:34:50][Thread-21]: masterConn is connected: true [02/May/2018:15:34:50][Thread-21]: getConn: conn is connected true [02/May/2018:15:34:50][Thread-21]: getConn: mNumConns now 2 [02/May/2018:15:34:50][Thread-21]: returnConn: mNumConns now 3 [02/May/2018:15:34:50][http-bio-8443-exec-1]: ProfileSubmitServlet xmlOutput: req len = 1 [02/May/2018:15:34:50][Thread-21]: getRequest request 99990331 found [02/May/2018:15:34:50][Thread-21]: getRequest mRequests=0 mSearchForRequests=false done [02/May/2018:15:34:50][Thread-21]: RunListeners: IRequestListener = com.netscape.cms.listeners.CertificateIssuedListener [02/May/2018:15:34:50][Thread-21]: CertificateIssuedListener: accept 99990331 [02/May/2018:15:34:50][Thread-21]: RunListeners: IRequestListener = com.netscape.ca.CRLIssuingPoint$RevocationRequestListener [02/May/2018:15:34:50][Thread-21]: RunListeners: IRequestListener = com.netscape.cmscore.ldap.LdapRequestListener [02/May/2018:15:34:50][Thread-21]: LdapRequestListener handling publishing for enrollment request id 99990331 [02/May/2018:15:34:50][Thread-21]: Checking publishing for request 99990331 [02/May/2018:15:34:50][Thread-21]: In PublisherProcessor::publishCert [02/May/2018:15:34:50][Thread-21]: Publishing: can't find publishing rule,exiting routine. [02/May/2018:15:34:50][Thread-21]: PublishProcessor::publishCert : Failed to publish using rule: No rules enabled [02/May/2018:15:34:50][Thread-21]: RunListeners: IRequestListener = com.netscape.cms.listeners.CertificateRevokedListener [02/May/2018:15:34:50][Thread-21]: RunListeners: mRequest = 99990331 [02/May/2018:15:34:50][Thread-21]: updatePublishingStatus requestId: 99990331 [02/May/2018:15:34:50][Thread-21]: RequestRepository: setPublishingStatus mBaseDN: ou=ca,ou=requests,o=ipaca status: 99990331 [02/May/2018:15:34:50][Thread-21]: In LdapBoundConnFactory::getConn() [02/May/2018:15:34:50][Thread-21]: masterConn is connected: true [02/May/2018:15:34:50][Thread-21]: getConn: conn is connected true [02/May/2018:15:34:50][Thread-21]: getConn: mNumConns now 2 [02/May/2018:15:34:50][http-bio-8443-exec-1]: CMSServlet: curDate=Wed May 02 15:34:50 CEST 2018 id=caProfileSubmitSSLClient time=189 [02/May/2018:15:34:50][http-bio-8443-exec-1]: SignedAuditEventFactory: create() message created for eventType=ACCESS_SESSION_TERMINATED [02/May/2018:15:34:50][Thread-21]: returnConn: mNumConns now 3 [02/May/2018:15:34:50][Thread-21]: updatePublishingStatus mSavePublishingCounter: 1 mSavePublishingStatus: 200 [02/May/2018:15:34:50][Thread-21]: RunListeners: noQueue SingleRequest [02/May/2018:15:34:50][Thread-21]: RequestRepository: setPublishingStatus mBaseDN: ou=ca,ou=requests,o=ipaca status: -1 [02/May/2018:15:34:50][Thread-21]: In LdapBoundConnFactory::getConn() [02/May/2018:15:34:50][Thread-21]: masterConn is connected: true [02/May/2018:15:34:50][Thread-21]: getConn: conn is connected true [02/May/2018:15:34:50][Thread-21]: getConn: mNumConns now 2 [02/May/2018:15:34:50][Thread-21]: returnConn: mNumConns now 3 [02/May/2018:15:34:50][Thread-21]: Number of publishing threads: 0 [02/May/2018:15:34:50][http-bio-8443-exec-3]: SignedAuditEventFactory: create() message created for eventType=ACCESS_SESSION_ESTABLISH_SUCCESS [02/May/2018:15:34:50][http-bio-8443-exec-3]: CMSServlet:service() uri = /ca/ee/ca/profileSubmitSSLClient [02/May/2018:15:34:51][http-bio-8443-exec-3]: CMSServlet::service() param name='requestor_name' value='IPA Installer' [02/May/2018:15:34:51][http-bio-8443-exec-3]: CMSServlet::service() param name='profileId' value='caIPAserviceCert' [02/May/2018:15:34:51][http-bio-8443-exec-3]: CMSServlet::service() param name='cert_request' value='(sensitive)' [02/May/2018:15:34:51][http-bio-8443-exec-3]: CMSServlet::service() param name='cert_request_type' value='pkcs10' [02/May/2018:15:34:51][http-bio-8443-exec-3]: CMSServlet::service() param name='xmlOutput' value='true' [02/May/2018:15:34:51][http-bio-8443-exec-3]: CMSServlet: caProfileSubmitSSLClient start to service. [02/May/2018:15:34:51][http-bio-8443-exec-3]: xmlOutput true [02/May/2018:15:34:51][http-bio-8443-exec-3]: ProfileSubmitServlet: isRenewal false [02/May/2018:15:34:51][http-bio-8443-exec-3]: according to ccMode, authorization for servlet: caProfileSubmit is LDAP based, not XML {1}, use default authz mgr: {2}. [02/May/2018:15:34:51][http-bio-8443-exec-3]: ProfileSubmitServlet: profile: caIPAserviceCert [02/May/2018:15:34:51][http-bio-8443-exec-3]: CAProcessor: Input Parameters: [02/May/2018:15:34:51][http-bio-8443-exec-3]: CAProcessor: - isRenewal: false [02/May/2018:15:34:51][http-bio-8443-exec-3]: CAProcessor: - remoteHost: 10.0.0.1 [02/May/2018:15:34:51][http-bio-8443-exec-3]: CAProcessor: - cert_request_type: pkcs10 [02/May/2018:15:34:51][http-bio-8443-exec-3]: CAProcessor: - profileId: caIPAserviceCert [02/May/2018:15:34:51][http-bio-8443-exec-3]: CAProcessor: - cert_request: (sensitive) [02/May/2018:15:34:51][http-bio-8443-exec-3]: CAProcessor: - requestor_name: IPA Installer [02/May/2018:15:34:51][http-bio-8443-exec-3]: CAProcessor: - remoteAddr: 10.0.0.1 [02/May/2018:15:34:51][http-bio-8443-exec-3]: EnrollmentProcessor: isRenewal false [02/May/2018:15:34:51][http-bio-8443-exec-3]: EnrollmentProcessor: profileId caIPAserviceCert [02/May/2018:15:34:51][http-bio-8443-exec-3]: EnrollmentProcessor: set Inputs into profile Context [02/May/2018:15:34:51][http-bio-8443-exec-3]: EnrollmentProcessor: authenticator raCertAuth found [02/May/2018:15:34:51][http-bio-8443-exec-3]: CertProcessor: No authenticator credentials required [02/May/2018:15:34:51][http-bio-8443-exec-3]: EnrollmentProcessor: set sslClientCertProvider [02/May/2018:15:34:51][http-bio-8443-exec-3]: authenticate: authentication required. [02/May/2018:15:34:51][http-bio-8443-exec-3]: CMSServlet: in auditSubjectID [02/May/2018:15:34:51][http-bio-8443-exec-3]: CMSServlet: auditSubjectID auditContext {sslClientCertProvider=com.netscape.cms.servlet.profile.SSLClientCertProvider@1b791c44, profileContext=com.netscape.cms.profile.common.ProfileContext@50a582ae} [02/May/2018:15:34:51][http-bio-8443-exec-3]: CMSServlet auditSubjectID: subjectID: null [02/May/2018:15:34:51][http-bio-8443-exec-3]: AgentCertAuthentication: start [02/May/2018:15:34:51][http-bio-8443-exec-3]: authenticator instance name is raCertAuth [02/May/2018:15:34:51][http-bio-8443-exec-3]: AgentCertAuthenticator: got provider [02/May/2018:15:34:51][http-bio-8443-exec-3]: AgentCertAuthenticator: retrieving client certificate [02/May/2018:15:34:51][http-bio-8443-exec-3]: AgentCertAuthenticator: got certificates [02/May/2018:15:34:51][http-bio-8443-exec-3]: In LdapBoundConnFactory::getConn() [02/May/2018:15:34:51][http-bio-8443-exec-3]: masterConn is connected: true [02/May/2018:15:34:51][http-bio-8443-exec-3]: getConn: conn is connected true [02/May/2018:15:34:51][http-bio-8443-exec-3]: getConn: mNumConns now 2 [02/May/2018:15:34:51][http-bio-8443-exec-3]: returnConn: mNumConns now 3 [02/May/2018:15:34:51][http-bio-8443-exec-3]: check if ipara is in group Registration Manager Agents [02/May/2018:15:34:51][http-bio-8443-exec-3]: UGSubsystem.isMemberOf() using new lookup code [02/May/2018:15:34:51][http-bio-8443-exec-3]: In LdapBoundConnFactory::getConn() [02/May/2018:15:34:51][http-bio-8443-exec-3]: masterConn is connected: true [02/May/2018:15:34:51][http-bio-8443-exec-3]: getConn: conn is connected true [02/May/2018:15:34:51][http-bio-8443-exec-3]: getConn: mNumConns now 2 [02/May/2018:15:34:51][http-bio-8443-exec-3]: authorization search base: cn=Registration Manager Agents,ou=groups,o=ipaca [02/May/2018:15:34:51][http-bio-8443-exec-3]: authorization search filter: (uniquemember=uid=ipara,ou=people,o=ipaca) [02/May/2018:15:34:51][http-bio-8443-exec-3]: authorization result: true [02/May/2018:15:34:51][http-bio-8443-exec-3]: returnConn: mNumConns now 3 [02/May/2018:15:34:51][http-bio-8443-exec-3]: AgentCertAuthentication: authenticated uid=ipara,ou=people,o=ipaca [02/May/2018:15:34:51][http-bio-8443-exec-3]: SignedAuditEventFactory: create() message created for eventType=AUTH_SUCCESS [02/May/2018:15:34:51][http-bio-8443-exec-3]: CertProcessor authToken not null [02/May/2018:15:34:51][http-bio-8443-exec-3]: CAProcessor: authz using acl: [02/May/2018:15:34:51][http-bio-8443-exec-3]: EnrollProfile: createRequests: begins [02/May/2018:15:34:51][http-bio-8443-exec-3]: Start parsePKCS10(): MIICmj... ... [02/May/2018:15:34:51][http-bio-8443-exec-3]: EnrollProfile: parsePKCS10: signature verification enabled [02/May/2018:15:34:51][http-bio-8443-exec-3]: EnrollProfile: parsePKCS10 setting thread token [02/May/2018:15:34:51][http-bio-8443-exec-3]: EnrollProfile: parsePKCS10 restoring thread token [02/May/2018:15:34:51][http-bio-8443-exec-3]: Repository: in getNextSerialNumber. [02/May/2018:15:34:51][http-bio-8443-exec-3]: Repository: checkRange mLastSerialNo=99990332 [02/May/2018:15:34:51][http-bio-8443-exec-3]: Repository: getNextSerialNumber: returning retSerial 99990332 [02/May/2018:15:34:51][http-bio-8443-exec-3]: EnrollProfile: setDefaultCertInfo: setting issuerDN using exact CA signing cert subjectDN encoding [02/May/2018:15:34:51][http-bio-8443-exec-3]: EnrollProfile: createEnrollmentRequest 99990332 [02/May/2018:15:34:51][http-bio-8443-exec-3]: CertProcessor: request from RA: ipara [02/May/2018:15:34:51][http-bio-8443-exec-3]: CertProcessor: profileSetid=serverCertSet [02/May/2018:15:34:51][http-bio-8443-exec-3]: CertProcessor: request 99990332 [02/May/2018:15:34:51][http-bio-8443-exec-3]: CertProcessor: populating request inputs [02/May/2018:15:34:51][http-bio-8443-exec-3]: CertReqInput: populate: begins [02/May/2018:15:34:51][http-bio-8443-exec-3]: CertReqInput: populate: cert_request_type= REQ_TYPE_PKCS10 [02/May/2018:15:34:51][http-bio-8443-exec-3]: Start parsePKCS10(): MIICmj... ... [02/May/2018:15:34:51][http-bio-8443-exec-3]: EnrollProfile: parsePKCS10: signature verification enabled [02/May/2018:15:34:51][http-bio-8443-exec-3]: EnrollProfile: parsePKCS10 setting thread token [02/May/2018:15:34:51][http-bio-8443-exec-3]: EnrollProfile: parsePKCS10 restoring thread token [02/May/2018:15:34:51][http-bio-8443-exec-3]: EnrollProfile: fillPKCS10: begins [02/May/2018:15:34:51][http-bio-8443-exec-3]: EnrollProfile: fillPKCS10: Found PKCS10 extension [02/May/2018:15:34:51][http-bio-8443-exec-3]: EnrollProfile: fillPKCS10: PKCS10 found extensions [ObjectId: 2.5.29.17 Criticality=false SubjectAlternativeName [ [DNSName: ipa-03.example.com]] ] [02/May/2018:15:34:51][http-bio-8443-exec-3]: EnrollProfile: fillPKCS10: Finish parsePKCS10 - CN=ipa-03.example.com,O=EXAMPLE.COM [02/May/2018:15:34:51][http-bio-8443-exec-3]: EnrollProfile: populate: begins [02/May/2018:15:34:51][http-bio-8443-exec-3]: BasicProfile: populate: policy setid =serverCertSet [02/May/2018:15:34:51][http-bio-8443-exec-3]: EnrollDefault: populate: SubjectNameDefault: start [02/May/2018:15:34:51][http-bio-8443-exec-3]: subjectName=CN=ipa-03.example.com, O=EXAMPLE.COM [02/May/2018:15:34:51][http-bio-8443-exec-3]: EnrollDefault: populate: SubjectNameDefault: end [02/May/2018:15:34:51][http-bio-8443-exec-3]: EnrollDefault: populate: ValidityDefault: start [02/May/2018:15:34:51][http-bio-8443-exec-3]: ValidityDefault: start time: 0 [02/May/2018:15:34:51][http-bio-8443-exec-3]: ValidityDefault: not before: Wed May 02 15:34:51 CEST 2018 [02/May/2018:15:34:51][http-bio-8443-exec-3]: ValidityDefault: range: 731 [02/May/2018:15:34:51][http-bio-8443-exec-3]: ValidityDefault: range unit: day [02/May/2018:15:34:51][http-bio-8443-exec-3]: ValidityDefault: not after: Sat May 02 15:34:51 CEST 2020 [02/May/2018:15:34:51][http-bio-8443-exec-3]: EnrollDefault: populate: ValidityDefault: end [02/May/2018:15:34:51][http-bio-8443-exec-3]: EnrollDefault: populate: UserKeyDefault: start [02/May/2018:15:34:51][http-bio-8443-exec-3]: EnrollDefault: populate: UserKeyDefault: end [02/May/2018:15:34:51][http-bio-8443-exec-3]: EnrollDefault: populate: AuthorityKeyIdentifierExtDefault: start [02/May/2018:15:34:51][http-bio-8443-exec-3]: EnrollDefault: populate: AuthorityKeyIdentifierExtDefault: end [02/May/2018:15:34:51][http-bio-8443-exec-3]: EnrollDefault: populate: AuthInfoAccessExtDefault: start [02/May/2018:15:34:51][http-bio-8443-exec-3]: AuthInfoAccess: createExtension i=0 [02/May/2018:15:34:51][http-bio-8443-exec-3]: EnrollDefault: populate: AuthInfoAccessExtDefault: end [02/May/2018:15:34:51][http-bio-8443-exec-3]: EnrollDefault: populate: KeyUsageExtDefault: start [02/May/2018:15:34:51][http-bio-8443-exec-3]: EnrollDefault: populate: KeyUsageExtDefault: end [02/May/2018:15:34:51][http-bio-8443-exec-3]: EnrollDefault: populate: ExtendedKeyUsageExtDefault: start [02/May/2018:15:34:51][http-bio-8443-exec-3]: EnrollDefault: populate: ExtendedKeyUsageExtDefault: end [02/May/2018:15:34:51][http-bio-8443-exec-3]: EnrollDefault: populate: SigningAlgDefault: start [02/May/2018:15:34:51][http-bio-8443-exec-3]: EnrollDefault: populate: SigningAlgDefault: end [02/May/2018:15:34:51][http-bio-8443-exec-3]: EnrollDefault: populate: CRLDistributionPointsExtDefault: start [02/May/2018:15:34:51][http-bio-8443-exec-3]: EnrollDefault: populate: CRLDistributionPointsExtDefault: end [02/May/2018:15:34:51][http-bio-8443-exec-3]: EnrollDefault: populate: SubjectKeyIdentifierExtDefault: start [02/May/2018:15:34:51][http-bio-8443-exec-3]: EnrollDefault: populate: SubjectKeyIdentifierExtDefault: end [02/May/2018:15:34:51][http-bio-8443-exec-3]: EnrollDefault: populate: UserExtensionDefault: start [02/May/2018:15:34:51][http-bio-8443-exec-3]: UserExtensionDefault: using user supplied ext for 2.5.29.17 [02/May/2018:15:34:51][http-bio-8443-exec-3]: EnrollDefault: populate: UserExtensionDefault: end [02/May/2018:15:34:51][http-bio-8443-exec-3]: CMSServlet: in auditSubjectID [02/May/2018:15:34:51][http-bio-8443-exec-3]: CMSServlet: auditSubjectID auditContext {sslClientCertProvider=com.netscape.cms.servlet.profile.SSLClientCertProvider@1b791c44, userid=ipara, profileContext=com.netscape.cms.profile.common.ProfileContext@50a582ae, authManagerId=raCertAuth} [02/May/2018:15:34:51][http-bio-8443-exec-3]: CMSServlet auditSubjectID: subjectID: ipara [02/May/2018:15:34:51][http-bio-8443-exec-3]: CertProcessor.submitRequest: calling profile submit [02/May/2018:15:34:51][http-bio-8443-exec-3]: EnrollProfile: submit: begins [02/May/2018:15:34:51][http-bio-8443-exec-3]: EnrollProfile: submit: popChallengeRequired =false [02/May/2018:15:34:51][http-bio-8443-exec-3]: In LdapBoundConnFactory::getConn() [02/May/2018:15:34:51][http-bio-8443-exec-3]: masterConn is connected: true [02/May/2018:15:34:51][http-bio-8443-exec-3]: getConn: conn is connected true [02/May/2018:15:34:51][http-bio-8443-exec-3]: getConn: mNumConns now 2 [02/May/2018:15:34:51][http-bio-8443-exec-3]: returnConn: mNumConns now 3 [02/May/2018:15:34:51][http-bio-8443-exec-3]: EnrollProfile: submit: auth token is not null [02/May/2018:15:34:51][http-bio-8443-exec-3]: EnrollProfile.validate: start [02/May/2018:15:34:51][http-bio-8443-exec-3]: EnrollProfile.validate: cert subject name:CN=ipa-03.example.com,O=EXAMPLE.COM [02/May/2018:15:34:51][http-bio-8443-exec-3]: SignedAuditEventFactory: create() message created for eventType=PROFILE_CERT_REQUEST [02/May/2018:15:34:51][http-bio-8443-exec-3]: BasicProfile: validate start on setId=serverCertSet [02/May/2018:15:34:51][http-bio-8443-exec-3]: SubjectNameConstraint: validate start [02/May/2018:15:34:51][http-bio-8443-exec-3]: SubjectNameConstraint: validate start [02/May/2018:15:34:51][http-bio-8443-exec-3]: SubjectNameConstraint: validate cert subject =CN=ipa-03.example.com,O=EXAMPLE.COM [02/May/2018:15:34:51][http-bio-8443-exec-3]: SubjectNameConstraint: validate() - sn500 dname = CN=ipa-03.example.com,O=EXAMPLE.COM [02/May/2018:15:34:51][http-bio-8443-exec-3]: SubjectNameConstraint: validate end [02/May/2018:15:34:51][http-bio-8443-exec-3]: ValidityConstraint: validate start [02/May/2018:15:34:51][http-bio-8443-exec-3]: ValidityConstraint: not before: Wed May 02 15:34:51 CEST 2018 [02/May/2018:15:34:51][http-bio-8443-exec-3]: ValidityConstraint: not after: Sat May 02 15:34:51 CEST 2020 [02/May/2018:15:34:51][http-bio-8443-exec-3]: ValidityConstraint: range: 740 [02/May/2018:15:34:51][http-bio-8443-exec-3]: ValidityConstraint: range unit: day [02/May/2018:15:34:51][http-bio-8443-exec-3]: ValidityConstraint: limit: Mon May 11 15:34:51 CEST 2020 [02/May/2018:15:34:51][http-bio-8443-exec-3]: ValidityConstraint: validate end [02/May/2018:15:34:51][http-bio-8443-exec-3]: KeyConstraint: validate start [02/May/2018:15:34:51][http-bio-8443-exec-3]: KeyConstraint.validate: RSA key contraints passed. [02/May/2018:15:34:51][http-bio-8443-exec-3]: KeyConstraint: validate end [02/May/2018:15:34:51][http-bio-8443-exec-3]: KeyUsageExtConstraint: validate start [02/May/2018:15:34:51][http-bio-8443-exec-3]: KeyUsageExtConstraint: validate end [02/May/2018:15:34:51][http-bio-8443-exec-3]: SigningAlgConstraint: validate start [02/May/2018:15:34:51][http-bio-8443-exec-3]: SigningAlgConstraint: validate end [02/May/2018:15:34:51][http-bio-8443-exec-3]: BasicProfile: change to pending state [02/May/2018:15:34:51][http-bio-8443-exec-3]: BasicProfile: validate end [02/May/2018:15:34:51][http-bio-8443-exec-3]: EnrollProfile.validate: end [02/May/2018:15:34:51][http-bio-8443-exec-3]: CAEnrollProfile: execute request ID 99990332 [02/May/2018:15:34:51][http-bio-8443-exec-3]: issueX509Cert [02/May/2018:15:34:51][http-bio-8443-exec-3]: dnUTF8Encoding false [02/May/2018:15:34:51][http-bio-8443-exec-3]: CertificateRepository: getNextSerialNumber mEnableRandomSerialNumbers=false [02/May/2018:15:34:51][http-bio-8443-exec-3]: Repository: in getNextSerialNumber. [02/May/2018:15:34:51][http-bio-8443-exec-3]: Repository: checkRange mLastSerialNo=2684289235 [02/May/2018:15:34:51][http-bio-8443-exec-3]: Repository: getNextSerialNumber: returning retSerial 2684289235 [02/May/2018:15:34:51][http-bio-8443-exec-3]: CAService: issueX509Cert: setting issuerDN using exact CA signing cert subjectDN encoding [02/May/2018:15:34:51][http-bio-8443-exec-3]: About to ca.sign cert. [02/May/2018:15:34:51][http-bio-8443-exec-3]: sign cert get algorithm [02/May/2018:15:34:51][http-bio-8443-exec-3]: sign cert encoding cert [02/May/2018:15:34:51][http-bio-8443-exec-3]: sign cert encoding algorithm [02/May/2018:15:34:51][http-bio-8443-exec-3]: CA cert signing: signing cert [02/May/2018:15:34:51][http-bio-8443-exec-3]: Getting algorithm context for SHA256withRSA RSASignatureWithSHA256Digest [02/May/2018:15:34:51][http-bio-8443-exec-3]: Signing Certificate [02/May/2018:15:34:51][http-bio-8443-exec-3]: storeX509Cert 2684289235 [02/May/2018:15:34:51][http-bio-8443-exec-3]: In storeX509Cert [02/May/2018:15:34:51][http-bio-8443-exec-3]: In LdapBoundConnFactory::getConn() [02/May/2018:15:34:51][http-bio-8443-exec-3]: masterConn is connected: true [02/May/2018:15:34:51][http-bio-8443-exec-3]: getConn: conn is connected true [02/May/2018:15:34:51][http-bio-8443-exec-3]: getConn: mNumConns now 2 [02/May/2018:15:34:51][http-bio-8443-exec-3]: returnConn: mNumConns now 3 [02/May/2018:15:34:51][http-bio-8443-exec-3]: done storeX509Cert [02/May/2018:15:34:51][http-bio-8443-exec-3]: SignedAuditEventFactory: create() message created for eventType=CERT_REQUEST_PROCESSED [02/May/2018:15:34:51][http-bio-8443-exec-3]: In LdapBoundConnFactory::getConn() [02/May/2018:15:34:51][http-bio-8443-exec-3]: masterConn is connected: true [02/May/2018:15:34:51][http-bio-8443-exec-3]: getConn: conn is connected true [02/May/2018:15:34:51][http-bio-8443-exec-3]: getConn: mNumConns now 2 [02/May/2018:15:34:51][http-bio-8443-exec-3]: returnConn: mNumConns now 3 [02/May/2018:15:34:51][http-bio-8443-exec-3]: ARequestNotifier notify mIsPublishingQueueEnabled=true mMaxThreads=3 [02/May/2018:15:34:51][http-bio-8443-exec-3]: addToNotify extended buffer to 1(40) requests by adding request 99990332 [02/May/2018:15:34:51][http-bio-8443-exec-3]: morePublishingThreads moreThreads: true [02/May/2018:15:34:51][http-bio-8443-exec-3]: Number of publishing threads: 1 [02/May/2018:15:34:51][http-bio-8443-exec-3]: EnrollmentSubmitter: done serving [02/May/2018:15:34:51][Thread-22]: RunListeners:: Queue: 1 noSingleRequest [02/May/2018:15:34:51][Thread-22]: getRequest mRequests=1 mSearchForRequests=false [02/May/2018:15:34:51][Thread-22]: getRequest getting request: 99990332 [02/May/2018:15:34:51][Thread-22]: In LdapBoundConnFactory::getConn() [02/May/2018:15:34:51][Thread-22]: masterConn is connected: true [02/May/2018:15:34:51][Thread-22]: getConn: conn is connected true [02/May/2018:15:34:51][Thread-22]: getConn: mNumConns now 2 [02/May/2018:15:34:51][http-bio-8443-exec-3]: ProfileSubmitServlet xmlOutput: req len = 1 [02/May/2018:15:34:51][Thread-22]: returnConn: mNumConns now 3 [02/May/2018:15:34:51][Thread-22]: getRequest request 99990332 found [02/May/2018:15:34:51][Thread-22]: getRequest mRequests=0 mSearchForRequests=false done [02/May/2018:15:34:51][Thread-22]: RunListeners: IRequestListener = com.netscape.cms.listeners.CertificateIssuedListener [02/May/2018:15:34:51][Thread-22]: CertificateIssuedListener: accept 99990332 [02/May/2018:15:34:51][Thread-22]: RunListeners: IRequestListener = com.netscape.ca.CRLIssuingPoint$RevocationRequestListener [02/May/2018:15:34:51][Thread-22]: RunListeners: IRequestListener = com.netscape.cmscore.ldap.LdapRequestListener [02/May/2018:15:34:51][Thread-22]: LdapRequestListener handling publishing for enrollment request id 99990332 [02/May/2018:15:34:51][Thread-22]: Checking publishing for request 99990332 [02/May/2018:15:34:51][Thread-22]: In PublisherProcessor::publishCert [02/May/2018:15:34:51][Thread-22]: Publishing: can't find publishing rule,exiting routine. [02/May/2018:15:34:51][Thread-22]: PublishProcessor::publishCert : Failed to publish using rule: No rules enabled [02/May/2018:15:34:51][Thread-22]: RunListeners: IRequestListener = com.netscape.cms.listeners.CertificateRevokedListener [02/May/2018:15:34:51][Thread-22]: RunListeners: mRequest = 99990332 [02/May/2018:15:34:51][Thread-22]: updatePublishingStatus mSavePublishingCounter: 2 mSavePublishingStatus: 200 [02/May/2018:15:34:51][Thread-22]: RunListeners: noQueue SingleRequest [02/May/2018:15:34:51][Thread-22]: RequestRepository: setPublishingStatus mBaseDN: ou=ca,ou=requests,o=ipaca status: -1 [02/May/2018:15:34:51][Thread-22]: In LdapBoundConnFactory::getConn() [02/May/2018:15:34:51][Thread-22]: masterConn is connected: true [02/May/2018:15:34:51][Thread-22]: getConn: conn is connected true [02/May/2018:15:34:51][Thread-22]: getConn: mNumConns now 2 [02/May/2018:15:34:51][http-bio-8443-exec-3]: CMSServlet: curDate=Wed May 02 15:34:51 CEST 2018 id=caProfileSubmitSSLClient time=106 [02/May/2018:15:34:51][http-bio-8443-exec-3]: SignedAuditEventFactory: create() message created for eventType=ACCESS_SESSION_TERMINATED [02/May/2018:15:34:51][Thread-22]: returnConn: mNumConns now 3 [02/May/2018:15:34:51][Thread-22]: Number of publishing threads: 0 [02/May/2018:15:34:51][http-bio-8443-exec-5]: SignedAuditEventFactory: create() message created for eventType=ACCESS_SESSION_ESTABLISH_SUCCESS [02/May/2018:15:34:51][http-bio-8443-exec-5]: CMSServlet:service() uri = /ca/ee/ca/profileSubmitSSLClient [02/May/2018:15:34:51][http-bio-8443-exec-5]: CMSServlet::service() param name='requestor_name' value='IPA Installer' [02/May/2018:15:34:51][http-bio-8443-exec-5]: CMSServlet::service() param name='profileId' value='caIPAserviceCert' [02/May/2018:15:34:51][http-bio-8443-exec-5]: CMSServlet::service() param name='cert_request' value='(sensitive)' [02/May/2018:15:34:51][http-bio-8443-exec-5]: CMSServlet::service() param name='cert_request_type' value='pkcs10' [02/May/2018:15:34:51][http-bio-8443-exec-5]: CMSServlet::service() param name='xmlOutput' value='true' [02/May/2018:15:34:51][http-bio-8443-exec-5]: CMSServlet: caProfileSubmitSSLClient start to service. [02/May/2018:15:34:51][http-bio-8443-exec-5]: xmlOutput true [02/May/2018:15:34:51][http-bio-8443-exec-5]: ProfileSubmitServlet: isRenewal false [02/May/2018:15:34:51][http-bio-8443-exec-5]: according to ccMode, authorization for servlet: caProfileSubmit is LDAP based, not XML {1}, use default authz mgr: {2}. [02/May/2018:15:34:51][http-bio-8443-exec-5]: ProfileSubmitServlet: profile: caIPAserviceCert [02/May/2018:15:34:51][http-bio-8443-exec-5]: CAProcessor: Input Parameters: [02/May/2018:15:34:51][http-bio-8443-exec-5]: CAProcessor: - isRenewal: false [02/May/2018:15:34:51][http-bio-8443-exec-5]: CAProcessor: - remoteHost: 10.0.0.1 [02/May/2018:15:34:51][http-bio-8443-exec-5]: CAProcessor: - cert_request_type: pkcs10 [02/May/2018:15:34:51][http-bio-8443-exec-5]: CAProcessor: - profileId: caIPAserviceCert [02/May/2018:15:34:51][http-bio-8443-exec-5]: CAProcessor: - cert_request: (sensitive) [02/May/2018:15:34:51][http-bio-8443-exec-5]: CAProcessor: - requestor_name: IPA Installer [02/May/2018:15:34:51][http-bio-8443-exec-5]: CAProcessor: - remoteAddr: 10.0.0.1 [02/May/2018:15:34:51][http-bio-8443-exec-5]: EnrollmentProcessor: isRenewal false [02/May/2018:15:34:51][http-bio-8443-exec-5]: EnrollmentProcessor: profileId caIPAserviceCert [02/May/2018:15:34:51][http-bio-8443-exec-5]: EnrollmentProcessor: set Inputs into profile Context [02/May/2018:15:34:51][http-bio-8443-exec-5]: EnrollmentProcessor: authenticator raCertAuth found [02/May/2018:15:34:51][http-bio-8443-exec-5]: CertProcessor: No authenticator credentials required [02/May/2018:15:34:51][http-bio-8443-exec-5]: EnrollmentProcessor: set sslClientCertProvider [02/May/2018:15:34:51][http-bio-8443-exec-5]: authenticate: authentication required. [02/May/2018:15:34:51][http-bio-8443-exec-5]: CMSServlet: in auditSubjectID [02/May/2018:15:34:51][http-bio-8443-exec-5]: CMSServlet: auditSubjectID auditContext {sslClientCertProvider=com.netscape.cms.servlet.profile.SSLClientCertProvider@4dad465e, profileContext=com.netscape.cms.profile.common.ProfileContext@8afc18f} [02/May/2018:15:34:51][http-bio-8443-exec-5]: CMSServlet auditSubjectID: subjectID: null [02/May/2018:15:34:51][http-bio-8443-exec-5]: AgentCertAuthentication: start [02/May/2018:15:34:51][http-bio-8443-exec-5]: authenticator instance name is raCertAuth [02/May/2018:15:34:51][http-bio-8443-exec-5]: AgentCertAuthenticator: got provider [02/May/2018:15:34:51][http-bio-8443-exec-5]: AgentCertAuthenticator: retrieving client certificate [02/May/2018:15:34:51][http-bio-8443-exec-5]: AgentCertAuthenticator: got certificates [02/May/2018:15:34:51][http-bio-8443-exec-5]: In LdapBoundConnFactory::getConn() [02/May/2018:15:34:51][http-bio-8443-exec-5]: masterConn is connected: true [02/May/2018:15:34:51][http-bio-8443-exec-5]: getConn: conn is connected true [02/May/2018:15:34:51][http-bio-8443-exec-5]: getConn: mNumConns now 2 [02/May/2018:15:34:51][http-bio-8443-exec-5]: returnConn: mNumConns now 3 [02/May/2018:15:34:51][http-bio-8443-exec-5]: check if ipara is in group Registration Manager Agents [02/May/2018:15:34:51][http-bio-8443-exec-5]: UGSubsystem.isMemberOf() using new lookup code [02/May/2018:15:34:51][http-bio-8443-exec-5]: In LdapBoundConnFactory::getConn() [02/May/2018:15:34:51][http-bio-8443-exec-5]: masterConn is connected: true [02/May/2018:15:34:51][http-bio-8443-exec-5]: getConn: conn is connected true [02/May/2018:15:34:51][http-bio-8443-exec-5]: getConn: mNumConns now 2 [02/May/2018:15:34:51][http-bio-8443-exec-5]: authorization search base: cn=Registration Manager Agents,ou=groups,o=ipaca [02/May/2018:15:34:51][http-bio-8443-exec-5]: authorization search filter: (uniquemember=uid=ipara,ou=people,o=ipaca) [02/May/2018:15:34:51][http-bio-8443-exec-5]: authorization result: true [02/May/2018:15:34:51][http-bio-8443-exec-5]: returnConn: mNumConns now 3 [02/May/2018:15:34:51][http-bio-8443-exec-5]: AgentCertAuthentication: authenticated uid=ipara,ou=people,o=ipaca [02/May/2018:15:34:51][http-bio-8443-exec-5]: SignedAuditEventFactory: create() message created for eventType=AUTH_SUCCESS [02/May/2018:15:34:51][http-bio-8443-exec-5]: CertProcessor authToken not null [02/May/2018:15:34:51][http-bio-8443-exec-5]: CAProcessor: authz using acl: [02/May/2018:15:34:51][http-bio-8443-exec-5]: EnrollProfile: createRequests: begins [02/May/2018:15:34:51][http-bio-8443-exec-5]: Start parsePKCS10(): MIICmj... ... [02/May/2018:15:34:51][http-bio-8443-exec-5]: EnrollProfile: parsePKCS10: signature verification enabled [02/May/2018:15:34:51][http-bio-8443-exec-5]: EnrollProfile: parsePKCS10 setting thread token [02/May/2018:15:34:51][http-bio-8443-exec-5]: EnrollProfile: parsePKCS10 restoring thread token [02/May/2018:15:34:51][http-bio-8443-exec-5]: Repository: in getNextSerialNumber. [02/May/2018:15:34:51][http-bio-8443-exec-5]: Repository: checkRange mLastSerialNo=99990333 [02/May/2018:15:34:51][http-bio-8443-exec-5]: Repository: getNextSerialNumber: returning retSerial 99990333 [02/May/2018:15:34:51][http-bio-8443-exec-5]: EnrollProfile: setDefaultCertInfo: setting issuerDN using exact CA signing cert subjectDN encoding [02/May/2018:15:34:51][http-bio-8443-exec-5]: EnrollProfile: createEnrollmentRequest 99990333 [02/May/2018:15:34:51][http-bio-8443-exec-5]: CertProcessor: request from RA: ipara [02/May/2018:15:34:51][http-bio-8443-exec-5]: CertProcessor: profileSetid=serverCertSet [02/May/2018:15:34:51][http-bio-8443-exec-5]: CertProcessor: request 99990333 [02/May/2018:15:34:51][http-bio-8443-exec-5]: CertProcessor: populating request inputs [02/May/2018:15:34:51][http-bio-8443-exec-5]: CertReqInput: populate: begins [02/May/2018:15:34:51][http-bio-8443-exec-5]: CertReqInput: populate: cert_request_type= REQ_TYPE_PKCS10 [02/May/2018:15:34:51][http-bio-8443-exec-5]: Start parsePKCS10(): MIICmj... ... [02/May/2018:15:34:51][http-bio-8443-exec-5]: EnrollProfile: parsePKCS10: signature verification enabled [02/May/2018:15:34:51][http-bio-8443-exec-5]: EnrollProfile: parsePKCS10 setting thread token [02/May/2018:15:34:51][http-bio-8443-exec-5]: EnrollProfile: parsePKCS10 restoring thread token [02/May/2018:15:34:51][http-bio-8443-exec-5]: EnrollProfile: fillPKCS10: begins [02/May/2018:15:34:51][http-bio-8443-exec-5]: EnrollProfile: fillPKCS10: Found PKCS10 extension [02/May/2018:15:34:51][http-bio-8443-exec-5]: EnrollProfile: fillPKCS10: PKCS10 found extensions [ObjectId: 2.5.29.17 Criticality=false SubjectAlternativeName [ [DNSName: ipa-03.example.com]] ] [02/May/2018:15:34:51][http-bio-8443-exec-5]: EnrollProfile: fillPKCS10: Finish parsePKCS10 - CN=ipa-03.example.com,O=EXAMPLE.COM [02/May/2018:15:34:51][http-bio-8443-exec-5]: EnrollProfile: populate: begins [02/May/2018:15:34:51][http-bio-8443-exec-5]: BasicProfile: populate: policy setid =serverCertSet [02/May/2018:15:34:51][http-bio-8443-exec-5]: EnrollDefault: populate: SubjectNameDefault: start [02/May/2018:15:34:51][http-bio-8443-exec-5]: subjectName=CN=ipa-03.example.com, O=EXAMPLE.COM [02/May/2018:15:34:51][http-bio-8443-exec-5]: EnrollDefault: populate: SubjectNameDefault: end [02/May/2018:15:34:51][http-bio-8443-exec-5]: EnrollDefault: populate: ValidityDefault: start [02/May/2018:15:34:51][http-bio-8443-exec-5]: ValidityDefault: start time: 0 [02/May/2018:15:34:51][http-bio-8443-exec-5]: ValidityDefault: not before: Wed May 02 15:34:51 CEST 2018 [02/May/2018:15:34:51][http-bio-8443-exec-5]: ValidityDefault: range: 731 [02/May/2018:15:34:51][http-bio-8443-exec-5]: ValidityDefault: range unit: day [02/May/2018:15:34:51][http-bio-8443-exec-5]: ValidityDefault: not after: Sat May 02 15:34:51 CEST 2020 [02/May/2018:15:34:51][http-bio-8443-exec-5]: EnrollDefault: populate: ValidityDefault: end [02/May/2018:15:34:51][http-bio-8443-exec-5]: EnrollDefault: populate: UserKeyDefault: start [02/May/2018:15:34:51][http-bio-8443-exec-5]: EnrollDefault: populate: UserKeyDefault: end [02/May/2018:15:34:51][http-bio-8443-exec-5]: EnrollDefault: populate: AuthorityKeyIdentifierExtDefault: start [02/May/2018:15:34:51][http-bio-8443-exec-5]: EnrollDefault: populate: AuthorityKeyIdentifierExtDefault: end [02/May/2018:15:34:51][http-bio-8443-exec-5]: EnrollDefault: populate: AuthInfoAccessExtDefault: start [02/May/2018:15:34:51][http-bio-8443-exec-5]: AuthInfoAccess: createExtension i=0 [02/May/2018:15:34:51][http-bio-8443-exec-5]: EnrollDefault: populate: AuthInfoAccessExtDefault: end [02/May/2018:15:34:51][http-bio-8443-exec-5]: EnrollDefault: populate: KeyUsageExtDefault: start [02/May/2018:15:34:51][http-bio-8443-exec-5]: EnrollDefault: populate: KeyUsageExtDefault: end [02/May/2018:15:34:51][http-bio-8443-exec-5]: EnrollDefault: populate: ExtendedKeyUsageExtDefault: start [02/May/2018:15:34:51][http-bio-8443-exec-5]: EnrollDefault: populate: ExtendedKeyUsageExtDefault: end [02/May/2018:15:34:51][http-bio-8443-exec-5]: EnrollDefault: populate: SigningAlgDefault: start [02/May/2018:15:34:51][http-bio-8443-exec-5]: EnrollDefault: populate: SigningAlgDefault: end [02/May/2018:15:34:51][http-bio-8443-exec-5]: EnrollDefault: populate: CRLDistributionPointsExtDefault: start [02/May/2018:15:34:51][http-bio-8443-exec-5]: EnrollDefault: populate: CRLDistributionPointsExtDefault: end [02/May/2018:15:34:51][http-bio-8443-exec-5]: EnrollDefault: populate: SubjectKeyIdentifierExtDefault: start [02/May/2018:15:34:51][http-bio-8443-exec-5]: EnrollDefault: populate: SubjectKeyIdentifierExtDefault: end [02/May/2018:15:34:51][http-bio-8443-exec-5]: EnrollDefault: populate: UserExtensionDefault: start [02/May/2018:15:34:51][http-bio-8443-exec-5]: UserExtensionDefault: using user supplied ext for 2.5.29.17 [02/May/2018:15:34:51][http-bio-8443-exec-5]: EnrollDefault: populate: UserExtensionDefault: end [02/May/2018:15:34:51][http-bio-8443-exec-5]: CMSServlet: in auditSubjectID [02/May/2018:15:34:51][http-bio-8443-exec-5]: CMSServlet: auditSubjectID auditContext {sslClientCertProvider=com.netscape.cms.servlet.profile.SSLClientCertProvider@4dad465e, userid=ipara, profileContext=com.netscape.cms.profile.common.ProfileContext@8afc18f, authManagerId=raCertAuth} [02/May/2018:15:34:51][http-bio-8443-exec-5]: CMSServlet auditSubjectID: subjectID: ipara [02/May/2018:15:34:51][http-bio-8443-exec-5]: CertProcessor.submitRequest: calling profile submit [02/May/2018:15:34:51][http-bio-8443-exec-5]: EnrollProfile: submit: begins [02/May/2018:15:34:51][http-bio-8443-exec-5]: EnrollProfile: submit: popChallengeRequired =false [02/May/2018:15:34:51][http-bio-8443-exec-5]: In LdapBoundConnFactory::getConn() [02/May/2018:15:34:51][http-bio-8443-exec-5]: masterConn is connected: true [02/May/2018:15:34:51][http-bio-8443-exec-5]: getConn: conn is connected true [02/May/2018:15:34:51][http-bio-8443-exec-5]: getConn: mNumConns now 2 [02/May/2018:15:34:51][http-bio-8443-exec-5]: returnConn: mNumConns now 3 [02/May/2018:15:34:51][http-bio-8443-exec-5]: EnrollProfile: submit: auth token is not null [02/May/2018:15:34:51][http-bio-8443-exec-5]: EnrollProfile.validate: start [02/May/2018:15:34:51][http-bio-8443-exec-5]: EnrollProfile.validate: cert subject name:CN=ipa-03.example.com,O=EXAMPLE.COM [02/May/2018:15:34:51][http-bio-8443-exec-5]: SignedAuditEventFactory: create() message created for eventType=PROFILE_CERT_REQUEST [02/May/2018:15:34:51][http-bio-8443-exec-5]: BasicProfile: validate start on setId=serverCertSet [02/May/2018:15:34:51][http-bio-8443-exec-5]: SubjectNameConstraint: validate start [02/May/2018:15:34:51][http-bio-8443-exec-5]: SubjectNameConstraint: validate start [02/May/2018:15:34:51][http-bio-8443-exec-5]: SubjectNameConstraint: validate cert subject =CN=ipa-03.example.com,O=EXAMPLE.COM [02/May/2018:15:34:51][http-bio-8443-exec-5]: SubjectNameConstraint: validate() - sn500 dname = CN=ipa-03.example.com,O=EXAMPLE.COM [02/May/2018:15:34:51][http-bio-8443-exec-5]: SubjectNameConstraint: validate end [02/May/2018:15:34:51][http-bio-8443-exec-5]: ValidityConstraint: validate start [02/May/2018:15:34:51][http-bio-8443-exec-5]: ValidityConstraint: not before: Wed May 02 15:34:51 CEST 2018 [02/May/2018:15:34:51][http-bio-8443-exec-5]: ValidityConstraint: not after: Sat May 02 15:34:51 CEST 2020 [02/May/2018:15:34:51][http-bio-8443-exec-5]: ValidityConstraint: range: 740 [02/May/2018:15:34:51][http-bio-8443-exec-5]: ValidityConstraint: range unit: day [02/May/2018:15:34:51][http-bio-8443-exec-5]: ValidityConstraint: limit: Mon May 11 15:34:51 CEST 2020 [02/May/2018:15:34:51][http-bio-8443-exec-5]: ValidityConstraint: validate end [02/May/2018:15:34:51][http-bio-8443-exec-5]: KeyConstraint: validate start [02/May/2018:15:34:51][http-bio-8443-exec-5]: KeyConstraint.validate: RSA key contraints passed. [02/May/2018:15:34:51][http-bio-8443-exec-5]: KeyConstraint: validate end [02/May/2018:15:34:51][http-bio-8443-exec-5]: KeyUsageExtConstraint: validate start [02/May/2018:15:34:51][http-bio-8443-exec-5]: KeyUsageExtConstraint: validate end [02/May/2018:15:34:51][http-bio-8443-exec-5]: SigningAlgConstraint: validate start [02/May/2018:15:34:51][http-bio-8443-exec-5]: SigningAlgConstraint: validate end [02/May/2018:15:34:51][http-bio-8443-exec-5]: BasicProfile: change to pending state [02/May/2018:15:34:51][http-bio-8443-exec-5]: BasicProfile: validate end [02/May/2018:15:34:51][http-bio-8443-exec-5]: EnrollProfile.validate: end [02/May/2018:15:34:51][http-bio-8443-exec-5]: CAEnrollProfile: execute request ID 99990333 [02/May/2018:15:34:51][http-bio-8443-exec-5]: issueX509Cert [02/May/2018:15:34:51][http-bio-8443-exec-5]: dnUTF8Encoding false [02/May/2018:15:34:51][http-bio-8443-exec-5]: CertificateRepository: getNextSerialNumber mEnableRandomSerialNumbers=false [02/May/2018:15:34:51][http-bio-8443-exec-5]: Repository: in getNextSerialNumber. [02/May/2018:15:34:51][http-bio-8443-exec-5]: Repository: checkRange mLastSerialNo=2684289236 [02/May/2018:15:34:51][http-bio-8443-exec-5]: Repository: getNextSerialNumber: returning retSerial 2684289236 [02/May/2018:15:34:51][http-bio-8443-exec-5]: CAService: issueX509Cert: setting issuerDN using exact CA signing cert subjectDN encoding [02/May/2018:15:34:51][http-bio-8443-exec-5]: About to ca.sign cert. [02/May/2018:15:34:51][http-bio-8443-exec-5]: sign cert get algorithm [02/May/2018:15:34:51][http-bio-8443-exec-5]: sign cert encoding cert [02/May/2018:15:34:51][http-bio-8443-exec-5]: sign cert encoding algorithm [02/May/2018:15:34:51][http-bio-8443-exec-5]: CA cert signing: signing cert [02/May/2018:15:34:51][http-bio-8443-exec-5]: Getting algorithm context for SHA256withRSA RSASignatureWithSHA256Digest [02/May/2018:15:34:51][http-bio-8443-exec-5]: Signing Certificate [02/May/2018:15:34:51][http-bio-8443-exec-5]: storeX509Cert 2684289236 [02/May/2018:15:34:51][http-bio-8443-exec-5]: In storeX509Cert [02/May/2018:15:34:51][http-bio-8443-exec-5]: In LdapBoundConnFactory::getConn() [02/May/2018:15:34:51][http-bio-8443-exec-5]: masterConn is connected: true [02/May/2018:15:34:51][http-bio-8443-exec-5]: getConn: conn is connected true [02/May/2018:15:34:51][http-bio-8443-exec-5]: getConn: mNumConns now 2 [02/May/2018:15:34:51][http-bio-8443-exec-5]: returnConn: mNumConns now 3 [02/May/2018:15:34:51][http-bio-8443-exec-5]: done storeX509Cert [02/May/2018:15:34:51][http-bio-8443-exec-5]: SignedAuditEventFactory: create() message created for eventType=CERT_REQUEST_PROCESSED [02/May/2018:15:34:51][http-bio-8443-exec-5]: In LdapBoundConnFactory::getConn() [02/May/2018:15:34:51][http-bio-8443-exec-5]: masterConn is connected: true [02/May/2018:15:34:51][http-bio-8443-exec-5]: getConn: conn is connected true [02/May/2018:15:34:51][http-bio-8443-exec-5]: getConn: mNumConns now 2 [02/May/2018:15:34:51][http-bio-8443-exec-5]: returnConn: mNumConns now 3 [02/May/2018:15:34:51][http-bio-8443-exec-5]: ARequestNotifier notify mIsPublishingQueueEnabled=true mMaxThreads=3 [02/May/2018:15:34:51][http-bio-8443-exec-5]: addToNotify extended buffer to 1(40) requests by adding request 99990333 [02/May/2018:15:34:51][http-bio-8443-exec-5]: morePublishingThreads moreThreads: true [02/May/2018:15:34:51][http-bio-8443-exec-5]: Number of publishing threads: 1 [02/May/2018:15:34:51][http-bio-8443-exec-5]: EnrollmentSubmitter: done serving [02/May/2018:15:34:51][Thread-23]: RunListeners:: Queue: 1 noSingleRequest [02/May/2018:15:34:51][Thread-23]: getRequest mRequests=1 mSearchForRequests=false [02/May/2018:15:34:51][Thread-23]: getRequest getting request: 99990333 [02/May/2018:15:34:51][Thread-23]: In LdapBoundConnFactory::getConn() [02/May/2018:15:34:51][Thread-23]: masterConn is connected: true [02/May/2018:15:34:51][Thread-23]: getConn: conn is connected true [02/May/2018:15:34:51][Thread-23]: getConn: mNumConns now 2 [02/May/2018:15:34:51][http-bio-8443-exec-5]: ProfileSubmitServlet xmlOutput: req len = 1 [02/May/2018:15:34:51][Thread-23]: returnConn: mNumConns now 3 [02/May/2018:15:34:51][Thread-23]: getRequest request 99990333 found [02/May/2018:15:34:51][Thread-23]: getRequest mRequests=0 mSearchForRequests=false done [02/May/2018:15:34:51][Thread-23]: RunListeners: IRequestListener = com.netscape.cms.listeners.CertificateIssuedListener [02/May/2018:15:34:51][Thread-23]: CertificateIssuedListener: accept 99990333 [02/May/2018:15:34:51][Thread-23]: RunListeners: IRequestListener = com.netscape.ca.CRLIssuingPoint$RevocationRequestListener [02/May/2018:15:34:51][Thread-23]: RunListeners: IRequestListener = com.netscape.cmscore.ldap.LdapRequestListener [02/May/2018:15:34:51][Thread-23]: LdapRequestListener handling publishing for enrollment request id 99990333 [02/May/2018:15:34:51][Thread-23]: Checking publishing for request 99990333 [02/May/2018:15:34:51][Thread-23]: In PublisherProcessor::publishCert [02/May/2018:15:34:51][Thread-23]: Publishing: can't find publishing rule,exiting routine. [02/May/2018:15:34:51][Thread-23]: PublishProcessor::publishCert : Failed to publish using rule: No rules enabled [02/May/2018:15:34:51][Thread-23]: RunListeners: IRequestListener = com.netscape.cms.listeners.CertificateRevokedListener [02/May/2018:15:34:51][Thread-23]: RunListeners: mRequest = 99990333 [02/May/2018:15:34:51][Thread-23]: updatePublishingStatus mSavePublishingCounter: 3 mSavePublishingStatus: 200 [02/May/2018:15:34:51][Thread-23]: RunListeners: noQueue SingleRequest [02/May/2018:15:34:51][Thread-23]: RequestRepository: setPublishingStatus mBaseDN: ou=ca,ou=requests,o=ipaca status: -1 [02/May/2018:15:34:51][Thread-23]: In LdapBoundConnFactory::getConn() [02/May/2018:15:34:51][Thread-23]: masterConn is connected: true [02/May/2018:15:34:51][Thread-23]: getConn: conn is connected true [02/May/2018:15:34:51][Thread-23]: getConn: mNumConns now 2 [02/May/2018:15:34:51][http-bio-8443-exec-5]: CMSServlet: curDate=Wed May 02 15:34:51 CEST 2018 id=caProfileSubmitSSLClient time=92 [02/May/2018:15:34:51][http-bio-8443-exec-5]: SignedAuditEventFactory: create() message created for eventType=ACCESS_SESSION_TERMINATED [02/May/2018:15:34:51][Thread-23]: returnConn: mNumConns now 3 [02/May/2018:15:34:51][Thread-23]: Number of publishing threads: 0 ### ipa-replica-prepare.1: end ###