[Pki-users] Error cloning KRA

[Mike Mercier]

Hello,

I am having a problem cloning a KRA.  I get to the "Import Keys and
Certificates" page, put in the filename and password (after copying
the file to /var/lib/pki-kra/alias) and the page returns:
"Clone is not ready"

I see the following in /var/log/pki-kra/debug

[21/May/2009:16:32:09][http-10444-Processor20]: WizardServlet: process
[21/May/2009:16:32:09][http-10444-Processor20]:
WizardServlet:service() uri = /kra/admin/console/config/wizard
[21/May/2009:16:32:09][http-10444-Processor20]:
WizardServlet::service() param name='__password' value='(sensitive)'
[21/May/2009:16:32:09][http-10444-Processor20]:
WizardServlet::service() param name='path' value='pki-kra-savepkcs12'
[21/May/2009:16:32:09][http-10444-Processor20]:
WizardServlet::service() param name='p' value='4'
[21/May/2009:16:32:09][http-10444-Processor20]:
WizardServlet::service() param name='op' value='next'
[21/May/2009:16:32:09][http-10444-Processor20]: WizardServlet: op=next
[21/May/2009:16:32:09][http-10444-Processor20]: WizardServlet: size=16
[21/May/2009:16:32:09][http-10444-Processor20]: WizardServlet: in next 4
[21/May/2009:16:32:09][http-10444-Processor20]: RestoreKeyCertPanel
verify the PFX.
[21/May/2009:16:32:09][http-10444-Processor20]: RestoreKeyCertPanel
deleteExistingCerts:
Exception=org.mozilla.jss.crypto.ObjectNotFoundException
[21/May/2009:16:32:09][http-10444-Processor20]: RestoreKeyCertPanel
deleteExistingCerts:
Exception=org.mozilla.jss.crypto.NoSuchItemOnTokenException
[21/May/2009:16:32:09][http-10444-Processor20]: RestoreKeyCertPanel
deleteExistingCerts:
Exception=org.mozilla.jss.crypto.ObjectNotFoundException
[21/May/2009:16:32:09][http-10444-Processor20]: RestoreKeyCertPanel
deleteExistingCerts:
Exception=org.mozilla.jss.crypto.NoSuchItemOnTokenException
[21/May/2009:16:32:09][http-10444-Processor20]: RestoreKeyCertPanel
deleteExistingCerts:
Exception=org.mozilla.jss.crypto.ObjectNotFoundException
[21/May/2009:16:32:09][http-10444-Processor20]: RestoreKeyCertPanel
deleteExistingCerts:
Exception=org.mozilla.jss.crypto.NoSuchItemOnTokenException
[21/May/2009:16:32:09][http-10444-Processor20]: RestoreKeyCertPanel
deleteExistingCerts:
Exception=org.mozilla.jss.crypto.ObjectNotFoundException
[21/May/2009:16:32:09][http-10444-Processor20]: RestoreKeyCertPanel
deleteExistingCerts:
Exception=org.mozilla.jss.crypto.NoSuchItemOnTokenException
[21/May/2009:16:32:09][http-10444-Processor20]: RestoreKeyCertPanel
deleteCert: this is pk11store
[21/May/2009:16:32:09][http-10444-Processor20]: Key Algorithm 'RSA'
[21/May/2009:16:32:09][http-10444-Processor20]: RestoreKeyCertPanel
deleteCert: this is pk11store
[21/May/2009:16:32:09][http-10444-Processor20]: Key Algorithm 'RSA'
[21/May/2009:16:32:09][http-10444-Processor20]: RestoreKeyCertPanel
deleteCert: this is pk11store
[21/May/2009:16:32:09][http-10444-Processor20]: Key Algorithm 'RSA'
[21/May/2009:16:32:09][http-10444-Processor20]: RestoreKeyCertPanel
deleteCert: this is pk11store
[21/May/2009:16:32:09][http-10444-Processor20]: Key Algorithm 'RSA'
[21/May/2009:16:32:09][http-10444-Processor20]: RestoreKeyCertPanel:
this is the clone subsystem
[21/May/2009:16:32:09][http-10444-Processor20]: RestoreKeyCertPanel
isCertdbCloned:
[21/May/2009:16:32:09][http-10444-Processor20]: RestoreKeyCertPanel
update: clone does not have all the certificates.
[21/May/2009:16:32:09][http-10444-Processor20]: panel no=4
[21/May/2009:16:32:09][http-10444-Processor20]: panel name=restorekeys
[21/May/2009:16:32:09][http-10444-Processor20]: total number of panels=16

Any pointers?

Thanks,
Mike