By type
Caller Properties Initialized
cat SSO
cadi_keyfile=/root/.aaf/keyfile
aaf_id=deployer@people.osaaf.org
aaf_password=enc:tIX3YeDBqq149uj5DbSELxZlz3eWQ9KQUTatsHiMot8
aaf_locate_url=https://-locator.:8095
aaf_url_cm=https://AAF_LOCATE_URL/%CNS.%NS.cm:2.1
aaf_url=https://AAF_LOCATE_URL/%CNS.%NS.service:2.1
cadi_truststore=/root/.aaf/truststoreONAPall.jks
cadi_truststore_password=changeit
cadi_latitude=
cadi_longitude=
hostname=dmaap-mr
aaf_locator_fqdn=dmaap-mr
aaf_locator_container=oom
aaf_locator_container_ns=onap
aaf_locate_url=https://aaf-locate.onap:8095
aaf_locator_app_ns=org.osaaf.aaf
cadi_longitude=-122.26147
cadi_latitude=37.78187
aaf_locator_public_fqdn=mr.dmaap.onap.org
Created /opt/app/osaaf/local
Existing files in /opt/app/osaaf/local
total 0
Clean up directory /opt/app/osaaf/local
Namespace is org.onap.dmaap.mr
#### Create Configuration files
Writing to /opt/app/osaaf/local
Writing file /opt/app/osaaf/local/org.onap.dmaap.mr.keyfile
Passed in Truststore is /root/.aaf/truststoreONAPall.jks
New Truststore is /opt/app/osaaf/local/truststoreONAPall.jks
Creating new /opt/app/osaaf/local/org.onap.dmaap.mr.location.props
Creating new /opt/app/osaaf/local/org.onap.dmaap.mr.cred.props
Creating new /opt/app/osaaf/local/org.onap.dmaap.mr.props
2022-09-30T15:45:25.821+0000: Trans Info
REMOTE Get Configuration 1429.4856ms
############################################################
# Properties Generated by AT&T Certificate Manager
# by root
# on 2022-09-30T15:45:25.819+0000
# @copyright 2019, AT&T
############################################################
aaf_env=DEV
aaf_id=dmaapmr@mr.dmaap.onap.org
aaf_locate_url=https://aaf-locate.onap:8095
aaf_locator_app_ns=org.osaaf.aaf
aaf_locator_container=oom
aaf_locator_container_ns=onap
aaf_locator_fqdn=dmaap-mr
aaf_locator_public_fqdn=mr.dmaap.onap.org
aaf_oauth2_introspect_url=https://AAF_LOCATE_URL/%CNS.%AAF_NS.introspect:2.1/introspect
aaf_oauth2_token_url=https://AAF_LOCATE_URL/%CNS.%AAF_NS.token:2.1/token
aaf_url=https://AAF_LOCATE_URL/%CNS.%AAF_NS.service:2.1
aaf_url_cm=https://AAF_LOCATE_URL/%CNS.%AAF_NS.cm:2.1
aaf_url_fs=https://AAF_LOCATE_URL/%CNS.%AAF_NS.fs:2.1
aaf_url_gui=https://AAF_LOCATE_URL/%CNS.%AAF_NS.gui:2.1
aaf_url_hello=https://aaf-locate.onap:8095/locate/onap.org.osaaf.aaf.hello:2.1
aaf_url_oauth=https://AAF_LOCATE_URL/%CNS.%AAF_NS.oauth:2.1
cadi_prop_files=/opt/app/osaaf/local/org.onap.dmaap.mr.location.props:/opt/app/osaaf/local/org.onap.dmaap.mr.cred.props
cadi_protocols=TLSv1.1,TLSv1.2
#### Certificate Authorization Artifact
2022-09-30T15:45:26.161+0000 INIT [cadi] cadi_keyfile points to /opt/app/osaaf/local/org.onap.dmaap.mr.keyfile
2022-09-30T15:45:26.185+0000 INIT [cadi] https.protocols set by cadi_protocols in CADI Properties
2022-09-30T15:45:26.186+0000 INIT [cadi] jdk.tls.client.protocols set from Default Protocols
AppID: dmaapmr@mr.dmaap.onap.org
Sponsor: aaf_admin@osaaf.org
Machine: dmaap-mr
CA: local
Types: file,jks,pkcs12,script
Namespace: org.onap.dmaap.mr
Directory: /opt/app/osaaf/local
O/S User: root
Renew Days: 30
Notification mailto:
2022-09-30T15:45:29.174+0000: Trans Info
Read Artifact 1666.6509ms
#### Place Certificates (by deployer)
2022-09-30T15:45:29.717+0000 INIT [cadi] cadi_keyfile points to /opt/app/osaaf/local/org.onap.dmaap.mr.keyfile
2022-09-30T15:45:29.751+0000 INIT [cadi] https.protocols set by cadi_protocols in CADI Properties
2022-09-30T15:45:29.752+0000 INIT [cadi] jdk.tls.client.protocols set from Default Protocols
Writing to /opt/app/osaaf/local
Writing file /opt/app/osaaf/local/org.onap.dmaap.mr.crt
Writing file /opt/app/osaaf/local/org.onap.dmaap.mr.key
Writing file /opt/app/osaaf/local/org.onap.dmaap.mr.jks
Writing file /opt/app/osaaf/local/org.onap.dmaap.mr.trust.jks
Writing file /opt/app/osaaf/local/org.onap.dmaap.mr.p12
Writing file /opt/app/osaaf/local/org.onap.dmaap.mr.trust.jks
Writing file /opt/app/osaaf/local/org.onap.dmaap.mr.check.sh
Writing file /opt/app/osaaf/local/org.onap.dmaap.mr.crontab.sh
Backing up /opt/app/osaaf/local/org.onap.dmaap.mr.cred.props
2022-09-30T15:45:32.516+0000: Trans Info
REMOTE Place Artifact 1712.6218ms
Reconstitute Private Key 0.517399ms
Reconstitute Private Key 0.242654ms
Obtained Certificates
#### Validate Configuration and Certificate with live call
2022-09-30T15:45:32.857+0000 INIT [cadi] cadi_keyfile points to /opt/app/osaaf/local/org.onap.dmaap.mr.keyfile
2022-09-30T15:45:32.879+0000 INIT [cadi] https.protocols set by cadi_protocols in CADI Properties
2022-09-30T15:45:32.879+0000 INIT [cadi] jdk.tls.client.protocols set from Default Protocols
Validating Configuration...
2022-09-30T15:45:33.847+0000 INIT [cadi] X509 Chain
0)
Subject: C=US, O=ONAP, OU=OSAAF, OU=dmaapmr@mr.dmaap.onap.org:DEV, CN=dmaap-mr
Issuer : CN=intermediateCA_9, OU=OSAAF, O=ONAP, C=US
Expires: Sat Sep 30 15:45:32 GMT 2023
1)
Subject: CN=intermediateCA_9, OU=OSAAF, O=ONAP, C=US
Issuer : C=US, O=ONAP, OU=OSAAF
Expires: Thu Aug 17 18:51:37 GMT 2023
2022-09-30T15:45:33.854+0000 INIT [cadi] https.protocols loaded from System Properties
2022-09-30T15:45:33.854+0000 INIT [cadi] jdk.tls.client.protocols loaded from System Properties
2022-09-30T15:45:33.908+0000 INIT [cadi] RegistrationProperty: default_container='oom'
2022-09-30T15:45:33.908+0000 INIT [cadi] RegistrationProperty: public_port='null'
2022-09-30T15:45:33.918+0000 INIT [cadi] RegistrationProperty: hostname='onap-message-router-0'
2022-09-30T15:45:33.918+0000 INIT [cadi] RegistrationProperty: public_fqdn='mr.dmaap.onap.org'
2022-09-30T15:45:33.918+0000 INIT [cadi] RegistrationProperty: default_name='%NS.%N'
2022-09-30T15:45:33.919+0000 INIT [cadi] RegistrationProperty: latitude='37.78187'
2022-09-30T15:45:33.920+0000 INIT [cadi] RegistrationProperty: longitude='-122.26147'
2022-09-30T15:45:33.921+0000 INIT [cadi] RegistrationProperty: public_hostname(overloaded by )='mr.dmaap.onap.org'
2022-09-30T15:45:33.921+0000 INIT [cadi] RegistrationProperty: default_fqdn='dmaap-mr'
2022-09-30T15:45:33.921+0000 INIT [cadi] RegistrationProperty: default_container_ns='onap'
2022-09-30T15:45:33.921+0000 DEBUG [cadi] RegistrationReplacement from AAFCon, source: https://AAF_LOCATE_URL/%CNS.%AAF_NS.service:2.1, dot_le: .oom, value: https://aaf-locate.onap:8095/locate/onap.org.osaaf.aaf.service:2.1
2022-09-30T15:45:33.921+0000 INFO [cadi] AAFCon has URL of https://aaf-locate.onap:8095/locate/onap.org.osaaf.aaf.service:2.1
2022-09-30T15:45:33.998+0000 DEBUG [cadi] Configured AbsAAFLocator not found"LocatorCreator is not set"Continuing Locator creation
2022-09-30T15:45:33.999+0000 DEBUG [cadi] RegistrationReplacement from Config.loadLocator, source: https://AAF_LOCATE_URL/%CNS.%AAF_NS.service:2.1, dot_le: .oom, value: https://aaf-locate.onap:8095/locate/onap.org.osaaf.aaf.service:2.1
2022-09-30T15:45:33.999+0000 INFO [cadi] loadLocator URL is https://aaf-locate.onap:8095/locate/onap.org.osaaf.aaf.service:2.1
2022-09-30T15:45:34.002+0000 DEBUG [cadi] RegistrationReplacement from AAFLocator, source: https://AAF_LOCATE_URL, dot_le: .oom, value: https://aaf-locate.onap:8095
2022-09-30T15:45:34.002+0000 INFO [cadi] AbsAAFLocator AAF URI is https://aaf-locate.onap:8095/locate
2022-09-30T15:45:34.002+0000 DEBUG [cadi] RegistrationReplacement from AAFLocator, source: onap.org.osaaf.aaf.service:2.1, dot_le: .oom, value: onap.org.osaaf.aaf.service:2.1
2022-09-30T15:45:34.002+0000 INFO [cadi] AbsAAFLocator name is https://aaf-locate.onap:8095/locate
2022-09-30T15:45:34.018+0000 DEBUG [cadi] Root URI: https://aaf-locate.onap:8095/locate/onap.org.osaaf.aaf.service:2.1
2022-09-30T15:45:34.027+0000 INFO [cadi] AAFLocator enabled using https://aaf-locate.onap:8095
2022-09-30T15:45:34.368+0000: Error connecting https://aaf-locate.onap:8095/locate/onap.org.osaaf.aaf.service:2.1 for location.
org.onap.aaf.misc.env.APIException: Cannot connect to 'https://aaf-locate.onap:8095/locate/onap.org.osaaf.aaf.service:2.1' (Root URI: 'https://aaf-locate.onap:8095/locate/onap.org.osaaf.aaf.service:2.1')
at org.onap.aaf.cadi.http.HClient.send(HClient.java:159)
at org.onap.aaf.cadi.aaf.v2_0.AAFLocator.refresh(AAFLocator.java:145)
at org.onap.aaf.cadi.aaf.v2_0.AbsAAFLocator._refresh(AbsAAFLocator.java:176)
at org.onap.aaf.cadi.aaf.v2_0.AbsAAFLocator.hasItems(AbsAAFLocator.java:213)
at org.onap.aaf.cadi.aaf.v2_0.AbsAAFLocator.best(AbsAAFLocator.java:238)
at org.onap.aaf.cadi.http.HMangr.best(HMangr.java:161)
at org.onap.aaf.cadi.aaf.v2_0.AAFConHttp.best(AAFConHttp.java:180)
at org.onap.aaf.cadi.configure.Agent.validate(Agent.java:1139)
at org.onap.aaf.cadi.configure.Agent.main(Agent.java:342)
Caused by: javax.net.ssl.SSLException: readHandshakeRecord
at java.base/sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1072)
at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:402)
at java.base/sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:567)
at java.base/sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185)
at java.base/sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(HttpsURLConnectionImpl.java:168)
at org.onap.aaf.cadi.http.HClient.send(HClient.java:148)
... 8 more
Suppressed: java.net.SocketException: Broken pipe (Write failed)
at java.base/java.net.SocketOutputStream.socketWrite0(Native Method)
at java.base/java.net.SocketOutputStream.socketWrite(SocketOutputStream.java:110)
at java.base/java.net.SocketOutputStream.write(SocketOutputStream.java:150)
at java.base/sun.security.ssl.SSLSocketOutputRecord.encodeAlert(SSLSocketOutputRecord.java:81)
at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:351)
at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:263)
at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:405)
... 12 more
Caused by: java.net.SocketException: Broken pipe (Write failed)
at java.base/java.net.SocketOutputStream.socketWrite0(Native Method)
at java.base/java.net.SocketOutputStream.socketWrite(SocketOutputStream.java:110)
at java.base/java.net.SocketOutputStream.write(SocketOutputStream.java:150)
at java.base/sun.security.ssl.SSLSocketOutputRecord.flush(SSLSocketOutputRecord.java:251)
at java.base/sun.security.ssl.HandshakeOutStream.flush(HandshakeOutStream.java:89)
at java.base/sun.security.ssl.CertificateVerify$T12CertificateVerifyProducer.produce(CertificateVerify.java:749)
at java.base/sun.security.ssl.SSLHandshake.produce(SSLHandshake.java:436)
at java.base/sun.security.ssl.ServerHelloDone$ServerHelloDoneConsumer.consume(ServerHelloDone.java:182)
at java.base/sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:392)
at java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:443)
at java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:421)
at java.base/sun.security.ssl.TransportContext.dispatch(TransportContext.java:177)
at java.base/sun.security.ssl.SSLTransport.decode(SSLTransport.java:164)
at java.base/sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1152)
at java.base/sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1063)
... 13 more
org.onap.aaf.cadi.LocatorException: No Entries found for 'https://aaf-locate.onap:8095/locate/onap.org.osaaf.aaf.service:2.1'
at org.onap.aaf.cadi.aaf.v2_0.AbsAAFLocator.best(AbsAAFLocator.java:239)
at org.onap.aaf.cadi.http.HMangr.best(HMangr.java:161)
at org.onap.aaf.cadi.aaf.v2_0.AAFConHttp.best(AAFConHttp.java:180)
at org.onap.aaf.cadi.configure.Agent.validate(Agent.java:1139)
at org.onap.aaf.cadi.configure.Agent.main(Agent.java:342)
Initialization complete
*** retrieving passwords for certificates
2022-09-30T15:45:40.945+0000: Error connecting https://aaf-locate.onap:8095/locate/onap.org.osaaf.aaf.service:2.1 for location.
org.onap.aaf.misc.env.APIException: Cannot connect to 'https://aaf-locate.onap:8095/locate/onap.org.osaaf.aaf.service:2.1' (Root URI: 'https://aaf-locate.onap:8095/locate/onap.org.osaaf.aaf.service:2.1')
at org.onap.aaf.cadi.http.HClient.send(HClient.java:159)
at org.onap.aaf.cadi.aaf.v2_0.AAFLocator.refresh(AAFLocator.java:145)
at org.onap.aaf.cadi.aaf.v2_0.AbsAAFLocator._refresh(AbsAAFLocator.java:176)
at org.onap.aaf.cadi.aaf.v2_0.AbsAAFLocator.hasItems(AbsAAFLocator.java:213)
at org.onap.aaf.cadi.aaf.v2_0.AbsAAFLocator.best(AbsAAFLocator.java:238)
at org.onap.aaf.cadi.http.HMangr.best(HMangr.java:161)
at org.onap.aaf.cadi.aaf.v2_0.AAFConHttp.best(AAFConHttp.java:180)
at org.onap.aaf.cadi.configure.Agent.validate(Agent.java:1139)
at org.onap.aaf.cadi.configure.Agent.main(Agent.java:342)
Caused by: javax.net.ssl.SSLException: readHandshakeRecord
at java.base/sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1072)
at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:402)
at java.base/sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:567)
at java.base/sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185)
at java.base/sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(HttpsURLConnectionImpl.java:168)
at org.onap.aaf.cadi.http.HClient.send(HClient.java:148)
... 8 more
Suppressed: java.net.SocketException: Broken pipe (Write failed)
at java.base/java.net.SocketOutputStream.socketWrite0(Native Method)
at java.base/java.net.SocketOutputStream.socketWrite(SocketOutputStream.java:110)
at java.base/java.net.SocketOutputStream.write(SocketOutputStream.java:150)
at java.base/sun.security.ssl.SSLSocketOutputRecord.encodeAlert(SSLSocketOutputRecord.java:81)
at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:351)
at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:263)
at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:405)
... 12 more
Caused by: java.net.SocketException: Broken pipe (Write failed)
at java.base/java.net.SocketOutputStream.socketWrite0(Native Method)
at java.base/java.net.SocketOutputStream.socketWrite(SocketOutputStream.java:110)
at java.base/java.net.SocketOutputStream.write(SocketOutputStream.java:150)
at java.base/sun.security.ssl.SSLSocketOutputRecord.flush(SSLSocketOutputRecord.java:251)
at java.base/sun.security.ssl.HandshakeOutStream.flush(HandshakeOutStream.java:89)
at java.base/sun.security.ssl.CertificateVerify$T12CertificateVerifyProducer.produce(CertificateVerify.java:749)
at java.base/sun.security.ssl.SSLHandshake.produce(SSLHandshake.java:436)
at java.base/sun.security.ssl.ServerHelloDone$ServerHelloDoneConsumer.consume(ServerHelloDone.java:182)
at java.base/sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:392)
at java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:443)
at java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:421)
at java.base/sun.security.ssl.TransportContext.dispatch(TransportContext.java:177)
at java.base/sun.security.ssl.SSLTransport.decode(SSLTransport.java:164)
at java.base/sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1152)
at java.base/sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1063)
... 13 more
org.onap.aaf.cadi.LocatorException: No Entries found for 'https://aaf-locate.onap:8095/locate/onap.org.osaaf.aaf.service:2.1'
at org.onap.aaf.cadi.aaf.v2_0.AbsAAFLocator.best(AbsAAFLocator.java:239)
at org.onap.aaf.cadi.http.HMangr.best(HMangr.java:161)
at org.onap.aaf.cadi.aaf.v2_0.AAFConHttp.best(AAFConHttp.java:180)
at org.onap.aaf.cadi.configure.Agent.validate(Agent.java:1139)
at org.onap.aaf.cadi.configure.Agent.main(Agent.java:342)
*** password retrieval succeeded
*** change jks password into shell safe one
Warning:
The JKS keystore uses a proprietary format. It is recommended to migrate to PKCS12 which is an industry standard format using "keytool -importkeystore -srckeystore org.onap.dmaap.mr.jks -destkeystore org.onap.dmaap.mr.jks -deststoretype pkcs12".
*** set key password as same password as jks keystore password
Warning:
The JKS keystore uses a proprietary format. It is recommended to migrate to PKCS12 which is an industry standard format using "keytool -importkeystore -srckeystore org.onap.dmaap.mr.jks -destkeystore org.onap.dmaap.mr.jks -deststoretype pkcs12".
*** store the passwords
*** give ownership of files to the user