4:33 p.m.
additional data from the pki-ra/error log (with some cruft snipped out):
[Tue Sep 28 16:23:31 2010] [notice] SELinux policy enabled; httpd
running as context unconfined_u:system_r:pki_ra_t:s0
[Tue Sep 28 16:23:31 2010] [info] Initializing SSL Session Cache of size
10000. SSL2 timeout = 100, SSL3/TLS timeout = 86400.
[Tue Sep 28 16:23:31 2010] [info] Init: Initializing (virtual) servers
for SSL
[Tue Sep 28 16:23:31 2010] [info] Configuring server for SSL protocol
[Tue Sep 28 16:23:31 2010] [error] Unknown cipher ecdhe_ecdsa_aes_256_sha
[Tue Sep 28 16:23:31 2010] [info] Using nickname Server-Cert cert-pki-ra.
[Tue Sep 28 16:23:31 2010] [info] Configuring server for SSL protocol
[Tue Sep 28 16:23:31 2010] [error] Unknown cipher ecdhe_ecdsa_aes_256_sha
[Tue Sep 28 16:23:31 2010] [info] Using nickname Server-Cert cert-pki-ra.
[Tue Sep 28 16:23:31 2010] [info] Server: Apache/2.2.14, Interface:
mod_nss/2.2.14, Library: NSS/3.12.6.2
[Tue Sep 28 16:23:31 2010] [info] Shutting down SSL Session ID Cache
[Tue Sep 28 16:23:32 2010] [info] Initializing SSL Session Cache of size
10000. SSL2 timeout = 100, SSL3/TLS timeout = 86400.
[Tue Sep 28 16:23:32 2010] [info] Server: Apache/2.2.14, Interface:
mod_nss/2.2.14, Library: NSS/3.12.6.2
[Tue Sep 28 16:23:32 2010] [warn] pid file
/var/lib/pki-ra/run/pki-ra.pid overwritten -- Unclean shutdown of
previous Apache run?
[Tue Sep 28 16:23:32 2010] [notice] Apache/2.2.15 (Unix) mod_nss/2.2.14
NSS/3.12.6.2 mod_perl/2.0.4 Perl/v5.10.0 configured -- resuming normal
operations
[Tue Sep 28 16:23:32 2010] [info] Server built: Apr 10 2010 15:21:49
[Tue Sep 28 16:23:32 2010] [debug] worker.c(1757): AcceptMutex: sysvsem
(default: sysvsem)
[Tue Sep 28 16:23:32 2010] [info] Configuring server for SSL protocol
[Tue Sep 28 16:23:32 2010] [error] Unknown cipher ecdhe_ecdsa_aes_256_sha
[Tue Sep 28 16:23:32 2010] [info] Using nickname Server-Cert cert-pki-ra.
[Tue Sep 28 16:23:32 2010] [info] Configuring server for SSL protocol
[Tue Sep 28 16:23:32 2010] [error] Unknown cipher ecdhe_ecdsa_aes_256_sha
[Tue Sep 28 16:23:32 2010] [info] Using nickname Server-Cert cert-pki-ra.
[Tue Sep 28 16:23:50 2010] [info] SSL input filter read failed.
[Tue Sep 28 16:23:50 2010] [error] SSL Library Error: -12271 SSL client
cannot verify your certificate
GET /ca/admin/ca/getStatus HTTP/1.0
port: 9445
addr='my.host.name'
family='10'
PR_Write wrote 39 bytes from bigBuf
bytes: [GET /ca/admin/ca/getStatus HTTP/1.0
]
do_writes shutting down send socket
do_writes exiting with (failure = 0)
connection 1 read 249 bytes (249 total).
these bytes read:
connection 1 read 249 bytes total. -----------------------------
GET /ca/admin/ca/getStatus HTTP/1.0
port: 9445
addr='my.host.name'
family='10'
PR_Write wrote 39 bytes from bigBuf
bytes: [GET /ca/admin/ca/getStatus HTTP/1.0
]
do_writes shutting down send socket
do_writes exiting with (failure = 0)
connection 1 read 249 bytes (249 total).
these bytes read:
connection 1 read 249 bytes total. -----------------------------
GET /ca/admin/ca/getCertChain HTTP/1.0
port: 9445
addr='my.host.name'
family='10'
PR_Write wrote 42 bytes from bigBuf
bytes: [GET /ca/admin/ca/getCertChain HTTP/1.0
]
do_writes shutting down send socket
do_writes exiting with (failure = 0)
connection 1 read 1637 bytes (1637 total).
these bytes read:
connection 1 read 1637 bytes total. -----------------------------
certutil: function failed: security library: bad database.
GET /ca/admin/ca/getDomainXML HTTP/1.0
port: 9445
addr='my.host.name'
family='10'
-- SSL3: Server Certificate Validated.
PR_Write wrote 42 bytes from bigBuf
bytes: [GET /ca/admin/ca/getDomainXML HTTP/1.0
]
do_writes shutting down send socket
do_writes exiting with (failure = 0)
connection 1 read 2147 bytes (2147 total).
these bytes read:
connection 1 read 2147 bytes total. -----------------------------
[Tue Sep 28 16:24:29 2010] -e: Use of uninitialized value $host in
string eq at /var/lib/pki-ra/lib/perl/PKI/RA/SubsystemTypePanel.pm line 122.
[Tue Sep 28 16:24:33 2010] -e: Use of uninitialized value $host in
string eq at /var/lib/pki-ra/lib/perl/PKI/RA/CAInfoPanel.pm line 186.
GET /ca/ee/ca/getCertChain HTTP/1.0
port: 9444
addr='my.host.name'
family='10'
-- SSL3: Server Certificate Validated.
PR_Write wrote 39 bytes from bigBuf
bytes: [GET /ca/ee/ca/getCertChain HTTP/1.0
]
do_writes shutting down send socket
do_writes exiting with (failure = 0)
connection 1 read 1637 bytes (1637 total).
these bytes read:
connection 1 read 1637 bytes total. -----------------------------
certutil: could not find certificate named "Trusted CA c2cert0":
security library: bad database.
[Tue Sep 28 16:24:41 2010] -e: Use of uninitialized value $pwd in string
ne at /var/lib/pki-ra/lib/perl/PKI/RA/ModulePanel.pm line 148.
[Tue Sep 28 16:24:41 2010] -e: Use of uninitialized value $pwd in string
ne at /var/lib/pki-ra/lib/perl/PKI/RA/ModulePanel.pm line 148.
[Tue Sep 28 16:24:41 2010] -e: Use of uninitialized value $file in
concatenation (.) or string at
/var/lib/pki-ra/lib/perl/PKI/RA/ModulePanel.pm line 214.
[Tue Sep 28 16:24:41 2010] -e: Use of uninitialized value $name in
concatenation (.) or string at
/var/lib/pki-ra/lib/perl/PKI/RA/ModulePanel.pm line 231.
[Tue Sep 28 16:24:41 2010] -e: Use of uninitialized value $file in
concatenation (.) or string at
/var/lib/pki-ra/lib/perl/PKI/RA/ModulePanel.pm line 214.
[Tue Sep 28 16:24:41 2010] -e: Use of uninitialized value $name in
concatenation (.) or string at
/var/lib/pki-ra/lib/perl/PKI/RA/ModulePanel.pm line 231.
[Tue Sep 28 16:24:47 2010] -e: Use of uninitialized value $done in
concatenation (.) or string at
/var/lib/pki-ra/lib/perl/PKI/RA/SizePanel.pm line 172.
[Tue Sep 28 16:24:47 2010] -e: Use of uninitialized value $done in
string eq at /var/lib/pki-ra/lib/perl/PKI/RA/SizePanel.pm line 173.
[Tue Sep 28 16:24:53 2010] -e: Use of uninitialized value $genKeyPair in
concatenation (.) or string at
/var/lib/pki-ra/lib/perl/PKI/RA/SizePanel.pm line 80.
[Tue Sep 28 16:24:53 2010] -e: Use of uninitialized value $done in
string eq at /var/lib/pki-ra/lib/perl/PKI/RA/SizePanel.pm line 81.
[Tue Sep 28 16:24:54 2010] -e: Use of uninitialized value $host in
string eq at /var/lib/pki-ra/lib/perl/PKI/RA/NamePanel.pm line 480.
rm: cannot remove `/var/lib/pki-ra/conf/sslserver_cert.txt': No such
file or directory
256+0 records in
256+0 records out
256 bytes (256 B) copied, 0.00106719 s, 240 kB/s
Generating key. This may take a few moments...
POST /ca/ee/ca/profileSubmit HTTP/1.0
Content-Length: 1171
Content-Type: application/x-www-form-urlencoded
profileId=caInternalAuthServerCert&cert_request_type=pkcs10&requestor_name=RA-my.host.name-12889&cert_request=bigsnip&xmlOutput=true&sessionID=9216515598699103255&auth_hostname=my.host.name&auth_port=9444port:
9444
addr='sis-jpk-vm22.stl.gtri.gatech.edu'
family='10'
-- SSL3: Server Certificate Validated.
PR_Write wrote 1283 bytes from bigBuf
bytes: [POST /ca/ee/ca/profileSubmit HTTP/1.0
Content-Length: 1171
Content-Type: application/x-www-form-urlencoded
profileId=caInternalAuthServerCert&cert_request_type=pkcs10&requestor_name=RA-sis-jpk-vm22.stl.gtri.gatech.edu-12889&cert_request=bigsnip&xmlOutput=true&sessionID=9216515598699103255&auth_hostname=my.host.name&auth_port=9444]
do_writes shutting down send socket
do_writes exiting with (failure = 0)
connection 1 read 272 bytes (272 total).
these bytes read:
connection 1 read 272 bytes total. -----------------------------
[Tue Sep 28 16:25:12 2010] -e: Use of uninitialized value $host in
string eq at /var/lib/pki-ra/lib/perl/PKI/RA/NamePanel.pm line 480.
--
James "Jim" Kinney
(404) 407-7967
GTRI