<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
btw, I'm not suggesting that you need either or both config params.<br>
<br>
three sets of config you can try:<br>
1. don't specify either ca.scep.nickname or ca.scep.tokenname<br>
(I think by default it takes the ca signing cert, if that's what you
intend to use anyway)<br>
<br>
2. specify nickname only ca.scep.nickname (without the token)<br>
ca.scep.nickname=<span
style="font-size:10.0pt;font-family:"Courier New""
lang="EN-US">caSigningCert cert-pki-testca1</span><br>
(I think by default, if the nickname you specified matches that of
the ca, it will find the token for you)<br>
<br>
3. specify both nickname and token:<br>
ca.scep.nickname=<span
style="font-size:10.0pt;font-family:"Courier New""
lang="EN-US">caSigningCert cert-pki-testca1</span><br>
ca.scep.tokenname=osstest<br>
(last resort, because when you do this, it thinks it's not using the
ca signing cert.. )<br>
<br>
Let us know.<br>
Christina<br>
<br>
<div class="moz-cite-prefix">On 10/01/2014 05:00 PM, Christina Fu
wrote:<br>
</div>
<blockquote cite="mid:542C9587.6080107@redhat.com" type="cite">
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
What's your scep config values, specifically:<br>
ca.scep.nickname<br>
ca.scep.tokenname<br>
<br>
Christina<br>
<br>
<div class="moz-cite-prefix">On 09/29/2014 04:55 AM, Elliott
William C OSS sIT wrote:<br>
</div>
<blockquote
cite="mid:85C87A9995875247B2DD471950E0AE4D1B844DC5@M0182.s-mxs.net"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=ISO-8859-1">
<meta name="Generator" content="Microsoft Word 14 (filtered
medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Arial","sans-serif";
color:windowtext;
font-weight:normal;
font-style:normal;
text-decoration:none none;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 2.0cm 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"">Hello,<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New""><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US">We are currently trying to get a
new RHEL6/Dogtag 9 with Safenet HSMs setup for SCEP
enrollment. But, no matter whether we try the older HSMs(
LunaSA 4) or the newer (LunaSA 5) we cannot complete a
successful SCEP request. The following exception occurs in
the debug log:<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US">[29/Sep/2014:13:41:17][http-9180-1]:
operation=PKIOperation<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US">[29/Sep/2014:13:41:17][http-9180-1]:
message=MIIHDQYJKoZIhvcNAQcCoIIG/jCCBvoCAQExDjAMBggqhkiG9w0CBQUAMIIDZQYJ<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US">KoZIhvcNAQcBoIIDVgSCA1IwggNOBgkqhkiG9w0BBwOgggM/MIIDOwIBADGCAW4w<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US">ggFqAgEAMFIwTTEVMBMGA1UEChMMRWJMYW4gRG9tYWluMRQwEgYDVQQLEwtwa2kt<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US">dGVzdGNhMTEeMBwGA1UEAxMVQ2VydGlmaWNhdGUgQXV0aG9yaXR5AgEBMA0GCSqG<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US">SIb3DQEBAQUABIIBADJhcbvaLYwGrTA6W1G+xB2BuHKJKnQ9DL+KsGWGuVh94CaH<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US">7QAs2fbWcswpD6yhRDTirMS9gXBkdIdEZtGWvMKcZYpLbAxtoE/2V3oa9D5fdwjP<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US">RaLAt5rh6afS/pPbpdCkTYvHZZu7Y1//UDSP7Jkli/oBVE/vYEkteTgFlOgPhNJs<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US">HN/xVJAHJniIzJMc48YojxT8angpN045K+lAFldwsq5RpwS2szH7jaQeGsn5bx+r<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US">SQrEcPYz4noj9GnlzrOAnpvLK8XanJUj6KF4w8Am/adJhTRZrwAc6PVr88BO367g<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US">rjHcNApluo0m4+5DxvC8x7ri4N3wusfRN/oBpkMwggHCBgkqhkiG9w0BBwEwEQYF<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US">Kw4DAgcECGugmAolmOqhgIIBoIaPJ2m6nhY6DsUUBHGGqZRqVvlXimRX++u6UtWM<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US">X0r2jjmCfzpKuijFApiYAdrQzewMjk5AvLE0Pu6cH8mL7Sq973d8zG1vdqAQWZbW<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US">m8C6VRrpD9vw1Yd+q9Ma9UWSqIK0BicuqQk9jWRZVNWmVQT/q3Ht/+7s4rS7iiNu<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US">udSV9MAMAeZsR/AQh1f2DDMCtu2CKsRsQi+qL3gGO2YYQpmbTVBwIPj0O9X664qc<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US">AEqcFFUcGYlb5ES9RMmXtYWJb6rkrAQdWs8MPaaUuVON+t26mim9RazteY5dQ4rT<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US">l7UFujI+pIdc8JXflJ/SaJDb7USl1Y89OMS+j6Uxi1qimhzjedLmhpS27wKH1x61<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US">JfEPqypjsz/AdKYiYH1IOXT3wVq52cpxOMlMpLEOl2eK3QCmvQMef1e9cmnku3fz<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US">cglipc6hT90ca/ugJWlXI84zlppEvKAJ3zqOtmJAf2TYcU++Cyg4Ai/Bi0Szon5z<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US">gOsL1Qpo8YdrmzHL4KbfAHGE7T/QCGA/CszbANL7aTMh4SNC6/A6ZIwoPDmTePNB<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US">dB0IoIIByzCCAccwggEwoAMCAQICIDRDNENCNUVFOUZGRkVCRkQzMUY5M0QwREJG<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US">NTZGMUY3MA0GCSqGSIb3DQEBBAUAMBoxGDAWBgNVBAMTDzAxMC4wMDAuMDAwLjAy<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US">MTAeFw0xNDA5MjkxMTQxMTdaFw0xNDEwMDUxMzQxMTdaMBoxGDAWBgNVBAMTDzAx<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US">MC4wMDAuMDAwLjAyMTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEA4vzJ7zuF<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US">gzXYtHQEDehMN+WniECBX9q6cV7ixr/F/Qn7ItbIiUrRfwMk+2orzSVRANE0dpBM<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US">rqohSq6USOoXwLp/YkITA5RNiQn5LRyebfWgul0IIgioq6L6EI88PG+elBbN2dip<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US">9sjbedJlgIB+zxJ506f0Qf23nYJScdaJ/x8CAwEAATANBgkqhkiG9w0BAQQFAAOB<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US">gQCWENzZzQD6Dj88f33Y8aVY8DQoZjl/sIRHtPjJOKgINJrIt1bU2mlwQ2IrYtrN<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US">L2lv4UOpD9JsprK6FZb0XMMxZotCpXDHZevstDIq745srkHvZK15USjNY2QDvhOp<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US">e8YRESZf64jH7dAkiiFgJU7k6NZRNrIb5l8BuVd1K6sh4jGCAaswggGnAgEBMD4w<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US">GjEYMBYGA1UEAxMPMDEwLjAwMC4wMDAuMDIxAiA0QzRDQjVFRTlGRkZFQkZEMzFG<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US">OTNEMERCRjU2RjFGNzAMBggqhkiG9w0CBQUAoIHBMBIGCmCGSAGG+EUBCQIxBBMC<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US">MTkwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMTQw<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US">OTI5MTE0MTE3WjAfBgkqhkiG9w0BCQQxEgQQRAdYc3/0mIu36+n+4HjzcTAgBgpg<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US">hkgBhvhFAQkFMRIEEFgpmRCbIFZei2tsCn8+fx8wMAYKYIZIAYb4RQEJBzEiEyA0<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US">QzRDQjVFRTlGRkZFQkZEMzFGOTNEMERCRjU2RjFGNzANBgkqhkiG9w0BAQEFAASB<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US">gDXExABpVsRfVAK8yB3C2N1v89zLSygNgejlh6UtB2Dq8gXW1Qmb+d03PZQzmFbH<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US">eaJKV9+5pIsKchOedlsaAks2ZSHw9Pj8is9mIRYM5pADo1BoEcsszshV2G5DKDwm<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US">/oBmEEz/Lwysh4v4GyZwcQad/xYjCODUt83k3s18LWS+<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US">[29/Sep/2014:13:41:17][http-9180-1]:
CRSEnrollment: CryptoContext: token name: osstest'<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US">[29/Sep/2014:13:41:17][http-9180-1]:
CRSEnrollment: CryptoContext: mNickname: '<b>osstest:osstest</b>:caSigningCert
cert-pki-testca1'<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US">[29/Sep/2014:13:41:17][http-9180-1]:
handlePKIMessage exception
com.netscape.cms.servlet.cert.scep.CRSEnrollment$CryptoContext$CryptoContextException:
Certificate not found: osstest:caSigningCert
cert-pki-testca1<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US">com.netscape.cms.servlet.cert.scep.CRSEnrollment$CryptoContext$CryptoContextException:
Certificate not found: osstest:caSigningCert
cert-pki-testca1<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US"> at
com.netscape.cms.servlet.cert.scep.CRSEnrollment$CryptoContext.<init>(CRSEnrollment.java:2026)<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US"> at
com.netscape.cms.servlet.cert.scep.CRSEnrollment.handlePKIOperation(CRSEnrollment.java:803)<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US"> at
com.netscape.cms.servlet.cert.scep.CRSEnrollment.service(CRSEnrollment.java:297)<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US"> at
javax.servlet.http.HttpServlet.service(HttpServlet.java:717)<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US"> at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US"> at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US"> at
com.netscape.cms.servlet.filter.EERequestFilter.doFilter(EERequestFilter.java:176)<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US"> at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US"> at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US"> at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US"> at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US"> at
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US"> at
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US"> at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US"> at
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:298)<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US"> at
org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:857)<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US"> at
org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:588)<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US"> at
org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:489)<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US"> at
java.lang.Thread.run(Thread.java:701)<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US">[29/Sep/2014:13:41:17][http-9180-1]:
ServletException javax.servlet.ServletException: Failed to
process message in CEP servlet: Certificate not found:
osstest:caSigningCert cert-pki-testca1<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US">What stands out is the line with
mNickname. After restarting the service, with the first
request, the HSM token name appears to be listed twice in
the <b>mNickname</b> string. Interestingly, with each
new request, the number of token names increases by one in
the string. i.e. with the 2<sup>nd</sup> attempt, the same
exception occurs but the token name appears three times:<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US">[29/Sep/2014:13:41:17][http-9180-1]:
CRSEnrollment: CryptoContext: token name: osstest'<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US">[29/Sep/2014:13:41:17][http-9180-1]:
CRSEnrollment: CryptoContext: mNickname: '<b>osstest:osstest:osstest</b>:caSigningCert
cert-pki-testca1'<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US">[29/Sep/2014:13:41:17][http-9180-1]:
handlePKIMessage exception
com.netscape.cms.servlet.cert.scep.CRSEnrollment$CryptoContext$CryptoContextException:
Certificate not found: osstest:caSigningCert
cert-pki-testca1<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US">com.netscape.cms.servlet.cert.scep.CRSEnrollment$CryptoContext$CryptoContextException:
Certificate not found: osstest:caSigningCert
cert-pki-testca1<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US"> at
com.netscape.cms.servlet.cert.scep.CRSEnrollment$CryptoContext.<init>(CRSEnrollment.java:2026)<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US"> at
com.netscape.cms.servlet.cert.scep.CRSEnrollment.handlePKIOperation(CRSEnrollment.java:803)<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US"> at
com.netscape.cms.servlet.cert.scep.CRSEnrollment.service(CRSEnrollment.java:297)<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US"> at
javax.servlet.http.HttpServlet.service(HttpServlet.java:717)<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US"> at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US"> at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US"> at
com.netscape.cms.servlet.filter.EERequestFilter.doFilter(EERequestFilter.java:176)<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US"> at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US"> at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US"> at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US"> at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US"> at
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US"> at
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US"> at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US"> at
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:298)<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US"> at
org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:857)<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US"> at
org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:588)<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US"> at
org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:489)<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US"> at
java.lang.Thread.run(Thread.java:701)<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US">[29/Sep/2014:13:41:17][http-9180-1]:
ServletException javax.servlet.ServletException: Failed to
process message in CEP servlet: Certificate not found:
osstest:caSigningCert cert-pki-testca1<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US">As mentioned, the exception occurs
with both versions 4 and 5 of LunaSA. (We currently have
RHEL5 systems with Dogtag 1.3 operating with SCEP
enrollment.) With local tokens, (no HSMs) the error does
not occur.<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US">Any Ideas, how we can track this
down? We definitely need to get this running.<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US">Best regards!<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New"" lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"
style="margin-left:28.6pt;text-indent:-28.6pt;text-autospace:none">
<span style="font-size:10.0pt;font-family:"Courier
New";color:black;mso-fareast-language:DE-AT"
lang="EN-GB">William Elliott<o:p></o:p></span></p>
<p class="MsoNormal"
style="margin-left:28.6pt;text-indent:-28.6pt;text-autospace:none">
<span style="font-size:10.0pt;font-family:"Courier
New";color:black;mso-fareast-language:DE-AT"
lang="EN-GB">s IT Solutions<o:p></o:p></span></p>
<p class="MsoNormal"
style="margin-left:28.6pt;text-indent:-28.6pt;text-autospace:none">
<span style="font-size:10.0pt;font-family:"Courier
New";color:black;mso-fareast-language:DE-AT"
lang="EN-GB">Open System Services<o:p></o:p></span></p>
<p class="MsoNormal"
style="margin-left:28.6pt;text-indent:-28.6pt;text-autospace:none">
<span style="font-size:10.0pt;font-family:"Courier
New";color:black;mso-fareast-language:DE-AT"
lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"
style="margin-left:28.6pt;text-indent:-28.6pt;text-autospace:none">
<span style="font-size:10.0pt;font-family:"Courier
New";color:black;mso-fareast-language:DE-AT"
lang="EN-US">s IT Solutions AT Spardat GmbH<o:p></o:p></span></p>
<p class="MsoNormal"
style="margin-left:28.6pt;text-indent:-28.6pt;text-autospace:none">
<span style="font-size:10.0pt;font-family:"Courier
New";color:black;mso-fareast-language:DE-AT">A-1110
Wien, Geiselbergstraße 21 - 25<o:p></o:p></span></p>
<p class="MsoNormal"
style="margin-left:28.6pt;text-indent:-28.6pt;text-autospace:none">
<span style="font-size:10.0pt;font-family:"Courier
New";color:black;mso-fareast-language:DE-AT">Phone:
+43 (0)5 0100 - 39376<o:p></o:p></span></p>
<p class="MsoNormal"
style="margin-left:28.6pt;text-indent:-28.6pt;text-autospace:none">
<span style="font-size:10.0pt;font-family:"Courier
New";color:black;mso-fareast-language:DE-AT">Fax: +43
(0)5 0100 9 - 39376<o:p></o:p></span></p>
<p class="MsoNormal"
style="margin-left:28.6pt;text-indent:-28.6pt;text-autospace:none">
<span style="font-size:10.0pt;font-family:"Courier
New";color:black;mso-fareast-language:DE-AT"
lang="EN-GB">Mobile: +43 (0)</span><span
style="font-size:10.0pt;font-family:"Courier
New";color:black;mso-fareast-language:DE-AT"
lang="EN-US"> 5 0100 6 - 39376<o:p></o:p></span></p>
<p class="MsoNormal"
style="margin-left:28.6pt;text-indent:-28.6pt;text-autospace:none">
<span style="font-size:10.0pt;font-family:"Courier
New";color:black;mso-fareast-language:DE-AT"
lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><u><span
style="font-size:10.0pt;font-family:"Courier
New";color:blue;mso-fareast-language:DE-AT"
lang="EN-GB"><a moz-do-not-send="true"
href="mailto:william.elliott%20at%20s-itsolutions.at">mailto:william.elliott
at s-itsolutions.at</a></span></u><span
style="font-size:10.0pt;font-family:"Courier
New";mso-fareast-language:DE-AT" lang="EN-GB"><o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span
style="font-size:10.0pt;font-family:"Courier
New";color:black;mso-fareast-language:DE-AT"
lang="EN-US"><a moz-do-not-send="true"
href="http://www.s-itsolutions.com/"><span
style="color:#009999" lang="EN-GB">www.s-itsolutions.com</span></a><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New";mso-fareast-language:DE-AT" lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span
style="font-size:10.0pt;font-family:"Courier
New";mso-fareast-language:DE-AT" lang="EN-US">Head
Office: Vienna Commercial Register No.: 152289f Commercial
Court of Vienna<o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span
style="font-size:10.0pt;font-family:"Courier
New";mso-fareast-language:DE-AT" lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span
style="font-size:10.0pt;font-family:"Courier
New";mso-fareast-language:DE-AT" lang="EN-US">This
message and any attached files are confidential and
intended solely for the addressee(s). Any publication,
transmission or other use of the information by a person
or entity other than the intended addressee is prohibited.
If you receive this in error please contact the sender and
delete the material. The sender does not accept liability
for any errors or omissions as a result of the
transmission.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Courier
New"" lang="EN-US"><o:p> </o:p></span></p>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Pki-users mailing list
<a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:Pki-users@redhat.com">Pki-users@redhat.com</a>
<a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/pki-users">https://www.redhat.com/mailman/listinfo/pki-users</a></pre>
</blockquote>
<br>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Pki-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Pki-users@redhat.com">Pki-users@redhat.com</a>
<a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/pki-users">https://www.redhat.com/mailman/listinfo/pki-users</a></pre>
</blockquote>
<br>
</body>
</html>