### ipa-replica-prepare.2: begin ### [02/May/2018:15:46:03][http-bio-8443-exec-4]: SignedAuditEventFactory: create() message created for eventType=ACCESS_SESSION_ESTABLISH_SUCCESS [02/May/2018:15:46:03][http-bio-8443-exec-4]: according to ccMode, authorization for servlet: caProfileSubmitSSLClient is LDAP based, not XML {1}, use default authz mgr: {2}. [02/May/2018:15:46:03][http-bio-8443-exec-4]: according to ccMode, authorization for servlet: caProfileSubmitSSLClient is LDAP based, not XML {1}, use default authz mgr: {2}. [02/May/2018:15:46:03][http-bio-8443-exec-4]: CMSServlet:service() uri = /ca/ee/ca/profileSubmitSSLClient [02/May/2018:15:46:03][http-bio-8443-exec-4]: CMSServlet::service() param name='requestor_name' value='IPA Installer' [02/May/2018:15:46:03][http-bio-8443-exec-4]: CMSServlet::service() param name='profileId' value='caIPAserviceCert' [02/May/2018:15:46:03][http-bio-8443-exec-4]: CMSServlet::service() param name='cert_request' value='(sensitive)' [02/May/2018:15:46:03][http-bio-8443-exec-4]: CMSServlet::service() param name='cert_request_type' value='pkcs10' [02/May/2018:15:46:03][http-bio-8443-exec-4]: CMSServlet::service() param name='xmlOutput' value='true' [02/May/2018:15:46:03][http-bio-8443-exec-4]: CMSServlet: caProfileSubmitSSLClient start to service. [02/May/2018:15:46:03][http-bio-8443-exec-4]: xmlOutput true [02/May/2018:15:46:03][http-bio-8443-exec-4]: ProfileSubmitServlet: isRenewal false [02/May/2018:15:46:03][http-bio-8443-exec-4]: according to ccMode, authorization for servlet: caProfileSubmit is LDAP based, not XML {1}, use default authz mgr: {2}. [02/May/2018:15:46:03][http-bio-8443-exec-4]: ProfileSubmitServlet: profile: caIPAserviceCert [02/May/2018:15:46:03][http-bio-8443-exec-4]: CAProcessor: Input Parameters: [02/May/2018:15:46:03][http-bio-8443-exec-4]: CAProcessor: - isRenewal: false [02/May/2018:15:46:03][http-bio-8443-exec-4]: CAProcessor: - remoteHost: 10.0.0.1 [02/May/2018:15:46:03][http-bio-8443-exec-4]: CAProcessor: - cert_request_type: pkcs10 [02/May/2018:15:46:03][http-bio-8443-exec-4]: CAProcessor: - profileId: caIPAserviceCert [02/May/2018:15:46:03][http-bio-8443-exec-4]: CAProcessor: - cert_request: (sensitive) [02/May/2018:15:46:03][http-bio-8443-exec-4]: CAProcessor: - requestor_name: IPA Installer [02/May/2018:15:46:03][http-bio-8443-exec-4]: CAProcessor: - remoteAddr: 10.0.0.1 [02/May/2018:15:46:03][http-bio-8443-exec-4]: EnrollmentProcessor: isRenewal false [02/May/2018:15:46:03][http-bio-8443-exec-4]: EnrollmentProcessor: profileId caIPAserviceCert [02/May/2018:15:46:03][http-bio-8443-exec-4]: EnrollmentProcessor: set Inputs into profile Context [02/May/2018:15:46:03][http-bio-8443-exec-4]: EnrollmentProcessor: authenticator raCertAuth found [02/May/2018:15:46:03][http-bio-8443-exec-4]: CertProcessor: No authenticator credentials required [02/May/2018:15:46:03][http-bio-8443-exec-4]: EnrollmentProcessor: set sslClientCertProvider [02/May/2018:15:46:03][http-bio-8443-exec-4]: authenticate: authentication required. [02/May/2018:15:46:03][http-bio-8443-exec-4]: CMSServlet: in auditSubjectID [02/May/2018:15:46:03][http-bio-8443-exec-4]: CMSServlet: auditSubjectID auditContext {sslClientCertProvider=com.netscape.cms.servlet.profile.SSLClientCertProvider@5285c620, profileContext=com.netscape.cms.profile.common.ProfileContext@67fa5b96} [02/May/2018:15:46:03][http-bio-8443-exec-4]: CMSServlet auditSubjectID: subjectID: null [02/May/2018:15:46:03][http-bio-8443-exec-4]: AgentCertAuthentication: start [02/May/2018:15:46:03][http-bio-8443-exec-4]: authenticator instance name is raCertAuth [02/May/2018:15:46:03][http-bio-8443-exec-4]: AgentCertAuthenticator: got provider [02/May/2018:15:46:03][http-bio-8443-exec-4]: AgentCertAuthenticator: retrieving client certificate [02/May/2018:15:46:03][http-bio-8443-exec-4]: AgentCertAuthenticator: got certificates [02/May/2018:15:46:03][http-bio-8443-exec-4]: In LdapBoundConnFactory::getConn() [02/May/2018:15:46:03][http-bio-8443-exec-4]: masterConn is connected: true [02/May/2018:15:46:03][http-bio-8443-exec-4]: getConn: conn is connected true [02/May/2018:15:46:03][http-bio-8443-exec-4]: getConn: mNumConns now 2 [02/May/2018:15:46:03][http-bio-8443-exec-4]: returnConn: mNumConns now 3 [02/May/2018:15:46:03][http-bio-8443-exec-4]: check if ipara is in group Registration Manager Agents [02/May/2018:15:46:03][http-bio-8443-exec-4]: UGSubsystem.isMemberOf() using new lookup code [02/May/2018:15:46:03][http-bio-8443-exec-4]: In LdapBoundConnFactory::getConn() [02/May/2018:15:46:03][http-bio-8443-exec-4]: masterConn is connected: true [02/May/2018:15:46:03][http-bio-8443-exec-4]: getConn: conn is connected true [02/May/2018:15:46:03][http-bio-8443-exec-4]: getConn: mNumConns now 2 [02/May/2018:15:46:03][http-bio-8443-exec-4]: authorization search base: cn=Registration Manager Agents,ou=groups,o=ipaca [02/May/2018:15:46:03][http-bio-8443-exec-4]: authorization search filter: (uniquemember=uid=ipara,ou=people,o=ipaca) [02/May/2018:15:46:03][http-bio-8443-exec-4]: authorization result: true [02/May/2018:15:46:03][http-bio-8443-exec-4]: returnConn: mNumConns now 3 [02/May/2018:15:46:03][http-bio-8443-exec-4]: AgentCertAuthentication: authenticated uid=ipara,ou=people,o=ipaca [02/May/2018:15:46:03][http-bio-8443-exec-4]: SignedAuditEventFactory: create() message created for eventType=AUTH_SUCCESS [02/May/2018:15:46:03][http-bio-8443-exec-4]: CertProcessor authToken not null [02/May/2018:15:46:03][http-bio-8443-exec-4]: CAProcessor: authz using acl: [02/May/2018:15:46:03][http-bio-8443-exec-4]: EnrollProfile: createRequests: begins [02/May/2018:15:46:03][http-bio-8443-exec-4]: Start parsePKCS10(): MIICmj... ... [02/May/2018:15:46:03][http-bio-8443-exec-4]: EnrollProfile: parsePKCS10: signature verification enabled [02/May/2018:15:46:03][http-bio-8443-exec-4]: EnrollProfile: parsePKCS10 setting thread token [02/May/2018:15:46:03][http-bio-8443-exec-4]: EnrollProfile: parsePKCS10 restoring thread token [02/May/2018:15:46:03][http-bio-8443-exec-4]: Repository: in getNextSerialNumber. [02/May/2018:15:46:03][http-bio-8443-exec-4]: Repository: checkRange mLastSerialNo=99990334 [02/May/2018:15:46:03][http-bio-8443-exec-4]: Repository: getNextSerialNumber: returning retSerial 99990334 [02/May/2018:15:46:03][http-bio-8443-exec-4]: EnrollProfile: setDefaultCertInfo: setting issuerDN using exact CA signing cert subjectDN encoding [02/May/2018:15:46:03][http-bio-8443-exec-4]: EnrollProfile: createEnrollmentRequest 99990334 [02/May/2018:15:46:03][http-bio-8443-exec-4]: CertProcessor: request from RA: ipara [02/May/2018:15:46:03][http-bio-8443-exec-4]: CertProcessor: profileSetid=serverCertSet [02/May/2018:15:46:03][http-bio-8443-exec-4]: CertProcessor: request 99990334 [02/May/2018:15:46:03][http-bio-8443-exec-4]: CertProcessor: populating request inputs [02/May/2018:15:46:03][http-bio-8443-exec-4]: CertReqInput: populate: begins [02/May/2018:15:46:03][http-bio-8443-exec-4]: CertReqInput: populate: cert_request_type= REQ_TYPE_PKCS10 [02/May/2018:15:46:03][http-bio-8443-exec-4]: Start parsePKCS10(): MIICmj... ... [02/May/2018:15:46:03][http-bio-8443-exec-4]: EnrollProfile: parsePKCS10: signature verification enabled [02/May/2018:15:46:03][http-bio-8443-exec-4]: EnrollProfile: parsePKCS10 setting thread token [02/May/2018:15:46:03][http-bio-8443-exec-4]: EnrollProfile: parsePKCS10 restoring thread token [02/May/2018:15:46:03][http-bio-8443-exec-4]: EnrollProfile: fillPKCS10: begins [02/May/2018:15:46:03][http-bio-8443-exec-4]: EnrollProfile: fillPKCS10: Found PKCS10 extension [02/May/2018:15:46:03][http-bio-8443-exec-4]: EnrollProfile: fillPKCS10: PKCS10 found extensions [ObjectId: 2.5.29.17 Criticality=false SubjectAlternativeName [ [DNSName: ipa-03.example.com]] ] [02/May/2018:15:46:03][http-bio-8443-exec-4]: EnrollProfile: fillPKCS10: Finish parsePKCS10 - CN=ipa-03.example.com,O=EXAMPLE.COM [02/May/2018:15:46:03][http-bio-8443-exec-4]: EnrollProfile: populate: begins [02/May/2018:15:46:03][http-bio-8443-exec-4]: BasicProfile: populate: policy setid =serverCertSet [02/May/2018:15:46:03][http-bio-8443-exec-4]: EnrollDefault: populate: SubjectNameDefault: start [02/May/2018:15:46:03][http-bio-8443-exec-4]: subjectName=CN=ipa-03.example.com, O=EXAMPLE.COM [02/May/2018:15:46:03][http-bio-8443-exec-4]: EnrollDefault: populate: SubjectNameDefault: end [02/May/2018:15:46:03][http-bio-8443-exec-4]: EnrollDefault: populate: ValidityDefault: start [02/May/2018:15:46:03][http-bio-8443-exec-4]: ValidityDefault: start time: 0 [02/May/2018:15:46:03][http-bio-8443-exec-4]: ValidityDefault: not before: Wed May 02 15:46:03 CEST 2018 [02/May/2018:15:46:03][http-bio-8443-exec-4]: ValidityDefault: range: 731 [02/May/2018:15:46:03][http-bio-8443-exec-4]: ValidityDefault: range unit: day [02/May/2018:15:46:03][http-bio-8443-exec-4]: ValidityDefault: not after: Sat May 02 15:46:03 CEST 2020 [02/May/2018:15:46:03][http-bio-8443-exec-4]: EnrollDefault: populate: ValidityDefault: end [02/May/2018:15:46:03][http-bio-8443-exec-4]: EnrollDefault: populate: UserKeyDefault: start [02/May/2018:15:46:03][http-bio-8443-exec-4]: EnrollDefault: populate: UserKeyDefault: end [02/May/2018:15:46:03][http-bio-8443-exec-4]: EnrollDefault: populate: AuthorityKeyIdentifierExtDefault: start [02/May/2018:15:46:03][http-bio-8443-exec-4]: EnrollDefault: populate: AuthorityKeyIdentifierExtDefault: end [02/May/2018:15:46:03][http-bio-8443-exec-4]: EnrollDefault: populate: AuthInfoAccessExtDefault: start [02/May/2018:15:46:03][http-bio-8443-exec-4]: AuthInfoAccess: createExtension i=0 [02/May/2018:15:46:03][http-bio-8443-exec-4]: EnrollDefault: populate: AuthInfoAccessExtDefault: end [02/May/2018:15:46:03][http-bio-8443-exec-4]: EnrollDefault: populate: KeyUsageExtDefault: start [02/May/2018:15:46:03][http-bio-8443-exec-4]: EnrollDefault: populate: KeyUsageExtDefault: end [02/May/2018:15:46:03][http-bio-8443-exec-4]: EnrollDefault: populate: ExtendedKeyUsageExtDefault: start [02/May/2018:15:46:03][http-bio-8443-exec-4]: EnrollDefault: populate: ExtendedKeyUsageExtDefault: end [02/May/2018:15:46:03][http-bio-8443-exec-4]: EnrollDefault: populate: SigningAlgDefault: start [02/May/2018:15:46:03][http-bio-8443-exec-4]: EnrollDefault: populate: SigningAlgDefault: end [02/May/2018:15:46:03][http-bio-8443-exec-4]: EnrollDefault: populate: CRLDistributionPointsExtDefault: start [02/May/2018:15:46:03][http-bio-8443-exec-4]: EnrollDefault: populate: CRLDistributionPointsExtDefault: end [02/May/2018:15:46:03][http-bio-8443-exec-4]: EnrollDefault: populate: SubjectKeyIdentifierExtDefault: start [02/May/2018:15:46:03][http-bio-8443-exec-4]: EnrollDefault: populate: SubjectKeyIdentifierExtDefault: end [02/May/2018:15:46:03][http-bio-8443-exec-4]: EnrollDefault: populate: UserExtensionDefault: start [02/May/2018:15:46:03][http-bio-8443-exec-4]: UserExtensionDefault: using user supplied ext for 2.5.29.17 [02/May/2018:15:46:03][http-bio-8443-exec-4]: EnrollDefault: populate: UserExtensionDefault: end [02/May/2018:15:46:03][http-bio-8443-exec-4]: CMSServlet: in auditSubjectID [02/May/2018:15:46:03][http-bio-8443-exec-4]: CMSServlet: auditSubjectID auditContext {sslClientCertProvider=com.netscape.cms.servlet.profile.SSLClientCertProvider@5285c620, userid=ipara, profileContext=com.netscape.cms.profile.common.ProfileContext@67fa5b96, authManagerId=raCertAuth} [02/May/2018:15:46:03][http-bio-8443-exec-4]: CMSServlet auditSubjectID: subjectID: ipara [02/May/2018:15:46:03][http-bio-8443-exec-4]: CertProcessor.submitRequest: calling profile submit [02/May/2018:15:46:03][http-bio-8443-exec-4]: EnrollProfile: submit: begins [02/May/2018:15:46:03][http-bio-8443-exec-4]: EnrollProfile: submit: popChallengeRequired =false [02/May/2018:15:46:03][http-bio-8443-exec-4]: In LdapBoundConnFactory::getConn() [02/May/2018:15:46:03][http-bio-8443-exec-4]: masterConn is connected: true [02/May/2018:15:46:03][http-bio-8443-exec-4]: getConn: conn is connected true [02/May/2018:15:46:03][http-bio-8443-exec-4]: getConn: mNumConns now 2 [02/May/2018:15:46:03][http-bio-8443-exec-4]: returnConn: mNumConns now 3 [02/May/2018:15:46:03][http-bio-8443-exec-4]: EnrollProfile: submit: auth token is not null [02/May/2018:15:46:03][http-bio-8443-exec-4]: EnrollProfile.validate: start [02/May/2018:15:46:03][http-bio-8443-exec-4]: EnrollProfile.validate: cert subject name:CN=ipa-03.example.com,O=EXAMPLE.COM [02/May/2018:15:46:03][http-bio-8443-exec-4]: SignedAuditEventFactory: create() message created for eventType=PROFILE_CERT_REQUEST [02/May/2018:15:46:03][http-bio-8443-exec-4]: BasicProfile: validate start on setId=serverCertSet [02/May/2018:15:46:03][http-bio-8443-exec-4]: SubjectNameConstraint: validate start [02/May/2018:15:46:03][http-bio-8443-exec-4]: SubjectNameConstraint: validate start [02/May/2018:15:46:03][http-bio-8443-exec-4]: SubjectNameConstraint: validate cert subject =CN=ipa-03.example.com,O=EXAMPLE.COM [02/May/2018:15:46:03][http-bio-8443-exec-4]: SubjectNameConstraint: validate() - sn500 dname = CN=ipa-03.example.com,O=EXAMPLE.COM [02/May/2018:15:46:03][http-bio-8443-exec-4]: SubjectNameConstraint: validate end [02/May/2018:15:46:03][http-bio-8443-exec-4]: ValidityConstraint: validate start [02/May/2018:15:46:03][http-bio-8443-exec-4]: ValidityConstraint: not before: Wed May 02 15:46:03 CEST 2018 [02/May/2018:15:46:03][http-bio-8443-exec-4]: ValidityConstraint: not after: Sat May 02 15:46:03 CEST 2020 [02/May/2018:15:46:03][http-bio-8443-exec-4]: ValidityConstraint: range: 740 [02/May/2018:15:46:03][http-bio-8443-exec-4]: ValidityConstraint: range unit: day [02/May/2018:15:46:03][http-bio-8443-exec-4]: ValidityConstraint: limit: Mon May 11 15:46:03 CEST 2020 [02/May/2018:15:46:03][http-bio-8443-exec-4]: ValidityConstraint: validate end [02/May/2018:15:46:03][http-bio-8443-exec-4]: KeyConstraint: validate start [02/May/2018:15:46:03][http-bio-8443-exec-4]: KeyConstraint.validate: RSA key contraints passed. [02/May/2018:15:46:03][http-bio-8443-exec-4]: KeyConstraint: validate end [02/May/2018:15:46:03][http-bio-8443-exec-4]: KeyUsageExtConstraint: validate start [02/May/2018:15:46:03][http-bio-8443-exec-4]: KeyUsageExtConstraint: validate end [02/May/2018:15:46:03][http-bio-8443-exec-4]: SigningAlgConstraint: validate start [02/May/2018:15:46:03][http-bio-8443-exec-4]: SigningAlgConstraint: validate end [02/May/2018:15:46:03][http-bio-8443-exec-4]: BasicProfile: change to pending state [02/May/2018:15:46:03][http-bio-8443-exec-4]: BasicProfile: validate end [02/May/2018:15:46:03][http-bio-8443-exec-4]: EnrollProfile.validate: end [02/May/2018:15:46:03][http-bio-8443-exec-4]: CAEnrollProfile: execute request ID 99990334 [02/May/2018:15:46:03][http-bio-8443-exec-4]: issueX509Cert [02/May/2018:15:46:03][http-bio-8443-exec-4]: dnUTF8Encoding false [02/May/2018:15:46:03][http-bio-8443-exec-4]: CertificateRepository: getNextSerialNumber mEnableRandomSerialNumbers=false [02/May/2018:15:46:03][http-bio-8443-exec-4]: Repository: in getNextSerialNumber. [02/May/2018:15:46:03][http-bio-8443-exec-4]: Repository: checkRange mLastSerialNo=2684289237 [02/May/2018:15:46:03][http-bio-8443-exec-4]: Repository: getNextSerialNumber: returning retSerial 2684289237 [02/May/2018:15:46:03][http-bio-8443-exec-4]: CAService: issueX509Cert: setting issuerDN using exact CA signing cert subjectDN encoding [02/May/2018:15:46:03][http-bio-8443-exec-4]: About to ca.sign cert. [02/May/2018:15:46:03][http-bio-8443-exec-4]: sign cert get algorithm [02/May/2018:15:46:03][http-bio-8443-exec-4]: sign cert encoding cert [02/May/2018:15:46:03][http-bio-8443-exec-4]: sign cert encoding algorithm [02/May/2018:15:46:03][http-bio-8443-exec-4]: CA cert signing: signing cert [02/May/2018:15:46:03][http-bio-8443-exec-4]: Getting algorithm context for SHA256withRSA RSASignatureWithSHA256Digest [02/May/2018:15:46:03][http-bio-8443-exec-4]: Signing Certificate [02/May/2018:15:46:03][http-bio-8443-exec-4]: storeX509Cert 2684289237 [02/May/2018:15:46:03][http-bio-8443-exec-4]: In storeX509Cert [02/May/2018:15:46:03][http-bio-8443-exec-4]: In LdapBoundConnFactory::getConn() [02/May/2018:15:46:03][http-bio-8443-exec-4]: masterConn is connected: true [02/May/2018:15:46:03][http-bio-8443-exec-4]: getConn: conn is connected true [02/May/2018:15:46:03][http-bio-8443-exec-4]: getConn: mNumConns now 2 [02/May/2018:15:46:03][http-bio-8443-exec-4]: returnConn: mNumConns now 3 [02/May/2018:15:46:03][http-bio-8443-exec-4]: done storeX509Cert [02/May/2018:15:46:03][http-bio-8443-exec-4]: SignedAuditEventFactory: create() message created for eventType=CERT_REQUEST_PROCESSED [02/May/2018:15:46:03][http-bio-8443-exec-4]: In LdapBoundConnFactory::getConn() [02/May/2018:15:46:03][http-bio-8443-exec-4]: masterConn is connected: true [02/May/2018:15:46:03][http-bio-8443-exec-4]: getConn: conn is connected true [02/May/2018:15:46:03][http-bio-8443-exec-4]: getConn: mNumConns now 2 [02/May/2018:15:46:03][http-bio-8443-exec-4]: returnConn: mNumConns now 3 [02/May/2018:15:46:03][http-bio-8443-exec-4]: ARequestNotifier notify mIsPublishingQueueEnabled=true mMaxThreads=3 [02/May/2018:15:46:03][http-bio-8443-exec-4]: addToNotify extended buffer to 1(40) requests by adding request 99990334 [02/May/2018:15:46:03][http-bio-8443-exec-4]: morePublishingThreads moreThreads: true [02/May/2018:15:46:03][http-bio-8443-exec-4]: Number of publishing threads: 1 [02/May/2018:15:46:03][http-bio-8443-exec-4]: EnrollmentSubmitter: done serving [02/May/2018:15:46:03][Thread-21]: RunListeners:: Queue: 1 noSingleRequest [02/May/2018:15:46:03][Thread-21]: getRequest mRequests=1 mSearchForRequests=false [02/May/2018:15:46:03][Thread-21]: getRequest getting request: 99990334 [02/May/2018:15:46:03][Thread-21]: In LdapBoundConnFactory::getConn() [02/May/2018:15:46:03][Thread-21]: masterConn is connected: true [02/May/2018:15:46:03][Thread-21]: getConn: conn is connected true [02/May/2018:15:46:03][Thread-21]: getConn: mNumConns now 2 [02/May/2018:15:46:03][Thread-21]: returnConn: mNumConns now 3 [02/May/2018:15:46:03][Thread-21]: getRequest request 99990334 found [02/May/2018:15:46:03][Thread-21]: getRequest mRequests=0 mSearchForRequests=false done [02/May/2018:15:46:03][Thread-21]: RunListeners: IRequestListener = com.netscape.cms.listeners.CertificateIssuedListener [02/May/2018:15:46:03][Thread-21]: CertificateIssuedListener: accept 99990334 [02/May/2018:15:46:03][Thread-21]: RunListeners: IRequestListener = com.netscape.ca.CRLIssuingPoint$RevocationRequestListener [02/May/2018:15:46:03][http-bio-8443-exec-4]: ProfileSubmitServlet xmlOutput: req len = 1 [02/May/2018:15:46:03][Thread-21]: RunListeners: IRequestListener = com.netscape.cmscore.ldap.LdapRequestListener [02/May/2018:15:46:03][Thread-21]: LdapRequestListener handling publishing for enrollment request id 99990334 [02/May/2018:15:46:03][Thread-21]: Checking publishing for request 99990334 [02/May/2018:15:46:03][Thread-21]: In PublisherProcessor::publishCert [02/May/2018:15:46:03][Thread-21]: Publishing: can't find publishing rule,exiting routine. [02/May/2018:15:46:03][Thread-21]: PublishProcessor::publishCert : Failed to publish using rule: No rules enabled [02/May/2018:15:46:03][Thread-21]: RunListeners: IRequestListener = com.netscape.cms.listeners.CertificateRevokedListener [02/May/2018:15:46:03][http-bio-8443-exec-4]: CMSServlet: curDate=Wed May 02 15:46:03 CEST 2018 id=caProfileSubmitSSLClient time=138 [02/May/2018:15:46:03][Thread-21]: RunListeners: mRequest = 99990334 [02/May/2018:15:46:03][Thread-21]: updatePublishingStatus requestId: 99990334 [02/May/2018:15:46:03][Thread-21]: RequestRepository: setPublishingStatus mBaseDN: ou=ca,ou=requests,o=ipaca status: 99990334 [02/May/2018:15:46:03][Thread-21]: In LdapBoundConnFactory::getConn() [02/May/2018:15:46:03][Thread-21]: masterConn is connected: true [02/May/2018:15:46:03][Thread-21]: getConn: conn is connected true [02/May/2018:15:46:03][Thread-21]: getConn: mNumConns now 2 [02/May/2018:15:46:03][http-bio-8443-exec-4]: SignedAuditEventFactory: create() message created for eventType=ACCESS_SESSION_TERMINATED [02/May/2018:15:46:03][Thread-21]: returnConn: mNumConns now 3 [02/May/2018:15:46:03][Thread-21]: updatePublishingStatus mSavePublishingCounter: 1 mSavePublishingStatus: 200 [02/May/2018:15:46:03][Thread-21]: RunListeners: noQueue SingleRequest [02/May/2018:15:46:03][Thread-21]: RequestRepository: setPublishingStatus mBaseDN: ou=ca,ou=requests,o=ipaca status: -1 [02/May/2018:15:46:03][Thread-21]: In LdapBoundConnFactory::getConn() [02/May/2018:15:46:03][Thread-21]: masterConn is connected: true [02/May/2018:15:46:03][Thread-21]: getConn: conn is connected true [02/May/2018:15:46:03][Thread-21]: getConn: mNumConns now 2 [02/May/2018:15:46:03][Thread-21]: returnConn: mNumConns now 3 [02/May/2018:15:46:03][Thread-21]: Number of publishing threads: 0 [02/May/2018:15:46:04][http-bio-8443-exec-6]: SignedAuditEventFactory: create() message created for eventType=ACCESS_SESSION_ESTABLISH_SUCCESS [02/May/2018:15:46:04][http-bio-8443-exec-6]: CMSServlet:service() uri = /ca/ee/ca/profileSubmitSSLClient [02/May/2018:15:46:04][http-bio-8443-exec-6]: CMSServlet::service() param name='requestor_name' value='IPA Installer' [02/May/2018:15:46:04][http-bio-8443-exec-6]: CMSServlet::service() param name='profileId' value='caIPAserviceCert' [02/May/2018:15:46:04][http-bio-8443-exec-6]: CMSServlet::service() param name='cert_request' value='(sensitive)' [02/May/2018:15:46:04][http-bio-8443-exec-6]: CMSServlet::service() param name='cert_request_type' value='pkcs10' [02/May/2018:15:46:04][http-bio-8443-exec-6]: CMSServlet::service() param name='xmlOutput' value='true' [02/May/2018:15:46:04][http-bio-8443-exec-6]: CMSServlet: caProfileSubmitSSLClient start to service. [02/May/2018:15:46:04][http-bio-8443-exec-6]: xmlOutput true [02/May/2018:15:46:04][http-bio-8443-exec-6]: ProfileSubmitServlet: isRenewal false [02/May/2018:15:46:04][http-bio-8443-exec-6]: according to ccMode, authorization for servlet: caProfileSubmit is LDAP based, not XML {1}, use default authz mgr: {2}. [02/May/2018:15:46:04][http-bio-8443-exec-6]: ProfileSubmitServlet: profile: caIPAserviceCert [02/May/2018:15:46:04][http-bio-8443-exec-6]: CAProcessor: Input Parameters: [02/May/2018:15:46:04][http-bio-8443-exec-6]: CAProcessor: - isRenewal: false [02/May/2018:15:46:04][http-bio-8443-exec-6]: CAProcessor: - remoteHost: 10.0.0.1 [02/May/2018:15:46:04][http-bio-8443-exec-6]: CAProcessor: - cert_request_type: pkcs10 [02/May/2018:15:46:04][http-bio-8443-exec-6]: CAProcessor: - profileId: caIPAserviceCert [02/May/2018:15:46:04][http-bio-8443-exec-6]: CAProcessor: - cert_request: (sensitive) [02/May/2018:15:46:04][http-bio-8443-exec-6]: CAProcessor: - requestor_name: IPA Installer [02/May/2018:15:46:04][http-bio-8443-exec-6]: CAProcessor: - remoteAddr: 10.0.0.1 [02/May/2018:15:46:04][http-bio-8443-exec-6]: EnrollmentProcessor: isRenewal false [02/May/2018:15:46:04][http-bio-8443-exec-6]: EnrollmentProcessor: profileId caIPAserviceCert [02/May/2018:15:46:04][http-bio-8443-exec-6]: EnrollmentProcessor: set Inputs into profile Context [02/May/2018:15:46:04][http-bio-8443-exec-6]: EnrollmentProcessor: authenticator raCertAuth found [02/May/2018:15:46:04][http-bio-8443-exec-6]: CertProcessor: No authenticator credentials required [02/May/2018:15:46:04][http-bio-8443-exec-6]: EnrollmentProcessor: set sslClientCertProvider [02/May/2018:15:46:04][http-bio-8443-exec-6]: authenticate: authentication required. [02/May/2018:15:46:04][http-bio-8443-exec-6]: CMSServlet: in auditSubjectID [02/May/2018:15:46:04][http-bio-8443-exec-6]: CMSServlet: auditSubjectID auditContext {sslClientCertProvider=com.netscape.cms.servlet.profile.SSLClientCertProvider@40092156, profileContext=com.netscape.cms.profile.common.ProfileContext@50bb733} [02/May/2018:15:46:04][http-bio-8443-exec-6]: CMSServlet auditSubjectID: subjectID: null [02/May/2018:15:46:04][http-bio-8443-exec-6]: AgentCertAuthentication: start [02/May/2018:15:46:04][http-bio-8443-exec-6]: authenticator instance name is raCertAuth [02/May/2018:15:46:04][http-bio-8443-exec-6]: AgentCertAuthenticator: got provider [02/May/2018:15:46:04][http-bio-8443-exec-6]: AgentCertAuthenticator: retrieving client certificate [02/May/2018:15:46:04][http-bio-8443-exec-6]: AgentCertAuthenticator: got certificates [02/May/2018:15:46:04][http-bio-8443-exec-6]: In LdapBoundConnFactory::getConn() [02/May/2018:15:46:04][http-bio-8443-exec-6]: masterConn is connected: true [02/May/2018:15:46:04][http-bio-8443-exec-6]: getConn: conn is connected true [02/May/2018:15:46:04][http-bio-8443-exec-6]: getConn: mNumConns now 2 [02/May/2018:15:46:04][http-bio-8443-exec-6]: returnConn: mNumConns now 3 [02/May/2018:15:46:04][http-bio-8443-exec-6]: check if ipara is in group Registration Manager Agents [02/May/2018:15:46:04][http-bio-8443-exec-6]: UGSubsystem.isMemberOf() using new lookup code [02/May/2018:15:46:04][http-bio-8443-exec-6]: In LdapBoundConnFactory::getConn() [02/May/2018:15:46:04][http-bio-8443-exec-6]: masterConn is connected: true [02/May/2018:15:46:04][http-bio-8443-exec-6]: getConn: conn is connected true [02/May/2018:15:46:04][http-bio-8443-exec-6]: getConn: mNumConns now 2 [02/May/2018:15:46:04][http-bio-8443-exec-6]: authorization search base: cn=Registration Manager Agents,ou=groups,o=ipaca [02/May/2018:15:46:04][http-bio-8443-exec-6]: authorization search filter: (uniquemember=uid=ipara,ou=people,o=ipaca) [02/May/2018:15:46:04][http-bio-8443-exec-6]: authorization result: true [02/May/2018:15:46:04][http-bio-8443-exec-6]: returnConn: mNumConns now 3 [02/May/2018:15:46:04][http-bio-8443-exec-6]: AgentCertAuthentication: authenticated uid=ipara,ou=people,o=ipaca [02/May/2018:15:46:04][http-bio-8443-exec-6]: SignedAuditEventFactory: create() message created for eventType=AUTH_SUCCESS [02/May/2018:15:46:04][http-bio-8443-exec-6]: CertProcessor authToken not null [02/May/2018:15:46:04][http-bio-8443-exec-6]: CAProcessor: authz using acl: [02/May/2018:15:46:04][http-bio-8443-exec-6]: EnrollProfile: createRequests: begins [02/May/2018:15:46:04][http-bio-8443-exec-6]: Start parsePKCS10(): MIICmj... ... [02/May/2018:15:46:04][http-bio-8443-exec-6]: EnrollProfile: parsePKCS10: signature verification enabled [02/May/2018:15:46:04][http-bio-8443-exec-6]: EnrollProfile: parsePKCS10 setting thread token [02/May/2018:15:46:04][http-bio-8443-exec-6]: EnrollProfile: parsePKCS10 restoring thread token [02/May/2018:15:46:04][http-bio-8443-exec-6]: Repository: in getNextSerialNumber. [02/May/2018:15:46:04][http-bio-8443-exec-6]: Repository: checkRange mLastSerialNo=99990335 [02/May/2018:15:46:04][http-bio-8443-exec-6]: Repository: getNextSerialNumber: returning retSerial 99990335 [02/May/2018:15:46:04][http-bio-8443-exec-6]: EnrollProfile: setDefaultCertInfo: setting issuerDN using exact CA signing cert subjectDN encoding [02/May/2018:15:46:04][http-bio-8443-exec-6]: EnrollProfile: createEnrollmentRequest 99990335 [02/May/2018:15:46:04][http-bio-8443-exec-6]: CertProcessor: request from RA: ipara [02/May/2018:15:46:04][http-bio-8443-exec-6]: CertProcessor: profileSetid=serverCertSet [02/May/2018:15:46:04][http-bio-8443-exec-6]: CertProcessor: request 99990335 [02/May/2018:15:46:04][http-bio-8443-exec-6]: CertProcessor: populating request inputs [02/May/2018:15:46:04][http-bio-8443-exec-6]: CertReqInput: populate: begins [02/May/2018:15:46:04][http-bio-8443-exec-6]: CertReqInput: populate: cert_request_type= REQ_TYPE_PKCS10 [02/May/2018:15:46:04][http-bio-8443-exec-6]: Start parsePKCS10(): MIICmj... ... [02/May/2018:15:46:04][http-bio-8443-exec-6]: EnrollProfile: parsePKCS10: signature verification enabled [02/May/2018:15:46:04][http-bio-8443-exec-6]: EnrollProfile: parsePKCS10 setting thread token [02/May/2018:15:46:04][http-bio-8443-exec-6]: EnrollProfile: parsePKCS10 restoring thread token [02/May/2018:15:46:04][http-bio-8443-exec-6]: EnrollProfile: fillPKCS10: begins [02/May/2018:15:46:04][http-bio-8443-exec-6]: EnrollProfile: fillPKCS10: Found PKCS10 extension [02/May/2018:15:46:04][http-bio-8443-exec-6]: EnrollProfile: fillPKCS10: PKCS10 found extensions [ObjectId: 2.5.29.17 Criticality=false SubjectAlternativeName [ [DNSName: ipa-03.example.com]] ] [02/May/2018:15:46:04][http-bio-8443-exec-6]: EnrollProfile: fillPKCS10: Finish parsePKCS10 - CN=ipa-03.example.com,O=EXAMPLE.COM [02/May/2018:15:46:04][http-bio-8443-exec-6]: EnrollProfile: populate: begins [02/May/2018:15:46:04][http-bio-8443-exec-6]: BasicProfile: populate: policy setid =serverCertSet [02/May/2018:15:46:04][http-bio-8443-exec-6]: EnrollDefault: populate: SubjectNameDefault: start [02/May/2018:15:46:04][http-bio-8443-exec-6]: subjectName=CN=ipa-03.example.com, O=EXAMPLE.COM [02/May/2018:15:46:04][http-bio-8443-exec-6]: EnrollDefault: populate: SubjectNameDefault: end [02/May/2018:15:46:04][http-bio-8443-exec-6]: EnrollDefault: populate: ValidityDefault: start [02/May/2018:15:46:04][http-bio-8443-exec-6]: ValidityDefault: start time: 0 [02/May/2018:15:46:04][http-bio-8443-exec-6]: ValidityDefault: not before: Wed May 02 15:46:04 CEST 2018 [02/May/2018:15:46:04][http-bio-8443-exec-6]: ValidityDefault: range: 731 [02/May/2018:15:46:04][http-bio-8443-exec-6]: ValidityDefault: range unit: day [02/May/2018:15:46:04][http-bio-8443-exec-6]: ValidityDefault: not after: Sat May 02 15:46:04 CEST 2020 [02/May/2018:15:46:04][http-bio-8443-exec-6]: EnrollDefault: populate: ValidityDefault: end [02/May/2018:15:46:04][http-bio-8443-exec-6]: EnrollDefault: populate: UserKeyDefault: start [02/May/2018:15:46:04][http-bio-8443-exec-6]: EnrollDefault: populate: UserKeyDefault: end [02/May/2018:15:46:04][http-bio-8443-exec-6]: EnrollDefault: populate: AuthorityKeyIdentifierExtDefault: start [02/May/2018:15:46:04][http-bio-8443-exec-6]: EnrollDefault: populate: AuthorityKeyIdentifierExtDefault: end [02/May/2018:15:46:04][http-bio-8443-exec-6]: EnrollDefault: populate: AuthInfoAccessExtDefault: start [02/May/2018:15:46:04][http-bio-8443-exec-6]: AuthInfoAccess: createExtension i=0 [02/May/2018:15:46:04][http-bio-8443-exec-6]: EnrollDefault: populate: AuthInfoAccessExtDefault: end [02/May/2018:15:46:04][http-bio-8443-exec-6]: EnrollDefault: populate: KeyUsageExtDefault: start [02/May/2018:15:46:04][http-bio-8443-exec-6]: EnrollDefault: populate: KeyUsageExtDefault: end [02/May/2018:15:46:04][http-bio-8443-exec-6]: EnrollDefault: populate: ExtendedKeyUsageExtDefault: start [02/May/2018:15:46:04][http-bio-8443-exec-6]: EnrollDefault: populate: ExtendedKeyUsageExtDefault: end [02/May/2018:15:46:04][http-bio-8443-exec-6]: EnrollDefault: populate: SigningAlgDefault: start [02/May/2018:15:46:04][http-bio-8443-exec-6]: EnrollDefault: populate: SigningAlgDefault: end [02/May/2018:15:46:04][http-bio-8443-exec-6]: EnrollDefault: populate: CRLDistributionPointsExtDefault: start [02/May/2018:15:46:04][http-bio-8443-exec-6]: EnrollDefault: populate: CRLDistributionPointsExtDefault: end [02/May/2018:15:46:04][http-bio-8443-exec-6]: EnrollDefault: populate: SubjectKeyIdentifierExtDefault: start [02/May/2018:15:46:04][http-bio-8443-exec-6]: EnrollDefault: populate: SubjectKeyIdentifierExtDefault: end [02/May/2018:15:46:04][http-bio-8443-exec-6]: EnrollDefault: populate: UserExtensionDefault: start [02/May/2018:15:46:04][http-bio-8443-exec-6]: UserExtensionDefault: using user supplied ext for 2.5.29.17 [02/May/2018:15:46:04][http-bio-8443-exec-6]: EnrollDefault: populate: UserExtensionDefault: end [02/May/2018:15:46:04][http-bio-8443-exec-6]: CMSServlet: in auditSubjectID [02/May/2018:15:46:04][http-bio-8443-exec-6]: CMSServlet: auditSubjectID auditContext {sslClientCertProvider=com.netscape.cms.servlet.profile.SSLClientCertProvider@40092156, userid=ipara, profileContext=com.netscape.cms.profile.common.ProfileContext@50bb733, authManagerId=raCertAuth} [02/May/2018:15:46:04][http-bio-8443-exec-6]: CMSServlet auditSubjectID: subjectID: ipara [02/May/2018:15:46:04][http-bio-8443-exec-6]: CertProcessor.submitRequest: calling profile submit [02/May/2018:15:46:04][http-bio-8443-exec-6]: EnrollProfile: submit: begins [02/May/2018:15:46:04][http-bio-8443-exec-6]: EnrollProfile: submit: popChallengeRequired =false [02/May/2018:15:46:04][http-bio-8443-exec-6]: In LdapBoundConnFactory::getConn() [02/May/2018:15:46:04][http-bio-8443-exec-6]: masterConn is connected: true [02/May/2018:15:46:04][http-bio-8443-exec-6]: getConn: conn is connected true [02/May/2018:15:46:04][http-bio-8443-exec-6]: getConn: mNumConns now 2 [02/May/2018:15:46:04][http-bio-8443-exec-6]: returnConn: mNumConns now 3 [02/May/2018:15:46:04][http-bio-8443-exec-6]: EnrollProfile: submit: auth token is not null [02/May/2018:15:46:04][http-bio-8443-exec-6]: EnrollProfile.validate: start [02/May/2018:15:46:04][http-bio-8443-exec-6]: EnrollProfile.validate: cert subject name:CN=ipa-03.example.com,O=EXAMPLE.COM [02/May/2018:15:46:04][http-bio-8443-exec-6]: SignedAuditEventFactory: create() message created for eventType=PROFILE_CERT_REQUEST [02/May/2018:15:46:04][http-bio-8443-exec-6]: BasicProfile: validate start on setId=serverCertSet [02/May/2018:15:46:04][http-bio-8443-exec-6]: SubjectNameConstraint: validate start [02/May/2018:15:46:04][http-bio-8443-exec-6]: SubjectNameConstraint: validate start [02/May/2018:15:46:04][http-bio-8443-exec-6]: SubjectNameConstraint: validate cert subject =CN=ipa-03.example.com,O=EXAMPLE.COM [02/May/2018:15:46:04][http-bio-8443-exec-6]: SubjectNameConstraint: validate() - sn500 dname = CN=ipa-03.example.com,O=EXAMPLE.COM [02/May/2018:15:46:04][http-bio-8443-exec-6]: SubjectNameConstraint: validate end [02/May/2018:15:46:04][http-bio-8443-exec-6]: ValidityConstraint: validate start [02/May/2018:15:46:04][http-bio-8443-exec-6]: ValidityConstraint: not before: Wed May 02 15:46:04 CEST 2018 [02/May/2018:15:46:04][http-bio-8443-exec-6]: ValidityConstraint: not after: Sat May 02 15:46:04 CEST 2020 [02/May/2018:15:46:04][http-bio-8443-exec-6]: ValidityConstraint: range: 740 [02/May/2018:15:46:04][http-bio-8443-exec-6]: ValidityConstraint: range unit: day [02/May/2018:15:46:04][http-bio-8443-exec-6]: ValidityConstraint: limit: Mon May 11 15:46:04 CEST 2020 [02/May/2018:15:46:04][http-bio-8443-exec-6]: ValidityConstraint: validate end [02/May/2018:15:46:04][http-bio-8443-exec-6]: KeyConstraint: validate start [02/May/2018:15:46:04][http-bio-8443-exec-6]: KeyConstraint.validate: RSA key contraints passed. [02/May/2018:15:46:04][http-bio-8443-exec-6]: KeyConstraint: validate end [02/May/2018:15:46:04][http-bio-8443-exec-6]: KeyUsageExtConstraint: validate start [02/May/2018:15:46:04][http-bio-8443-exec-6]: KeyUsageExtConstraint: validate end [02/May/2018:15:46:04][http-bio-8443-exec-6]: SigningAlgConstraint: validate start [02/May/2018:15:46:04][http-bio-8443-exec-6]: SigningAlgConstraint: validate end [02/May/2018:15:46:04][http-bio-8443-exec-6]: BasicProfile: change to pending state [02/May/2018:15:46:04][http-bio-8443-exec-6]: BasicProfile: validate end [02/May/2018:15:46:04][http-bio-8443-exec-6]: EnrollProfile.validate: end [02/May/2018:15:46:04][http-bio-8443-exec-6]: CAEnrollProfile: execute request ID 99990335 [02/May/2018:15:46:04][http-bio-8443-exec-6]: issueX509Cert [02/May/2018:15:46:04][http-bio-8443-exec-6]: dnUTF8Encoding false [02/May/2018:15:46:04][http-bio-8443-exec-6]: CertificateRepository: getNextSerialNumber mEnableRandomSerialNumbers=false [02/May/2018:15:46:04][http-bio-8443-exec-6]: Repository: in getNextSerialNumber. [02/May/2018:15:46:04][http-bio-8443-exec-6]: Repository: checkRange mLastSerialNo=2684289238 [02/May/2018:15:46:04][http-bio-8443-exec-6]: Repository: getNextSerialNumber: returning retSerial 2684289238 [02/May/2018:15:46:04][http-bio-8443-exec-6]: CAService: issueX509Cert: setting issuerDN using exact CA signing cert subjectDN encoding [02/May/2018:15:46:04][http-bio-8443-exec-6]: About to ca.sign cert. [02/May/2018:15:46:04][http-bio-8443-exec-6]: sign cert get algorithm [02/May/2018:15:46:04][http-bio-8443-exec-6]: sign cert encoding cert [02/May/2018:15:46:04][http-bio-8443-exec-6]: sign cert encoding algorithm [02/May/2018:15:46:04][http-bio-8443-exec-6]: CA cert signing: signing cert [02/May/2018:15:46:04][http-bio-8443-exec-6]: Getting algorithm context for SHA256withRSA RSASignatureWithSHA256Digest [02/May/2018:15:46:04][http-bio-8443-exec-6]: Signing Certificate [02/May/2018:15:46:04][http-bio-8443-exec-6]: storeX509Cert 2684289238 [02/May/2018:15:46:04][http-bio-8443-exec-6]: In storeX509Cert [02/May/2018:15:46:04][http-bio-8443-exec-6]: In LdapBoundConnFactory::getConn() [02/May/2018:15:46:04][http-bio-8443-exec-6]: masterConn is connected: true [02/May/2018:15:46:04][http-bio-8443-exec-6]: getConn: conn is connected true [02/May/2018:15:46:04][http-bio-8443-exec-6]: getConn: mNumConns now 2 [02/May/2018:15:46:04][http-bio-8443-exec-6]: returnConn: mNumConns now 3 [02/May/2018:15:46:04][http-bio-8443-exec-6]: done storeX509Cert [02/May/2018:15:46:04][http-bio-8443-exec-6]: SignedAuditEventFactory: create() message created for eventType=CERT_REQUEST_PROCESSED [02/May/2018:15:46:04][http-bio-8443-exec-6]: In LdapBoundConnFactory::getConn() [02/May/2018:15:46:04][http-bio-8443-exec-6]: masterConn is connected: true [02/May/2018:15:46:04][http-bio-8443-exec-6]: getConn: conn is connected true [02/May/2018:15:46:04][http-bio-8443-exec-6]: getConn: mNumConns now 2 [02/May/2018:15:46:04][http-bio-8443-exec-6]: returnConn: mNumConns now 3 [02/May/2018:15:46:04][http-bio-8443-exec-6]: ARequestNotifier notify mIsPublishingQueueEnabled=true mMaxThreads=3 [02/May/2018:15:46:04][http-bio-8443-exec-6]: addToNotify extended buffer to 1(40) requests by adding request 99990335 [02/May/2018:15:46:04][http-bio-8443-exec-6]: morePublishingThreads moreThreads: true [02/May/2018:15:46:04][http-bio-8443-exec-6]: Number of publishing threads: 1 [02/May/2018:15:46:04][http-bio-8443-exec-6]: EnrollmentSubmitter: done serving [02/May/2018:15:46:04][Thread-22]: RunListeners:: Queue: 1 noSingleRequest [02/May/2018:15:46:04][Thread-22]: getRequest mRequests=1 mSearchForRequests=false [02/May/2018:15:46:04][Thread-22]: getRequest getting request: 99990335 [02/May/2018:15:46:04][Thread-22]: In LdapBoundConnFactory::getConn() [02/May/2018:15:46:04][Thread-22]: masterConn is connected: true [02/May/2018:15:46:04][Thread-22]: getConn: conn is connected true [02/May/2018:15:46:04][Thread-22]: getConn: mNumConns now 2 [02/May/2018:15:46:04][http-bio-8443-exec-6]: ProfileSubmitServlet xmlOutput: req len = 1 [02/May/2018:15:46:04][Thread-22]: returnConn: mNumConns now 3 [02/May/2018:15:46:04][Thread-22]: getRequest request 99990335 found [02/May/2018:15:46:04][Thread-22]: getRequest mRequests=0 mSearchForRequests=false done [02/May/2018:15:46:04][Thread-22]: RunListeners: IRequestListener = com.netscape.cms.listeners.CertificateIssuedListener [02/May/2018:15:46:04][Thread-22]: CertificateIssuedListener: accept 99990335 [02/May/2018:15:46:04][Thread-22]: RunListeners: IRequestListener = com.netscape.ca.CRLIssuingPoint$RevocationRequestListener [02/May/2018:15:46:04][Thread-22]: RunListeners: IRequestListener = com.netscape.cmscore.ldap.LdapRequestListener [02/May/2018:15:46:04][Thread-22]: LdapRequestListener handling publishing for enrollment request id 99990335 [02/May/2018:15:46:04][Thread-22]: Checking publishing for request 99990335 [02/May/2018:15:46:04][http-bio-8443-exec-6]: CMSServlet: curDate=Wed May 02 15:46:04 CEST 2018 id=caProfileSubmitSSLClient time=110 [02/May/2018:15:46:04][Thread-22]: In PublisherProcessor::publishCert [02/May/2018:15:46:04][Thread-22]: Publishing: can't find publishing rule,exiting routine. [02/May/2018:15:46:04][Thread-22]: PublishProcessor::publishCert : Failed to publish using rule: No rules enabled [02/May/2018:15:46:04][Thread-22]: RunListeners: IRequestListener = com.netscape.cms.listeners.CertificateRevokedListener [02/May/2018:15:46:04][Thread-22]: RunListeners: mRequest = 99990335 [02/May/2018:15:46:04][Thread-22]: updatePublishingStatus mSavePublishingCounter: 2 mSavePublishingStatus: 200 [02/May/2018:15:46:04][Thread-22]: RunListeners: noQueue SingleRequest [02/May/2018:15:46:04][Thread-22]: RequestRepository: setPublishingStatus mBaseDN: ou=ca,ou=requests,o=ipaca status: -1 [02/May/2018:15:46:04][Thread-22]: In LdapBoundConnFactory::getConn() [02/May/2018:15:46:04][Thread-22]: masterConn is connected: true [02/May/2018:15:46:04][Thread-22]: getConn: conn is connected true [02/May/2018:15:46:04][Thread-22]: getConn: mNumConns now 2 [02/May/2018:15:46:04][http-bio-8443-exec-7]: SignedAuditEventFactory: create() message created for eventType=ACCESS_SESSION_TERMINATED [02/May/2018:15:46:04][Thread-22]: returnConn: mNumConns now 3 [02/May/2018:15:46:04][Thread-22]: Number of publishing threads: 0 [02/May/2018:15:46:04][http-bio-8443-exec-8]: SignedAuditEventFactory: create() message created for eventType=ACCESS_SESSION_ESTABLISH_SUCCESS [02/May/2018:15:46:04][http-bio-8443-exec-8]: CMSServlet:service() uri = /ca/ee/ca/profileSubmitSSLClient [02/May/2018:15:46:04][http-bio-8443-exec-8]: CMSServlet::service() param name='requestor_name' value='IPA Installer' [02/May/2018:15:46:04][http-bio-8443-exec-8]: CMSServlet::service() param name='profileId' value='caIPAserviceCert' [02/May/2018:15:46:04][http-bio-8443-exec-8]: CMSServlet::service() param name='cert_request' value='(sensitive)' [02/May/2018:15:46:04][http-bio-8443-exec-8]: CMSServlet::service() param name='cert_request_type' value='pkcs10' [02/May/2018:15:46:04][http-bio-8443-exec-8]: CMSServlet::service() param name='xmlOutput' value='true' [02/May/2018:15:46:04][http-bio-8443-exec-8]: CMSServlet: caProfileSubmitSSLClient start to service. [02/May/2018:15:46:04][http-bio-8443-exec-8]: xmlOutput true [02/May/2018:15:46:04][http-bio-8443-exec-8]: ProfileSubmitServlet: isRenewal false [02/May/2018:15:46:04][http-bio-8443-exec-8]: according to ccMode, authorization for servlet: caProfileSubmit is LDAP based, not XML {1}, use default authz mgr: {2}. [02/May/2018:15:46:04][http-bio-8443-exec-8]: ProfileSubmitServlet: profile: caIPAserviceCert [02/May/2018:15:46:04][http-bio-8443-exec-8]: CAProcessor: Input Parameters: [02/May/2018:15:46:04][http-bio-8443-exec-8]: CAProcessor: - isRenewal: false [02/May/2018:15:46:04][http-bio-8443-exec-8]: CAProcessor: - remoteHost: 10.0.0.1 [02/May/2018:15:46:04][http-bio-8443-exec-8]: CAProcessor: - cert_request_type: pkcs10 [02/May/2018:15:46:04][http-bio-8443-exec-8]: CAProcessor: - profileId: caIPAserviceCert [02/May/2018:15:46:04][http-bio-8443-exec-8]: CAProcessor: - cert_request: (sensitive) [02/May/2018:15:46:04][http-bio-8443-exec-8]: CAProcessor: - requestor_name: IPA Installer [02/May/2018:15:46:04][http-bio-8443-exec-8]: CAProcessor: - remoteAddr: 10.0.0.1 [02/May/2018:15:46:04][http-bio-8443-exec-8]: EnrollmentProcessor: isRenewal false [02/May/2018:15:46:04][http-bio-8443-exec-8]: EnrollmentProcessor: profileId caIPAserviceCert [02/May/2018:15:46:04][http-bio-8443-exec-8]: EnrollmentProcessor: set Inputs into profile Context [02/May/2018:15:46:04][http-bio-8443-exec-8]: EnrollmentProcessor: authenticator raCertAuth found [02/May/2018:15:46:04][http-bio-8443-exec-8]: CertProcessor: No authenticator credentials required [02/May/2018:15:46:04][http-bio-8443-exec-8]: EnrollmentProcessor: set sslClientCertProvider [02/May/2018:15:46:04][http-bio-8443-exec-8]: authenticate: authentication required. [02/May/2018:15:46:04][http-bio-8443-exec-8]: CMSServlet: in auditSubjectID [02/May/2018:15:46:04][http-bio-8443-exec-8]: CMSServlet: auditSubjectID auditContext {sslClientCertProvider=com.netscape.cms.servlet.profile.SSLClientCertProvider@7b9f49ef, profileContext=com.netscape.cms.profile.common.ProfileContext@623a915f} [02/May/2018:15:46:04][http-bio-8443-exec-8]: CMSServlet auditSubjectID: subjectID: null [02/May/2018:15:46:04][http-bio-8443-exec-8]: AgentCertAuthentication: start [02/May/2018:15:46:04][http-bio-8443-exec-8]: authenticator instance name is raCertAuth [02/May/2018:15:46:04][http-bio-8443-exec-8]: AgentCertAuthenticator: got provider [02/May/2018:15:46:04][http-bio-8443-exec-8]: AgentCertAuthenticator: retrieving client certificate [02/May/2018:15:46:04][http-bio-8443-exec-8]: AgentCertAuthenticator: got certificates [02/May/2018:15:46:04][http-bio-8443-exec-8]: In LdapBoundConnFactory::getConn() [02/May/2018:15:46:04][http-bio-8443-exec-8]: masterConn is connected: true [02/May/2018:15:46:04][http-bio-8443-exec-8]: getConn: conn is connected true [02/May/2018:15:46:04][http-bio-8443-exec-8]: getConn: mNumConns now 2 [02/May/2018:15:46:04][http-bio-8443-exec-8]: returnConn: mNumConns now 3 [02/May/2018:15:46:04][http-bio-8443-exec-8]: check if ipara is in group Registration Manager Agents [02/May/2018:15:46:04][http-bio-8443-exec-8]: UGSubsystem.isMemberOf() using new lookup code [02/May/2018:15:46:04][http-bio-8443-exec-8]: In LdapBoundConnFactory::getConn() [02/May/2018:15:46:04][http-bio-8443-exec-8]: masterConn is connected: true [02/May/2018:15:46:04][http-bio-8443-exec-8]: getConn: conn is connected true [02/May/2018:15:46:04][http-bio-8443-exec-8]: getConn: mNumConns now 2 [02/May/2018:15:46:04][http-bio-8443-exec-8]: authorization search base: cn=Registration Manager Agents,ou=groups,o=ipaca [02/May/2018:15:46:04][http-bio-8443-exec-8]: authorization search filter: (uniquemember=uid=ipara,ou=people,o=ipaca) [02/May/2018:15:46:04][http-bio-8443-exec-8]: authorization result: true [02/May/2018:15:46:04][http-bio-8443-exec-8]: returnConn: mNumConns now 3 [02/May/2018:15:46:04][http-bio-8443-exec-8]: AgentCertAuthentication: authenticated uid=ipara,ou=people,o=ipaca [02/May/2018:15:46:04][http-bio-8443-exec-8]: SignedAuditEventFactory: create() message created for eventType=AUTH_SUCCESS [02/May/2018:15:46:04][http-bio-8443-exec-8]: CertProcessor authToken not null [02/May/2018:15:46:04][http-bio-8443-exec-8]: CAProcessor: authz using acl: [02/May/2018:15:46:04][http-bio-8443-exec-8]: EnrollProfile: createRequests: begins [02/May/2018:15:46:04][http-bio-8443-exec-8]: Start parsePKCS10(): MIICmj... ... [02/May/2018:15:46:04][http-bio-8443-exec-8]: EnrollProfile: parsePKCS10: signature verification enabled [02/May/2018:15:46:04][http-bio-8443-exec-8]: EnrollProfile: parsePKCS10 setting thread token [02/May/2018:15:46:04][http-bio-8443-exec-8]: EnrollProfile: parsePKCS10 restoring thread token [02/May/2018:15:46:04][http-bio-8443-exec-8]: Repository: in getNextSerialNumber. [02/May/2018:15:46:04][http-bio-8443-exec-8]: Repository: checkRange mLastSerialNo=99990336 [02/May/2018:15:46:04][http-bio-8443-exec-8]: Repository: getNextSerialNumber: returning retSerial 99990336 [02/May/2018:15:46:04][http-bio-8443-exec-8]: EnrollProfile: setDefaultCertInfo: setting issuerDN using exact CA signing cert subjectDN encoding [02/May/2018:15:46:04][http-bio-8443-exec-8]: EnrollProfile: createEnrollmentRequest 99990336 [02/May/2018:15:46:04][http-bio-8443-exec-8]: CertProcessor: request from RA: ipara [02/May/2018:15:46:04][http-bio-8443-exec-8]: CertProcessor: profileSetid=serverCertSet [02/May/2018:15:46:04][http-bio-8443-exec-8]: CertProcessor: request 99990336 [02/May/2018:15:46:04][http-bio-8443-exec-8]: CertProcessor: populating request inputs [02/May/2018:15:46:04][http-bio-8443-exec-8]: CertReqInput: populate: begins [02/May/2018:15:46:04][http-bio-8443-exec-8]: CertReqInput: populate: cert_request_type= REQ_TYPE_PKCS10 [02/May/2018:15:46:04][http-bio-8443-exec-8]: Start parsePKCS10(): MIICmj... ... [02/May/2018:15:46:04][http-bio-8443-exec-8]: EnrollProfile: parsePKCS10: signature verification enabled [02/May/2018:15:46:04][http-bio-8443-exec-8]: EnrollProfile: parsePKCS10 setting thread token [02/May/2018:15:46:04][http-bio-8443-exec-8]: EnrollProfile: parsePKCS10 restoring thread token [02/May/2018:15:46:04][http-bio-8443-exec-8]: EnrollProfile: fillPKCS10: begins [02/May/2018:15:46:04][http-bio-8443-exec-8]: EnrollProfile: fillPKCS10: Found PKCS10 extension [02/May/2018:15:46:04][http-bio-8443-exec-8]: EnrollProfile: fillPKCS10: PKCS10 found extensions [ObjectId: 2.5.29.17 Criticality=false SubjectAlternativeName [ [DNSName: ipa-03.example.com]] ] [02/May/2018:15:46:04][http-bio-8443-exec-8]: EnrollProfile: fillPKCS10: Finish parsePKCS10 - CN=ipa-03.example.com,O=EXAMPLE.COM [02/May/2018:15:46:04][http-bio-8443-exec-8]: EnrollProfile: populate: begins [02/May/2018:15:46:04][http-bio-8443-exec-8]: BasicProfile: populate: policy setid =serverCertSet [02/May/2018:15:46:04][http-bio-8443-exec-8]: EnrollDefault: populate: SubjectNameDefault: start [02/May/2018:15:46:04][http-bio-8443-exec-8]: subjectName=CN=ipa-03.example.com, O=EXAMPLE.COM [02/May/2018:15:46:04][http-bio-8443-exec-8]: EnrollDefault: populate: SubjectNameDefault: end [02/May/2018:15:46:04][http-bio-8443-exec-8]: EnrollDefault: populate: ValidityDefault: start [02/May/2018:15:46:04][http-bio-8443-exec-8]: ValidityDefault: start time: 0 [02/May/2018:15:46:04][http-bio-8443-exec-8]: ValidityDefault: not before: Wed May 02 15:46:04 CEST 2018 [02/May/2018:15:46:04][http-bio-8443-exec-8]: ValidityDefault: range: 731 [02/May/2018:15:46:04][http-bio-8443-exec-8]: ValidityDefault: range unit: day [02/May/2018:15:46:04][http-bio-8443-exec-8]: ValidityDefault: not after: Sat May 02 15:46:04 CEST 2020 [02/May/2018:15:46:04][http-bio-8443-exec-8]: EnrollDefault: populate: ValidityDefault: end [02/May/2018:15:46:04][http-bio-8443-exec-8]: EnrollDefault: populate: UserKeyDefault: start [02/May/2018:15:46:04][http-bio-8443-exec-8]: EnrollDefault: populate: UserKeyDefault: end [02/May/2018:15:46:04][http-bio-8443-exec-8]: EnrollDefault: populate: AuthorityKeyIdentifierExtDefault: start [02/May/2018:15:46:04][http-bio-8443-exec-8]: EnrollDefault: populate: AuthorityKeyIdentifierExtDefault: end [02/May/2018:15:46:04][http-bio-8443-exec-8]: EnrollDefault: populate: AuthInfoAccessExtDefault: start [02/May/2018:15:46:04][http-bio-8443-exec-8]: AuthInfoAccess: createExtension i=0 [02/May/2018:15:46:04][http-bio-8443-exec-8]: EnrollDefault: populate: AuthInfoAccessExtDefault: end [02/May/2018:15:46:04][http-bio-8443-exec-8]: EnrollDefault: populate: KeyUsageExtDefault: start [02/May/2018:15:46:04][http-bio-8443-exec-8]: EnrollDefault: populate: KeyUsageExtDefault: end [02/May/2018:15:46:04][http-bio-8443-exec-8]: EnrollDefault: populate: ExtendedKeyUsageExtDefault: start [02/May/2018:15:46:04][http-bio-8443-exec-8]: EnrollDefault: populate: ExtendedKeyUsageExtDefault: end [02/May/2018:15:46:04][http-bio-8443-exec-8]: EnrollDefault: populate: SigningAlgDefault: start [02/May/2018:15:46:04][http-bio-8443-exec-8]: EnrollDefault: populate: SigningAlgDefault: end [02/May/2018:15:46:04][http-bio-8443-exec-8]: EnrollDefault: populate: CRLDistributionPointsExtDefault: start [02/May/2018:15:46:04][http-bio-8443-exec-8]: EnrollDefault: populate: CRLDistributionPointsExtDefault: end [02/May/2018:15:46:04][http-bio-8443-exec-8]: EnrollDefault: populate: SubjectKeyIdentifierExtDefault: start [02/May/2018:15:46:04][http-bio-8443-exec-8]: EnrollDefault: populate: SubjectKeyIdentifierExtDefault: end [02/May/2018:15:46:04][http-bio-8443-exec-8]: EnrollDefault: populate: UserExtensionDefault: start [02/May/2018:15:46:04][http-bio-8443-exec-8]: UserExtensionDefault: using user supplied ext for 2.5.29.17 [02/May/2018:15:46:04][http-bio-8443-exec-8]: EnrollDefault: populate: UserExtensionDefault: end [02/May/2018:15:46:04][http-bio-8443-exec-8]: CMSServlet: in auditSubjectID [02/May/2018:15:46:04][http-bio-8443-exec-8]: CMSServlet: auditSubjectID auditContext {sslClientCertProvider=com.netscape.cms.servlet.profile.SSLClientCertProvider@7b9f49ef, userid=ipara, profileContext=com.netscape.cms.profile.common.ProfileContext@623a915f, authManagerId=raCertAuth} [02/May/2018:15:46:04][http-bio-8443-exec-8]: CMSServlet auditSubjectID: subjectID: ipara [02/May/2018:15:46:04][http-bio-8443-exec-8]: CertProcessor.submitRequest: calling profile submit [02/May/2018:15:46:04][http-bio-8443-exec-8]: EnrollProfile: submit: begins [02/May/2018:15:46:04][http-bio-8443-exec-8]: EnrollProfile: submit: popChallengeRequired =false [02/May/2018:15:46:04][http-bio-8443-exec-8]: In LdapBoundConnFactory::getConn() [02/May/2018:15:46:04][http-bio-8443-exec-8]: masterConn is connected: true [02/May/2018:15:46:04][http-bio-8443-exec-8]: getConn: conn is connected true [02/May/2018:15:46:04][http-bio-8443-exec-8]: getConn: mNumConns now 2 [02/May/2018:15:46:04][http-bio-8443-exec-8]: returnConn: mNumConns now 3 [02/May/2018:15:46:04][http-bio-8443-exec-8]: EnrollProfile: submit: auth token is not null [02/May/2018:15:46:04][http-bio-8443-exec-8]: EnrollProfile.validate: start [02/May/2018:15:46:04][http-bio-8443-exec-8]: EnrollProfile.validate: cert subject name:CN=ipa-03.example.com,O=EXAMPLE.COM [02/May/2018:15:46:04][http-bio-8443-exec-8]: SignedAuditEventFactory: create() message created for eventType=PROFILE_CERT_REQUEST [02/May/2018:15:46:04][http-bio-8443-exec-8]: BasicProfile: validate start on setId=serverCertSet [02/May/2018:15:46:04][http-bio-8443-exec-8]: SubjectNameConstraint: validate start [02/May/2018:15:46:04][http-bio-8443-exec-8]: SubjectNameConstraint: validate start [02/May/2018:15:46:04][http-bio-8443-exec-8]: SubjectNameConstraint: validate cert subject =CN=ipa-03.example.com,O=EXAMPLE.COM [02/May/2018:15:46:04][http-bio-8443-exec-8]: SubjectNameConstraint: validate() - sn500 dname = CN=ipa-03.example.com,O=EXAMPLE.COM [02/May/2018:15:46:04][http-bio-8443-exec-8]: SubjectNameConstraint: validate end [02/May/2018:15:46:04][http-bio-8443-exec-8]: ValidityConstraint: validate start [02/May/2018:15:46:04][http-bio-8443-exec-8]: ValidityConstraint: not before: Wed May 02 15:46:04 CEST 2018 [02/May/2018:15:46:04][http-bio-8443-exec-8]: ValidityConstraint: not after: Sat May 02 15:46:04 CEST 2020 [02/May/2018:15:46:04][http-bio-8443-exec-8]: ValidityConstraint: range: 740 [02/May/2018:15:46:04][http-bio-8443-exec-8]: ValidityConstraint: range unit: day [02/May/2018:15:46:04][http-bio-8443-exec-8]: ValidityConstraint: limit: Mon May 11 15:46:04 CEST 2020 [02/May/2018:15:46:04][http-bio-8443-exec-8]: ValidityConstraint: validate end [02/May/2018:15:46:04][http-bio-8443-exec-8]: KeyConstraint: validate start [02/May/2018:15:46:04][http-bio-8443-exec-8]: KeyConstraint.validate: RSA key contraints passed. [02/May/2018:15:46:04][http-bio-8443-exec-8]: KeyConstraint: validate end [02/May/2018:15:46:04][http-bio-8443-exec-8]: KeyUsageExtConstraint: validate start [02/May/2018:15:46:04][http-bio-8443-exec-8]: KeyUsageExtConstraint: validate end [02/May/2018:15:46:04][http-bio-8443-exec-8]: SigningAlgConstraint: validate start [02/May/2018:15:46:04][http-bio-8443-exec-8]: SigningAlgConstraint: validate end [02/May/2018:15:46:04][http-bio-8443-exec-8]: BasicProfile: change to pending state [02/May/2018:15:46:04][http-bio-8443-exec-8]: BasicProfile: validate end [02/May/2018:15:46:04][http-bio-8443-exec-8]: EnrollProfile.validate: end [02/May/2018:15:46:04][http-bio-8443-exec-8]: CAEnrollProfile: execute request ID 99990336 [02/May/2018:15:46:04][http-bio-8443-exec-8]: issueX509Cert [02/May/2018:15:46:04][http-bio-8443-exec-8]: dnUTF8Encoding false [02/May/2018:15:46:04][http-bio-8443-exec-8]: CertificateRepository: getNextSerialNumber mEnableRandomSerialNumbers=false [02/May/2018:15:46:04][http-bio-8443-exec-8]: Repository: in getNextSerialNumber. [02/May/2018:15:46:04][http-bio-8443-exec-8]: Repository: checkRange mLastSerialNo=2684289239 [02/May/2018:15:46:04][http-bio-8443-exec-8]: Repository: getNextSerialNumber: returning retSerial 2684289239 [02/May/2018:15:46:04][http-bio-8443-exec-8]: CAService: issueX509Cert: setting issuerDN using exact CA signing cert subjectDN encoding [02/May/2018:15:46:04][http-bio-8443-exec-8]: About to ca.sign cert. [02/May/2018:15:46:04][http-bio-8443-exec-8]: sign cert get algorithm [02/May/2018:15:46:04][http-bio-8443-exec-8]: sign cert encoding cert [02/May/2018:15:46:04][http-bio-8443-exec-8]: sign cert encoding algorithm [02/May/2018:15:46:04][http-bio-8443-exec-8]: CA cert signing: signing cert [02/May/2018:15:46:04][http-bio-8443-exec-8]: Getting algorithm context for SHA256withRSA RSASignatureWithSHA256Digest [02/May/2018:15:46:04][http-bio-8443-exec-8]: Signing Certificate [02/May/2018:15:46:04][http-bio-8443-exec-8]: storeX509Cert 2684289239 [02/May/2018:15:46:04][http-bio-8443-exec-8]: In storeX509Cert [02/May/2018:15:46:04][http-bio-8443-exec-8]: In LdapBoundConnFactory::getConn() [02/May/2018:15:46:04][http-bio-8443-exec-8]: masterConn is connected: true [02/May/2018:15:46:04][http-bio-8443-exec-8]: getConn: conn is connected true [02/May/2018:15:46:04][http-bio-8443-exec-8]: getConn: mNumConns now 2 [02/May/2018:15:46:04][http-bio-8443-exec-8]: returnConn: mNumConns now 3 [02/May/2018:15:46:04][http-bio-8443-exec-8]: done storeX509Cert [02/May/2018:15:46:04][http-bio-8443-exec-8]: SignedAuditEventFactory: create() message created for eventType=CERT_REQUEST_PROCESSED [02/May/2018:15:46:04][http-bio-8443-exec-8]: In LdapBoundConnFactory::getConn() [02/May/2018:15:46:04][http-bio-8443-exec-8]: masterConn is connected: true [02/May/2018:15:46:04][http-bio-8443-exec-8]: getConn: conn is connected true [02/May/2018:15:46:04][http-bio-8443-exec-8]: getConn: mNumConns now 2 [02/May/2018:15:46:04][http-bio-8443-exec-8]: returnConn: mNumConns now 3 [02/May/2018:15:46:04][http-bio-8443-exec-8]: ARequestNotifier notify mIsPublishingQueueEnabled=true mMaxThreads=3 [02/May/2018:15:46:04][http-bio-8443-exec-8]: addToNotify extended buffer to 1(40) requests by adding request 99990336 [02/May/2018:15:46:04][http-bio-8443-exec-8]: morePublishingThreads moreThreads: true [02/May/2018:15:46:04][http-bio-8443-exec-8]: Number of publishing threads: 1 [02/May/2018:15:46:04][http-bio-8443-exec-8]: EnrollmentSubmitter: done serving [02/May/2018:15:46:04][Thread-23]: RunListeners:: Queue: 1 noSingleRequest [02/May/2018:15:46:04][Thread-23]: getRequest mRequests=1 mSearchForRequests=false [02/May/2018:15:46:04][Thread-23]: getRequest getting request: 99990336 [02/May/2018:15:46:04][Thread-23]: In LdapBoundConnFactory::getConn() [02/May/2018:15:46:04][Thread-23]: masterConn is connected: true [02/May/2018:15:46:04][Thread-23]: getConn: conn is connected true [02/May/2018:15:46:04][Thread-23]: getConn: mNumConns now 2 [02/May/2018:15:46:04][Thread-23]: returnConn: mNumConns now 3 [02/May/2018:15:46:04][Thread-23]: getRequest request 99990336 found [02/May/2018:15:46:04][Thread-23]: getRequest mRequests=0 mSearchForRequests=false done [02/May/2018:15:46:04][Thread-23]: RunListeners: IRequestListener = com.netscape.cms.listeners.CertificateIssuedListener [02/May/2018:15:46:04][Thread-23]: CertificateIssuedListener: accept 99990336 [02/May/2018:15:46:04][Thread-23]: RunListeners: IRequestListener = com.netscape.ca.CRLIssuingPoint$RevocationRequestListener [02/May/2018:15:46:04][Thread-23]: RunListeners: IRequestListener = com.netscape.cmscore.ldap.LdapRequestListener [02/May/2018:15:46:04][Thread-23]: LdapRequestListener handling publishing for enrollment request id 99990336 [02/May/2018:15:46:04][Thread-23]: Checking publishing for request 99990336 [02/May/2018:15:46:04][http-bio-8443-exec-8]: ProfileSubmitServlet xmlOutput: req len = 1 [02/May/2018:15:46:04][Thread-23]: In PublisherProcessor::publishCert [02/May/2018:15:46:04][Thread-23]: Publishing: can't find publishing rule,exiting routine. [02/May/2018:15:46:04][Thread-23]: PublishProcessor::publishCert : Failed to publish using rule: No rules enabled [02/May/2018:15:46:04][Thread-23]: RunListeners: IRequestListener = com.netscape.cms.listeners.CertificateRevokedListener [02/May/2018:15:46:04][Thread-23]: RunListeners: mRequest = 99990336 [02/May/2018:15:46:04][Thread-23]: updatePublishingStatus mSavePublishingCounter: 3 mSavePublishingStatus: 200 [02/May/2018:15:46:04][Thread-23]: RunListeners: noQueue SingleRequest [02/May/2018:15:46:04][Thread-23]: RequestRepository: setPublishingStatus mBaseDN: ou=ca,ou=requests,o=ipaca status: -1 [02/May/2018:15:46:04][Thread-23]: In LdapBoundConnFactory::getConn() [02/May/2018:15:46:04][Thread-23]: masterConn is connected: true [02/May/2018:15:46:04][Thread-23]: getConn: conn is connected true [02/May/2018:15:46:04][Thread-23]: getConn: mNumConns now 2 [02/May/2018:15:46:04][http-bio-8443-exec-8]: CMSServlet: curDate=Wed May 02 15:46:04 CEST 2018 id=caProfileSubmitSSLClient time=100 [02/May/2018:15:46:04][http-bio-8443-exec-8]: SignedAuditEventFactory: create() message created for eventType=ACCESS_SESSION_TERMINATED [02/May/2018:15:46:04][Thread-23]: returnConn: mNumConns now 3 [02/May/2018:15:46:04][Thread-23]: Number of publishing threads: 0 ### ipa-replica-prepare.2: end ###