2022-11-22 02:58:13,637 main INFO Log4j appears to be running in a Servlet environment, but there's no log4j-web module available. If you want better web container support, please add the log4j-web JAR to your web archive or server lib directory. 2022-11-22 02:58:14,800 main INFO Log4j appears to be running in a Servlet environment, but there's no log4j-web module available. If you want better web container support, please add the log4j-web JAR to your web archive or server lib directory. . ____ _ __ _ _ /\\ / ___'_ __ _ _(_)_ __ __ _ \ \ \ \ ( ( )\___ | '_ | '_| | '_ \/ _` | \ \ \ \ \\/ ___)| |_)| | | | | || (_| | ) ) ) ) ' |____| .__|_| |_|_| |_\__, | / / / / =========|_|==============|___/=/_/_/_/ :: Spring Boot :: (v2.5.8) 2022-11-22 02:58:15.627  INFO 1 [ main] o.s.b.SpringApplication  : No active profile set, falling back to default profiles: default Nov 22, 2022 2:58:17 AM org.apache.coyote.AbstractProtocol init INFO: Initializing ProtocolHandler ["https-jsse-nio-8443"] Nov 22, 2022 2:58:17 AM org.apache.catalina.core.StandardService startInternal INFO: Starting service [Tomcat] Nov 22, 2022 2:58:17 AM org.apache.catalina.core.StandardEngine startInternal INFO: Starting Servlet engine: [Apache Tomcat/9.0.56] Nov 22, 2022 2:58:17 AM org.apache.catalina.core.ApplicationContext log INFO: Initializing Spring embedded WebApplicationContext 2022-11-22 02:58:18.358 DEBUG 1 [ main] o.j.l.LoggerProviders  : Logging Provider: org.jboss.logging.Log4j2LoggerProvider 2022-11-22 02:58:18.697  INFO 1 [ main] o.o.o.c.c.c.CmpServersConfig  : Loading initial configuration 2022-11-22 02:58:18.874  INFO 1 [ main] o.o.o.c.c.c.CmpServersConfig  : CMP Servers configuration successfully loaded from file /etc/onap/oom/certservice/cmpServers.json 2022-11-22 02:58:19.612 DEBUG 1 [ main] o.s.w.s.h.AbstractHandlerMethodMapping  : o.o.o.c.a.ReloadConfigController: {GET [/reload], produces [application/json]}: reloadConfiguration() 2022-11-22 02:58:19.615 DEBUG 1 [ main] o.s.w.s.h.AbstractHandlerMethodMapping  : o.o.o.c.a.CertificationController: {GET [/v1/certificate/{caName}], produces [application/json]}: signCertificate(String,String,String) {GET [/v1/certificate-update/{caName}], produces [application/json]}: updateCertificate(String,String,String,String,String) 2022-11-22 02:58:19.616 DEBUG 1 [ main] o.s.w.s.h.AbstractHandlerMethodMapping  : o.o.o.c.a.ReadinessController: {GET [/ready], produces [application/json]}: checkReady() 2022-11-22 02:58:19.620 DEBUG 1 [ main] o.s.w.s.h.AbstractHandlerMethodMapping  : o.s.b.a.w.s.e.BasicErrorController: { [/error]}: error(HttpServletRequest) { [/error], produces [text/html]}: errorHtml(HttpServletRequest,HttpServletResponse) 2022-11-22 02:58:19.659 DEBUG 1 [ main] o.s.w.s.h.AbstractHandlerMethodMapping  : o.s.a.OpenApiResource: {GET [/v3/api-docs.yaml], produces [application/vnd.oai.openapi]}: openapiYaml(HttpServletRequest,String) {GET [/v3/api-docs], produces [application/json]}: openapiJson(HttpServletRequest,String) 2022-11-22 02:58:19.662 DEBUG 1 [ main] o.s.w.s.h.AbstractHandlerMethodMapping  : o.s.u.SwaggerWelcome: {GET [/v3/api-docs/swagger-config], produces [application/json]}: openapiYaml(HttpServletRequest) {GET [/docs]}: redirectToUi(HttpServletRequest) 2022-11-22 02:58:19.793 DEBUG 1 [ main] w.s.h.AbstractDetectingUrlHandlerMapping : 'beanNameHandlerMapping' {} 2022-11-22 02:58:20.500 DEBUG 1 [ main] o.s.w.s.h.SimpleUrlHandlerMapping  : 'resourceHandlerMapping' {/webjars/**=ResourceHttpRequestHandler [classpath [META-INF/resources/webjars/]], /**=ResourceHttpRequestHandler [classpath [META-INF/resources/], classpath [resources/], classpath [static/], classpath [public/], ServletContext [/]], /**/swagger-ui/**=ResourceHttpRequestHandler [classpath [META-INF/resources/webjars/]]} Nov 22, 2022 2:58:21 AM org.apache.coyote.AbstractProtocol start INFO: Starting ProtocolHandler ["https-jsse-nio-8443"] 2022-11-22 02:58:21.439  INFO 1 [ main] o.s.b.StartupInfoLogger  : Started CertServiceApplication in 8.592 seconds (JVM running for 10.428) Nov 22, 2022 2:58:51 AM org.apache.catalina.core.ApplicationContext log INFO: Initializing Spring DispatcherServlet 'dispatcherServlet' 2022-11-22 02:59:04.434  INFO 1 [nio-8443-exec-2] o.o.o.c.a.CertificationController  : Received certificate initialization request for CA named: RA 2022-11-22 02:59:04.443 DEBUG 1 [nio-8443-exec-2] .c.c.c.Pkcs10CertificationRequestFactory : Creating certification request from pem object 2022-11-22 02:59:04.484 DEBUG 1 [nio-8443-exec-2] .o.c.c.CertificationResponseModelFactory : Received CSR meta data: CSR: { Subject: { C=US,ST=California,L=San-Francisco,O=Linux-Foundation,OU=ONAP,CN=sdnc.simpledemo.onap.org }, SANs: [sdnc.simpledemo.onap.org] } 2022-11-22 02:59:04.487 DEBUG 1 [nio-8443-exec-2] .o.c.c.CertificationResponseModelFactory : Found server for given CA name: Cmpv2Server{authentication=Authentication{ iak=*****, rv=*****}, caName='RA', issuerDN='O=EJBCA Container Quickstart,CN=ManagementCA,UID=12345', url='http://ejbca:8080/ejbca/publicweb/cmp/cmpRA'} 2022-11-22 02:59:04.503  INFO 1 [nio-8443-exec-2] .o.c.c.CertificationResponseModelFactory : Sending initialization request for certification model for CA named: RA, and certificate signing request: CSR: { Subject: { C=US,ST=California,L=San-Francisco,O=Linux-Foundation,OU=ONAP,CN=sdnc.simpledemo.onap.org }, SANs: [sdnc.simpledemo.onap.org] } 2022-11-22 02:59:04.505  INFO 1 [nio-8443-exec-2] o.o.o.c.c.v.CmpCertificationValidator  : Validate before creating Certificate Request for CA: RA 2022-11-22 02:59:04.506  INFO 1 [nio-8443-exec-2] o.o.o.c.c.v.CmpCertificationValidator  : Validation completed successfully. 2022-11-22 02:59:04.508 DEBUG 1 [nio-8443-exec-2] o.o.o.c.c.i.CmpUtil  : Generating random integer 2022-11-22 02:59:04.508 DEBUG 1 [nio-8443-exec-2] o.o.o.c.c.i.CmpUtil  : Generating random array of bytes 2022-11-22 02:59:04.512 DEBUG 1 [nio-8443-exec-2] o.o.o.c.c.i.CmpUtil  : Generating random integer 2022-11-22 02:59:04.521 DEBUG 1 [nio-8443-exec-2] o.o.o.c.c.i.CmpMessageHelper  : Generating Extensions from Subject Alternative Names 2022-11-22 02:59:04.525 DEBUG 1 [nio-8443-exec-2] o.o.o.c.c.i.CmpMessageHelper  : Generating Optional Validity from Date objects 2022-11-22 02:59:04.586 DEBUG 1 [nio-8443-exec-2] o.o.o.c.c.i.CmpUtil  : Generating a Pki Header Builder 2022-11-22 02:59:04.593 DEBUG 1 [nio-8443-exec-2] o.o.o.c.c.i.CmpUtil  : Generating random array of bytes 2022-11-22 02:59:04.594 DEBUG 1 [nio-8443-exec-2] o.o.o.c.c.i.CmpUtil  : Generating random array of bytes 2022-11-22 02:59:04.598 DEBUG 1 [nio-8443-exec-2] o.o.o.c.c.i.CmpUtil  : Generating array of bytes representing PkiHeader and PkiBody 2022-11-22 02:59:05.258  INFO 1 [nio-8443-exec-2] o.o.o.c.c.i.CmpClientImpl  : Received response from Server 2022-11-22 02:59:05.263  INFO 1 [nio-8443-exec-2] o.o.o.c.c.i.CmpResponseHelper  : Response type is: INIT_REP 2022-11-22 02:59:05.264 DEBUG 1 [nio-8443-exec-2] o.o.o.c.c.v.CmpCertificationValidator  : Verifying signature of the response. 2022-11-22 02:59:05.266 DEBUG 1 [nio-8443-exec-2] o.o.o.c.c.i.CmpUtil  : Generating array of bytes representing PkiHeader and PkiBody 2022-11-22 02:59:05.282  INFO 1 [nio-8443-exec-2] o.o.o.c.c.v.CmpCertificationValidator  : Response status code: 0 2022-11-22 02:59:05.284  INFO 1 [nio-8443-exec-2] o.o.o.c.c.i.CmpClientImpl  : Verifying certificates returned as part of CertResponse. 2022-11-22 02:59:05.285 DEBUG 1 [nio-8443-exec-2] o.o.o.c.c.i.CmpResponseHelper  : Retrieving certificate of type class java.security.cert.X509Certificate from byte array. 2022-11-22 02:59:05.286 DEBUG 1 [nio-8443-exec-2] o.o.o.c.c.i.CmpResponseHelper  : Parsing X509Certificate from bytes with provider BC 2022-11-22 02:59:05.286 DEBUG 1 [nio-8443-exec-2] o.o.o.c.c.i.CmpResponseHelper  : Creating certificate Factory to generate certificate using provider BC 2022-11-22 02:59:05.312 DEBUG 1 [nio-8443-exec-2] o.o.o.c.c.i.CmpResponseHelper  : Retrieving certificate of type class java.security.cert.X509Certificate from byte array. 2022-11-22 02:59:05.313 DEBUG 1 [nio-8443-exec-2] o.o.o.c.c.i.CmpResponseHelper  : Parsing X509Certificate from bytes with provider BC 2022-11-22 02:59:05.313 DEBUG 1 [nio-8443-exec-2] o.o.o.c.c.i.CmpResponseHelper  : Creating certificate Factory to generate certificate using provider BC 2022-11-22 02:59:05.320 DEBUG 1 [nio-8443-exec-2] o.o.o.c.c.i.CmpResponseHelper  : Retrieving certificate of type class java.security.cert.X509Certificate from byte array. 2022-11-22 02:59:05.321 DEBUG 1 [nio-8443-exec-2] o.o.o.c.c.i.CmpResponseHelper  : Parsing X509Certificate from bytes with provider BC 2022-11-22 02:59:05.321 DEBUG 1 [nio-8443-exec-2] o.o.o.c.c.i.CmpResponseHelper  : Creating certificate Factory to generate certificate using provider BC 2022-11-22 02:59:05.322 DEBUG 1 [nio-8443-exec-2] o.o.o.c.c.i.CmpResponseHelper  : Verifying certificate CN=sdnc.simpledemo.onap.org,OU=ONAP,O=Linux-Foundation,L=San-Francisco,ST=California,C=US as part of cert chain with certificate UID=12345,CN=ManagementCA,O=EJBCA Container Quickstart 2022-11-22 02:59:05.355 DEBUG 1 [nio-8443-exec-2] o.o.o.c.c.i.CmpResponseHelper  : Certificate verify result:PKIXCertPathValidatorResult: [ Trust Anchor: [ Trusted CA cert: [0] Version: 3 SerialNumber: 138252980814687483962228627869935475982343265872 IssuerDN: UID=12345,CN=ManagementCA,O=EJBCA Container Quickstart Start Date: Tue Nov 22 02:55:56 UTC 2022 Final Date: Sun Nov 21 02:55:55 UTC 2032 SubjectDN: UID=12345,CN=ManagementCA,O=EJBCA Container Quickstart Public Key: RSA Public Key [54:32:35:36:66:f5:54:c2:86:98:eb:2a:b0:ae:1c:19:bf:9e:46:87],[56:66:d1:a4] modulus: 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 public exponent: 10001 Signature Algorithm: SHA256WITHRSA Signature: b2b98c507351b5ae59faff4d6dac8ba720b38af7 8922c94e4f1bac10625d3127bc0984b702f88581 c0cbe454d3606253a46b84289e5452b1bfd9e7be ec8a83a230d78acdba653e56a76e4dc59dcfffc5 1eafce3d23b3151bff9513d63e73d3998b445001 a4d48746d5c3454bfb8dbcb5700623aab419f036 403e9d3cdcfd7c981504a8116f7821500a344764 bbc163b99d691d08f37936d263416d581ce6e681 78651843247831e225456f7a5cac38d5024c50ee bdd49b6a885d6e78d87f74bf17f5ae01e68beaaa 475d1c30b838326761b5dc5f3c354f0fb25d0f1a 223518915cf25642034d305beed45e6e399bdd9e 97b6e1f54f83f05d40692a131f568afc9573ec8e 853ab8fae8b39957355bf92cbe94409ec122823d f5640c8a28bf9764ee31a982fcdf5ac0264a8aaa 2aa371d5697688d8ebee6512df1d1425f974faba dbd1ecff70ae32680ecc6f0fe1dbc960b48cefe2 83fe98ddd1d83addd9629703925dc026ad88f9d7 65656a5abb8951d3e5c113319c28ffb377230dc4 b9393487 Extensions: critical(true) BasicConstraints: isCa(true) critical(false) 2.5.29.35 value = Sequence Tagged [CONTEXT 0] IMPLICIT DER Octet String[20] critical(false) 2.5.29.14 value = DER Octet String[20] critical(true) KeyUsage: 0x86 Policy Tree: null Subject Public Key: RSA Public Key [91:25:a6:62:7c:99:9a:4d:cd:2d:d5:33:c7:ae:d0:1f:c9:c9:30:ec],[56:66:d1:a4] modulus: d522f39c3bcab73aafbec3b059c4aeb88368ff7c64909d30a1983dbb4e7ad3504c13dab8a36e1dc39cdabde342d0074ced6a1cb546a3b1ba94cbb93e53a2752be7c4accd0982d73721fb5769aceb7dd290cb366fbaa2a9f12e305e0722b3b1e1ea685e527e25b1697fb0756ae2b3b4c1cb1e6dc71fe94ef5c6560d3df3e5e86e1621ba948f3c8ac9375cf1ed87c1931ae880d12a12093fa354d9507bdf5fe6afa260c8ed8e49b4d797ad1a34a6bb29d2f338cc4483bcda34814148c64e665eb85c162d774761715309684eebc59405308dd0b0e1bb23d57672b64f6ddb54fc9a30b16ea5e524be5bbb0622feafdd8154b180014c3964596ce8d63c6c503cb177 public exponent: 10001 ]