2021-04-11 03:15:16,618 main INFO Log4j appears to be running in a Servlet environment, but there's no log4j-web module available. If you want better web container support, please add the log4j-web JAR to your web archive or server lib directory. 2021-04-11 03:15:20,118 main INFO Log4j appears to be running in a Servlet environment, but there's no log4j-web module available. If you want better web container support, please add the log4j-web JAR to your web archive or server lib directory. . ____ _ __ _ _ /\\ / ___'_ __ _ _(_)_ __ __ _ \ \ \ \ ( ( )\___ | '_ | '_| | '_ \/ _` | \ \ \ \ \\/ ___)| |_)| | | | | || (_| | ) ) ) ) ' |____| .__|_| |_|_| |_\__, | / / / / =========|_|==============|___/=/_/_/_/ :: Spring Boot :: (v2.2.4.RELEASE) 2021-04-11 03:15:23.011  INFO 1 [ main] o.s.b.SpringApplication  : No active profile set, falling back to default profiles: default 2021-04-11 03:15:35.013 DEBUG 1 [ main] o.j.l.LoggerProviders  : Logging Provider: org.jboss.logging.Log4j2LoggerProvider 2021-04-11 03:15:36.018  INFO 1 [ main] o.o.o.c.c.c.CmpServersConfig  : Loading initial configuration 2021-04-11 03:15:36.810  INFO 1 [ main] o.o.o.c.c.c.CmpServersConfig  : CMP Servers configuration successfully loaded from file /etc/onap/oom/certservice/cmpServers.json 2021-04-11 03:15:51.216  INFO 1 [ main] o.s.b.StartupInfoLogger  : Started CertServiceApplication in 36.603 seconds (JVM running for 43.868) 2021-04-11 03:34:33.204  INFO 1 [nio-8443-exec-7] o.o.o.c.a.CertificationController  : Received certificate signing request for CA named: RA 2021-04-11 03:34:33.217 DEBUG 1 [nio-8443-exec-7] .o.c.c.Pkcs10CertificationRequestFactory : Creating certification request from pem object 2021-04-11 03:34:33.305 DEBUG 1 [nio-8443-exec-7] o.o.o.c.c.CertificationModelFactory  : Received CSR meta data: Subject: { L=San-Francisco,OU=ONAP,O=Linux-Foundation,ST=California,C=US,CN=sdnc.simpledemo.onap.org ,SANs: [] } 2021-04-11 03:34:33.311 DEBUG 1 [nio-8443-exec-7] o.o.o.c.c.CertificationModelFactory  : Found server for given CA name: Cmpv2Server{authentication=Authentication{ iak=*****, rv=*****}, caMode=RA, caName='RA', issuerDN='CN=ManagementCA', url='http://ejbca:8080/ejbca/publicweb/cmp/cmpRA'} 2021-04-11 03:34:33.403  INFO 1 [nio-8443-exec-7] o.o.o.c.c.CertificationModelFactory  : Sending sign request for certification model for CA named: RA, and certificate signing request: Subject: { L=San-Francisco,OU=ONAP,O=Linux-Foundation,ST=California,C=US,CN=sdnc.simpledemo.onap.org ,SANs: [] } 2021-04-11 03:34:33.408  INFO 1 [nio-8443-exec-7] o.o.o.c.c.i.CmpClientImpl  : Validate before creating Certificate Request for CA :RA in Mode RA 2021-04-11 03:34:33.500  INFO 1 [nio-8443-exec-7] o.o.o.c.c.i.CmpUtil  : Generating random integer 2021-04-11 03:34:33.501  INFO 1 [nio-8443-exec-7] o.o.o.c.c.i.CmpUtil  : Generating random array of bytes 2021-04-11 03:34:33.501  INFO 1 [nio-8443-exec-7] o.o.o.c.c.i.CmpUtil  : Generating random integer 2021-04-11 03:34:33.507  INFO 1 [nio-8443-exec-7] o.o.o.c.c.i.CmpMessageHelper  : Generating Extensions from Subject Alternative Names 2021-04-11 03:34:33.512  INFO 1 [nio-8443-exec-7] o.o.o.c.c.i.CmpMessageHelper  : Generating Optional Validity from Date objects 2021-04-11 03:34:33.627  INFO 1 [nio-8443-exec-7] o.o.o.c.c.i.CmpUtil  : Generating a Pki Header Builder 2021-04-11 03:34:33.707  INFO 1 [nio-8443-exec-7] o.o.o.c.c.i.CmpUtil  : Generating random array of bytes 2021-04-11 03:34:33.708  INFO 1 [nio-8443-exec-7] o.o.o.c.c.i.CmpUtil  : Generating random array of bytes 2021-04-11 03:34:33.804  INFO 1 [nio-8443-exec-7] o.o.o.c.c.i.CmpUtil  : Generating array of bytes representing PkiHeader and PkiBody 2021-04-11 03:34:35.329  INFO 1 [nio-8443-exec-7] o.o.o.c.c.i.CmpClientImpl  : Received response from Server 2021-04-11 03:34:35.403 DEBUG 1 [nio-8443-exec-7] o.o.o.c.c.i.CmpClientImpl  : Verifying signature of the response. 2021-04-11 03:34:35.408 DEBUG 1 [nio-8443-exec-7] o.o.o.c.c.i.CmpClientImpl  : Verifying PasswordBased Protection of the Response. 2021-04-11 03:34:35.410  INFO 1 [nio-8443-exec-7] o.o.o.c.c.i.CmpResponseValidationHelper  : Iteration count is: 1145 2021-04-11 03:34:35.410  INFO 1 [nio-8443-exec-7] o.o.o.c.c.i.CmpResponseValidationHelper  : One Way Function type is: 1.3.14.3.2.26 2021-04-11 03:34:35.413  INFO 1 [nio-8443-exec-7] o.o.o.c.c.i.CmpResponseValidationHelper  : Mac type is: 1.3.6.1.5.5.8.1.2 2021-04-11 03:34:35.413  INFO 1 [nio-8443-exec-7] o.o.o.c.c.i.CmpResponseValidationHelper  : Implicit Confirm on certificate from server. 2021-04-11 03:34:35.418  INFO 1 [nio-8443-exec-7] o.o.o.c.c.i.CmpClientImpl  : Verifying certificates returned as part of CertResponse. 2021-04-11 03:34:35.419 DEBUG 1 [nio-8443-exec-7] o.o.o.c.c.i.CmpResponseHelper  : Retrieving certificate of type class java.security.cert.X509Certificate from byte array. 2021-04-11 03:34:35.419 DEBUG 1 [nio-8443-exec-7] o.o.o.c.c.i.CmpResponseHelper  : Parsing X509Certificate from bytes with provider BC 2021-04-11 03:34:35.420 DEBUG 1 [nio-8443-exec-7] o.o.o.c.c.i.CmpResponseHelper  : Creating certificate Factory to generate certificate using provider BC 2021-04-11 03:34:35.599 DEBUG 1 [nio-8443-exec-7] o.o.o.c.c.i.CmpResponseHelper  : Retrieving certificate of type class java.security.cert.X509Certificate from byte array. 2021-04-11 03:34:35.600 DEBUG 1 [nio-8443-exec-7] o.o.o.c.c.i.CmpResponseHelper  : Parsing X509Certificate from bytes with provider BC 2021-04-11 03:34:35.601 DEBUG 1 [nio-8443-exec-7] o.o.o.c.c.i.CmpResponseHelper  : Creating certificate Factory to generate certificate using provider BC 2021-04-11 03:34:35.609 DEBUG 1 [nio-8443-exec-7] o.o.o.c.c.i.CmpResponseHelper  : Verifying certificate CN=sdnc.simpledemo.onap.org,OU=ONAP,O=Linux-Foundation,L=San-Francisco,ST=California,C=US as part of cert chain with certificate UID=c-0baf59a66f9bdefb9,CN=ManagementCA,O=EJBCA Container Quickstart 2021-04-11 03:34:35.713 DEBUG 1 [nio-8443-exec-7] o.o.o.c.c.i.CmpResponseHelper  : Certificate verify result:PKIXCertPathValidatorResult: [ Trust Anchor: [ Trusted CA cert: [0] Version: 3 SerialNumber: 715634685321942370309191937450788463314556695781 IssuerDN: UID=c-0baf59a66f9bdefb9,CN=ManagementCA,O=EJBCA Container Quickstart Start Date: Sun Apr 11 03:12:42 UTC 2021 Final Date: Fri Apr 11 03:12:42 UTC 2031 SubjectDN: UID=c-0baf59a66f9bdefb9,CN=ManagementCA,O=EJBCA Container Quickstart Public Key: RSA Public Key [fb:76:fc:93:79:48:42:3b:93:ce:5f:98:16:fc:8d:41:01:dd:1b:2f] modulus: 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 public exponent: 10001 Signature Algorithm: SHA256WITHRSA Signature: 5ef7cbde5c186fa59b5093cc3ecb7f52e4859d41 59e4a2bec8fdf4201b6cd644d79d41f2cb533e70 6d3ba3bec2f1d6e3f9e29968371948d937e1d4cc 551f4af6764d138f1dd401dd17a1d7bbd151d6b4 75e93227e69c7e30cc7065269f027c4ffcf596f5 9622340c5223acadfd372b96dad6ab9f44e26ef6 e1ebe8227583b20786d9f31849877348204205a7 ae92d1b6a0e4772286c3ead75118a059e8673452 91d55a143bce834df9bf6ee90063011abaac22fe ac0496a016e4926a6dc384b6e245667827245bf5 8297e29bf9877fe62b2c6a7736deb4d55510ea4f 852944e3b0cf0a817be5dccb58794f75a4b48a93 8f19160c615f8d8d1b24f7d2b6607465b0ef8ecd c8ce94f93a8c159561bf156f524b4dda90ba48db 34f6b599b2af553dcee9290e919fec57d2a81ebd 7fd7456df7365d115fb7ac62ff7990fc42c6c469 780b3f87d4828a21f4b264803a4d6e94a6cfc94c f667177926ac9a97e2a853790a020ae3c8ffd531 efabce4976e63eb8ecc05d3d31f39c11143e5c49 346206d3 Extensions: critical(true) BasicConstraints: isCa(true) critical(false) 2.5.29.35 value = Sequence Tagged [0] IMPLICIT DER Octet String[20] critical(false) 2.5.29.14 value = DER Octet String[20] critical(true) KeyUsage: 0x86 Policy Tree: null Subject Public Key: RSA Public Key [5c:03:61:41:89:12:c4:a1:d5:6c:16:e6:64:d6:3a:53:42:34:69:60] modulus: 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 public exponent: 10001 ] 2021-04-11 04:26:27.388  INFO 1 [nio-8443-exec-9] o.o.o.c.a.CertificationController  : Received certificate signing request for CA named: RA 2021-04-11 04:26:27.389 DEBUG 1 [nio-8443-exec-9] .o.c.c.Pkcs10CertificationRequestFactory : Creating certification request from pem object 2021-04-11 04:26:27.393 DEBUG 1 [nio-8443-exec-9] o.o.o.c.c.CertificationModelFactory  : Received CSR meta data: Subject: { L=San-Francisco,OU=ONAP,O=Linux-Foundation,ST=California,C=US,CN=pnf-simulator ,SANs: [pnf-simulator] } 2021-04-11 04:26:27.394 DEBUG 1 [nio-8443-exec-9] o.o.o.c.c.CertificationModelFactory  : Found server for given CA name: Cmpv2Server{authentication=Authentication{ iak=*****, rv=*****}, caMode=RA, caName='RA', issuerDN='CN=ManagementCA', url='http://ejbca:8080/ejbca/publicweb/cmp/cmpRA'} 2021-04-11 04:26:27.395  INFO 1 [nio-8443-exec-9] o.o.o.c.c.CertificationModelFactory  : Sending sign request for certification model for CA named: RA, and certificate signing request: Subject: { L=San-Francisco,OU=ONAP,O=Linux-Foundation,ST=California,C=US,CN=pnf-simulator ,SANs: [pnf-simulator] } 2021-04-11 04:26:27.396  INFO 1 [nio-8443-exec-9] o.o.o.c.c.i.CmpClientImpl  : Validate before creating Certificate Request for CA :RA in Mode RA 2021-04-11 04:26:27.396  INFO 1 [nio-8443-exec-9] o.o.o.c.c.i.CmpUtil  : Generating random integer 2021-04-11 04:26:27.397  INFO 1 [nio-8443-exec-9] o.o.o.c.c.i.CmpMessageHelper  : Generating Extensions from Subject Alternative Names 2021-04-11 04:26:27.397  INFO 1 [nio-8443-exec-9] o.o.o.c.c.i.CmpMessageHelper  : Generating Optional Validity from Date objects 2021-04-11 04:26:27.407  INFO 1 [nio-8443-exec-9] o.o.o.c.c.i.CmpUtil  : Generating a Pki Header Builder 2021-04-11 04:26:27.408  INFO 1 [nio-8443-exec-9] o.o.o.c.c.i.CmpUtil  : Generating random array of bytes 2021-04-11 04:26:27.408  INFO 1 [nio-8443-exec-9] o.o.o.c.c.i.CmpUtil  : Generating random array of bytes 2021-04-11 04:26:27.411  INFO 1 [nio-8443-exec-9] o.o.o.c.c.i.CmpUtil  : Generating array of bytes representing PkiHeader and PkiBody 2021-04-11 04:26:27.764  INFO 1 [nio-8443-exec-9] o.o.o.c.c.i.CmpClientImpl  : Received response from Server 2021-04-11 04:26:27.766 DEBUG 1 [nio-8443-exec-9] o.o.o.c.c.i.CmpClientImpl  : Verifying signature of the response. 2021-04-11 04:26:27.771 DEBUG 1 [nio-8443-exec-9] o.o.o.c.c.i.CmpClientImpl  : Verifying PasswordBased Protection of the Response. 2021-04-11 04:26:27.772  INFO 1 [nio-8443-exec-9] o.o.o.c.c.i.CmpResponseValidationHelper  : Iteration count is: 1145 2021-04-11 04:26:27.772  INFO 1 [nio-8443-exec-9] o.o.o.c.c.i.CmpResponseValidationHelper  : One Way Function type is: 1.3.14.3.2.26 2021-04-11 04:26:27.774  INFO 1 [nio-8443-exec-9] o.o.o.c.c.i.CmpResponseValidationHelper  : Mac type is: 1.3.6.1.5.5.8.1.2 2021-04-11 04:26:27.774  INFO 1 [nio-8443-exec-9] o.o.o.c.c.i.CmpResponseValidationHelper  : Implicit Confirm on certificate from server. 2021-04-11 04:26:27.775  INFO 1 [nio-8443-exec-9] o.o.o.c.c.i.CmpClientImpl  : Verifying certificates returned as part of CertResponse. 2021-04-11 04:26:27.775 DEBUG 1 [nio-8443-exec-9] o.o.o.c.c.i.CmpResponseHelper  : Retrieving certificate of type class java.security.cert.X509Certificate from byte array. 2021-04-11 04:26:27.776 DEBUG 1 [nio-8443-exec-9] o.o.o.c.c.i.CmpResponseHelper  : Parsing X509Certificate from bytes with provider BC 2021-04-11 04:26:27.776 DEBUG 1 [nio-8443-exec-9] o.o.o.c.c.i.CmpResponseHelper  : Creating certificate Factory to generate certificate using provider BC 2021-04-11 04:26:27.800 DEBUG 1 [nio-8443-exec-9] o.o.o.c.c.i.CmpResponseHelper  : Retrieving certificate of type class java.security.cert.X509Certificate from byte array. 2021-04-11 04:26:27.801 DEBUG 1 [nio-8443-exec-9] o.o.o.c.c.i.CmpResponseHelper  : Parsing X509Certificate from bytes with provider BC 2021-04-11 04:26:27.802 DEBUG 1 [nio-8443-exec-9] o.o.o.c.c.i.CmpResponseHelper  : Creating certificate Factory to generate certificate using provider BC 2021-04-11 04:26:27.804 DEBUG 1 [nio-8443-exec-9] o.o.o.c.c.i.CmpResponseHelper  : Verifying certificate CN=pnf-simulator,OU=ONAP,O=Linux-Foundation,L=San-Francisco,ST=California,C=US as part of cert chain with certificate UID=c-0baf59a66f9bdefb9,CN=ManagementCA,O=EJBCA Container Quickstart 2021-04-11 04:26:27.813 DEBUG 1 [nio-8443-exec-9] o.o.o.c.c.i.CmpResponseHelper  : Certificate verify result:PKIXCertPathValidatorResult: [ Trust Anchor: [ Trusted CA cert: [0] Version: 3 SerialNumber: 715634685321942370309191937450788463314556695781 IssuerDN: UID=c-0baf59a66f9bdefb9,CN=ManagementCA,O=EJBCA Container Quickstart Start Date: Sun Apr 11 03:12:42 UTC 2021 Final Date: Fri Apr 11 03:12:42 UTC 2031 SubjectDN: UID=c-0baf59a66f9bdefb9,CN=ManagementCA,O=EJBCA Container Quickstart Public Key: RSA Public Key [fb:76:fc:93:79:48:42:3b:93:ce:5f:98:16:fc:8d:41:01:dd:1b:2f] modulus: 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 public exponent: 10001 Signature Algorithm: SHA256WITHRSA Signature: 5ef7cbde5c186fa59b5093cc3ecb7f52e4859d41 59e4a2bec8fdf4201b6cd644d79d41f2cb533e70 6d3ba3bec2f1d6e3f9e29968371948d937e1d4cc 551f4af6764d138f1dd401dd17a1d7bbd151d6b4 75e93227e69c7e30cc7065269f027c4ffcf596f5 9622340c5223acadfd372b96dad6ab9f44e26ef6 e1ebe8227583b20786d9f31849877348204205a7 ae92d1b6a0e4772286c3ead75118a059e8673452 91d55a143bce834df9bf6ee90063011abaac22fe ac0496a016e4926a6dc384b6e245667827245bf5 8297e29bf9877fe62b2c6a7736deb4d55510ea4f 852944e3b0cf0a817be5dccb58794f75a4b48a93 8f19160c615f8d8d1b24f7d2b6607465b0ef8ecd c8ce94f93a8c159561bf156f524b4dda90ba48db 34f6b599b2af553dcee9290e919fec57d2a81ebd 7fd7456df7365d115fb7ac62ff7990fc42c6c469 780b3f87d4828a21f4b264803a4d6e94a6cfc94c f667177926ac9a97e2a853790a020ae3c8ffd531 efabce4976e63eb8ecc05d3d31f39c11143e5c49 346206d3 Extensions: critical(true) BasicConstraints: isCa(true) critical(false) 2.5.29.35 value = Sequence Tagged [0] IMPLICIT DER Octet String[20] critical(false) 2.5.29.14 value = DER Octet String[20] critical(true) KeyUsage: 0x86 Policy Tree: null Subject Public Key: RSA Public Key [d6:62:a7:98:8d:a2:51:d3:05:cb:2d:1c:2c:f3:9d:7a:97:c6:3c:b1] modulus: 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 public exponent: 10001 ] 2021-04-11 04:29:28.108  INFO 1 [nio-8443-exec-6] o.o.o.c.a.CertificationController  : Received certificate signing request for CA named: RA 2021-04-11 04:29:28.109 DEBUG 1 [nio-8443-exec-6] .o.c.c.Pkcs10CertificationRequestFactory : Creating certification request from pem object 2021-04-11 04:29:28.110 DEBUG 1 [nio-8443-exec-6] o.o.o.c.c.CertificationModelFactory  : Received CSR meta data: Subject: { L=San-Francisco,OU=ONAP,O=Linux-Foundation,ST=California,C=US,CN=dcae-ves-collector-cmpv2-cert ,SANs: [dcae-ves-collector-cmpv2-cert, ves-collector-cmpv2-cert, ves-cmpv2-cert] } 2021-04-11 04:29:28.111 DEBUG 1 [nio-8443-exec-6] o.o.o.c.c.CertificationModelFactory  : Found server for given CA name: Cmpv2Server{authentication=Authentication{ iak=*****, rv=*****}, caMode=RA, caName='RA', issuerDN='CN=ManagementCA', url='http://ejbca:8080/ejbca/publicweb/cmp/cmpRA'} 2021-04-11 04:29:28.111  INFO 1 [nio-8443-exec-6] o.o.o.c.c.CertificationModelFactory  : Sending sign request for certification model for CA named: RA, and certificate signing request: Subject: { L=San-Francisco,OU=ONAP,O=Linux-Foundation,ST=California,C=US,CN=dcae-ves-collector-cmpv2-cert ,SANs: [dcae-ves-collector-cmpv2-cert, ves-collector-cmpv2-cert, ves-cmpv2-cert] } 2021-04-11 04:29:28.112  INFO 1 [nio-8443-exec-6] o.o.o.c.c.i.CmpClientImpl  : Validate before creating Certificate Request for CA :RA in Mode RA 2021-04-11 04:29:28.112  INFO 1 [nio-8443-exec-6] o.o.o.c.c.i.CmpUtil  : Generating random integer 2021-04-11 04:29:28.113  INFO 1 [nio-8443-exec-6] o.o.o.c.c.i.CmpMessageHelper  : Generating Extensions from Subject Alternative Names 2021-04-11 04:29:28.113  INFO 1 [nio-8443-exec-6] o.o.o.c.c.i.CmpMessageHelper  : Generating Optional Validity from Date objects 2021-04-11 04:29:28.200  INFO 1 [nio-8443-exec-6] o.o.o.c.c.i.CmpUtil  : Generating a Pki Header Builder 2021-04-11 04:29:28.201  INFO 1 [nio-8443-exec-6] o.o.o.c.c.i.CmpUtil  : Generating random array of bytes 2021-04-11 04:29:28.202  INFO 1 [nio-8443-exec-6] o.o.o.c.c.i.CmpUtil  : Generating random array of bytes 2021-04-11 04:29:28.204  INFO 1 [nio-8443-exec-6] o.o.o.c.c.i.CmpUtil  : Generating array of bytes representing PkiHeader and PkiBody 2021-04-11 04:29:28.429  INFO 1 [nio-8443-exec-6] o.o.o.c.c.i.CmpClientImpl  : Received response from Server 2021-04-11 04:29:28.430 DEBUG 1 [nio-8443-exec-6] o.o.o.c.c.i.CmpClientImpl  : Verifying signature of the response. 2021-04-11 04:29:28.432 DEBUG 1 [nio-8443-exec-6] o.o.o.c.c.i.CmpClientImpl  : Verifying PasswordBased Protection of the Response. 2021-04-11 04:29:28.432  INFO 1 [nio-8443-exec-6] o.o.o.c.c.i.CmpResponseValidationHelper  : Iteration count is: 1145 2021-04-11 04:29:28.433  INFO 1 [nio-8443-exec-6] o.o.o.c.c.i.CmpResponseValidationHelper  : One Way Function type is: 1.3.14.3.2.26 2021-04-11 04:29:28.434  INFO 1 [nio-8443-exec-6] o.o.o.c.c.i.CmpResponseValidationHelper  : Mac type is: 1.3.6.1.5.5.8.1.2 2021-04-11 04:29:28.435  INFO 1 [nio-8443-exec-6] o.o.o.c.c.i.CmpResponseValidationHelper  : Implicit Confirm on certificate from server. 2021-04-11 04:29:28.499  INFO 1 [nio-8443-exec-6] o.o.o.c.c.i.CmpClientImpl  : Verifying certificates returned as part of CertResponse. 2021-04-11 04:29:28.500 DEBUG 1 [nio-8443-exec-6] o.o.o.c.c.i.CmpResponseHelper  : Retrieving certificate of type class java.security.cert.X509Certificate from byte array. 2021-04-11 04:29:28.501 DEBUG 1 [nio-8443-exec-6] o.o.o.c.c.i.CmpResponseHelper  : Parsing X509Certificate from bytes with provider BC 2021-04-11 04:29:28.501 DEBUG 1 [nio-8443-exec-6] o.o.o.c.c.i.CmpResponseHelper  : Creating certificate Factory to generate certificate using provider BC 2021-04-11 04:29:28.502 DEBUG 1 [nio-8443-exec-6] o.o.o.c.c.i.CmpResponseHelper  : Retrieving certificate of type class java.security.cert.X509Certificate from byte array. 2021-04-11 04:29:28.502 DEBUG 1 [nio-8443-exec-6] o.o.o.c.c.i.CmpResponseHelper  : Parsing X509Certificate from bytes with provider BC 2021-04-11 04:29:28.503 DEBUG 1 [nio-8443-exec-6] o.o.o.c.c.i.CmpResponseHelper  : Creating certificate Factory to generate certificate using provider BC 2021-04-11 04:29:28.504 DEBUG 1 [nio-8443-exec-6] o.o.o.c.c.i.CmpResponseHelper  : Verifying certificate CN=dcae-ves-collector-cmpv2-cert,OU=ONAP,O=Linux-Foundation,L=San-Francisco,ST=California,C=US as part of cert chain with certificate UID=c-0baf59a66f9bdefb9,CN=ManagementCA,O=EJBCA Container Quickstart 2021-04-11 04:29:28.508 DEBUG 1 [nio-8443-exec-6] o.o.o.c.c.i.CmpResponseHelper  : Certificate verify result:PKIXCertPathValidatorResult: [ Trust Anchor: [ Trusted CA cert: [0] Version: 3 SerialNumber: 715634685321942370309191937450788463314556695781 IssuerDN: UID=c-0baf59a66f9bdefb9,CN=ManagementCA,O=EJBCA Container Quickstart Start Date: Sun Apr 11 03:12:42 UTC 2021 Final Date: Fri Apr 11 03:12:42 UTC 2031 SubjectDN: UID=c-0baf59a66f9bdefb9,CN=ManagementCA,O=EJBCA Container Quickstart Public Key: RSA Public Key [fb:76:fc:93:79:48:42:3b:93:ce:5f:98:16:fc:8d:41:01:dd:1b:2f] modulus: a2889dc7ea53df6542536f067fdc4b3d2d40e2e88159afbedb8d6af839f36f583e535410a23fbf20e12af041af82e10cdf54f6f4dd81f23cf1ee74b6874b9182eedc5105476fd822fb10514307c44bd7de415e968811220af37599e60240746a90b33a2aa299124357ae64b2c7a873929743f7b0d2fc147b7c0b0b647a63dbbc6e885955f8753184dc26a36cdb6c297c4287fe92118928756e100ad9fb4e2aa25ebfd9a8976d0a59687780956ffde6f4de05d9a76bc844cabde5aa63fc46cf6aa70fc840afb43a01b757983ca8832e3747c2c2715c62c6e69b8e540f772d073579e3f46a2fe4d28f9709e6dfd12130039e7e1d92a5edee00d7b716706d2db2990ed5a98c7a2abf39effcfba7e555eb42d8d42fb3d80b90d589f524083cd8446069b5d9f967322e01e8039a8c8b940a0a984ffbe8a3054f4393123382d1aee9f863e319b3c775b05a3433995e248f88851aa57aea6cc65e88bbd7217acd97a7515e1c4080dd36580c9d8313759c33eab9f9b8fbbcebca8ba374556b4d4ddd9f01 public exponent: 10001 Signature Algorithm: SHA256WITHRSA Signature: 5ef7cbde5c186fa59b5093cc3ecb7f52e4859d41 59e4a2bec8fdf4201b6cd644d79d41f2cb533e70 6d3ba3bec2f1d6e3f9e29968371948d937e1d4cc 551f4af6764d138f1dd401dd17a1d7bbd151d6b4 75e93227e69c7e30cc7065269f027c4ffcf596f5 9622340c5223acadfd372b96dad6ab9f44e26ef6 e1ebe8227583b20786d9f31849877348204205a7 ae92d1b6a0e4772286c3ead75118a059e8673452 91d55a143bce834df9bf6ee90063011abaac22fe ac0496a016e4926a6dc384b6e245667827245bf5 8297e29bf9877fe62b2c6a7736deb4d55510ea4f 852944e3b0cf0a817be5dccb58794f75a4b48a93 8f19160c615f8d8d1b24f7d2b6607465b0ef8ecd c8ce94f93a8c159561bf156f524b4dda90ba48db 34f6b599b2af553dcee9290e919fec57d2a81ebd 7fd7456df7365d115fb7ac62ff7990fc42c6c469 780b3f87d4828a21f4b264803a4d6e94a6cfc94c f667177926ac9a97e2a853790a020ae3c8ffd531 efabce4976e63eb8ecc05d3d31f39c11143e5c49 346206d3 Extensions: critical(true) BasicConstraints: isCa(true) critical(false) 2.5.29.35 value = Sequence Tagged [0] IMPLICIT DER Octet String[20] critical(false) 2.5.29.14 value = DER Octet String[20] critical(true) KeyUsage: 0x86 Policy Tree: null Subject Public Key: RSA Public Key [73:db:97:f5:5e:91:9d:94:48:3e:7a:8f:75:ec:cf:0e:89:3e:3d:4a] modulus: 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 public exponent: 10001 ] 2021-04-11 04:31:20.532  INFO 1 [io-8443-exec-10] o.o.o.c.a.CertificationController  : Received certificate signing request for CA named: RA 2021-04-11 04:31:20.534 DEBUG 1 [io-8443-exec-10] .o.c.c.Pkcs10CertificationRequestFactory : Creating certification request from pem object 2021-04-11 04:31:20.536 DEBUG 1 [io-8443-exec-10] o.o.o.c.c.CertificationModelFactory  : Received CSR meta data: Subject: { L=San-Francisco,OU=ONAP,O=Linux-Foundation,ST=California,C=US,CN=dcae-ves-collector-cmpv2-cert-wrong-sans ,SANs: [wrong-sans] } 2021-04-11 04:31:20.537 DEBUG 1 [io-8443-exec-10] o.o.o.c.c.CertificationModelFactory  : Found server for given CA name: Cmpv2Server{authentication=Authentication{ iak=*****, rv=*****}, caMode=RA, caName='RA', issuerDN='CN=ManagementCA', url='http://ejbca:8080/ejbca/publicweb/cmp/cmpRA'} 2021-04-11 04:31:20.537  INFO 1 [io-8443-exec-10] o.o.o.c.c.CertificationModelFactory  : Sending sign request for certification model for CA named: RA, and certificate signing request: Subject: { L=San-Francisco,OU=ONAP,O=Linux-Foundation,ST=California,C=US,CN=dcae-ves-collector-cmpv2-cert-wrong-sans ,SANs: [wrong-sans] } 2021-04-11 04:31:20.537  INFO 1 [io-8443-exec-10] o.o.o.c.c.i.CmpClientImpl  : Validate before creating Certificate Request for CA :RA in Mode RA 2021-04-11 04:31:20.538  INFO 1 [io-8443-exec-10] o.o.o.c.c.i.CmpUtil  : Generating random integer 2021-04-11 04:31:20.538  INFO 1 [io-8443-exec-10] o.o.o.c.c.i.CmpMessageHelper  : Generating Extensions from Subject Alternative Names 2021-04-11 04:31:20.538  INFO 1 [io-8443-exec-10] o.o.o.c.c.i.CmpMessageHelper  : Generating Optional Validity from Date objects 2021-04-11 04:31:20.542  INFO 1 [io-8443-exec-10] o.o.o.c.c.i.CmpUtil  : Generating a Pki Header Builder 2021-04-11 04:31:20.543  INFO 1 [io-8443-exec-10] o.o.o.c.c.i.CmpUtil  : Generating random array of bytes 2021-04-11 04:31:20.543  INFO 1 [io-8443-exec-10] o.o.o.c.c.i.CmpUtil  : Generating random array of bytes 2021-04-11 04:31:20.544  INFO 1 [io-8443-exec-10] o.o.o.c.c.i.CmpUtil  : Generating array of bytes representing PkiHeader and PkiBody 2021-04-11 04:31:20.757  INFO 1 [io-8443-exec-10] o.o.o.c.c.i.CmpClientImpl  : Received response from Server 2021-04-11 04:31:20.758 DEBUG 1 [io-8443-exec-10] o.o.o.c.c.i.CmpClientImpl  : Verifying signature of the response. 2021-04-11 04:31:20.759 DEBUG 1 [io-8443-exec-10] o.o.o.c.c.i.CmpClientImpl  : Verifying PasswordBased Protection of the Response. 2021-04-11 04:31:20.760  INFO 1 [io-8443-exec-10] o.o.o.c.c.i.CmpResponseValidationHelper  : Iteration count is: 1145 2021-04-11 04:31:20.760  INFO 1 [io-8443-exec-10] o.o.o.c.c.i.CmpResponseValidationHelper  : One Way Function type is: 1.3.14.3.2.26 2021-04-11 04:31:20.762  INFO 1 [io-8443-exec-10] o.o.o.c.c.i.CmpResponseValidationHelper  : Mac type is: 1.3.6.1.5.5.8.1.2 2021-04-11 04:31:20.763  INFO 1 [io-8443-exec-10] o.o.o.c.c.i.CmpResponseValidationHelper  : Implicit Confirm on certificate from server. 2021-04-11 04:31:20.763  INFO 1 [io-8443-exec-10] o.o.o.c.c.i.CmpClientImpl  : Verifying certificates returned as part of CertResponse. 2021-04-11 04:31:20.763 DEBUG 1 [io-8443-exec-10] o.o.o.c.c.i.CmpResponseHelper  : Retrieving certificate of type class java.security.cert.X509Certificate from byte array. 2021-04-11 04:31:20.764 DEBUG 1 [io-8443-exec-10] o.o.o.c.c.i.CmpResponseHelper  : Parsing X509Certificate from bytes with provider BC 2021-04-11 04:31:20.764 DEBUG 1 [io-8443-exec-10] o.o.o.c.c.i.CmpResponseHelper  : Creating certificate Factory to generate certificate using provider BC 2021-04-11 04:31:20.765 DEBUG 1 [io-8443-exec-10] o.o.o.c.c.i.CmpResponseHelper  : Retrieving certificate of type class java.security.cert.X509Certificate from byte array. 2021-04-11 04:31:20.765 DEBUG 1 [io-8443-exec-10] o.o.o.c.c.i.CmpResponseHelper  : Parsing X509Certificate from bytes with provider BC 2021-04-11 04:31:20.765 DEBUG 1 [io-8443-exec-10] o.o.o.c.c.i.CmpResponseHelper  : Creating certificate Factory to generate certificate using provider BC 2021-04-11 04:31:20.766 DEBUG 1 [io-8443-exec-10] o.o.o.c.c.i.CmpResponseHelper  : Verifying certificate CN=dcae-ves-collector-cmpv2-cert-wrong-sans,OU=ONAP,O=Linux-Foundation,L=San-Francisco,ST=California,C=US as part of cert chain with certificate UID=c-0baf59a66f9bdefb9,CN=ManagementCA,O=EJBCA Container Quickstart 2021-04-11 04:31:20.769 DEBUG 1 [io-8443-exec-10] o.o.o.c.c.i.CmpResponseHelper  : Certificate verify result:PKIXCertPathValidatorResult: [ Trust Anchor: [ Trusted CA cert: [0] Version: 3 SerialNumber: 715634685321942370309191937450788463314556695781 IssuerDN: UID=c-0baf59a66f9bdefb9,CN=ManagementCA,O=EJBCA Container Quickstart Start Date: Sun Apr 11 03:12:42 UTC 2021 Final Date: Fri Apr 11 03:12:42 UTC 2031 SubjectDN: UID=c-0baf59a66f9bdefb9,CN=ManagementCA,O=EJBCA Container Quickstart Public Key: RSA Public Key [fb:76:fc:93:79:48:42:3b:93:ce:5f:98:16:fc:8d:41:01:dd:1b:2f] modulus: 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 public exponent: 10001 Signature Algorithm: SHA256WITHRSA Signature: 5ef7cbde5c186fa59b5093cc3ecb7f52e4859d41 59e4a2bec8fdf4201b6cd644d79d41f2cb533e70 6d3ba3bec2f1d6e3f9e29968371948d937e1d4cc 551f4af6764d138f1dd401dd17a1d7bbd151d6b4 75e93227e69c7e30cc7065269f027c4ffcf596f5 9622340c5223acadfd372b96dad6ab9f44e26ef6 e1ebe8227583b20786d9f31849877348204205a7 ae92d1b6a0e4772286c3ead75118a059e8673452 91d55a143bce834df9bf6ee90063011abaac22fe ac0496a016e4926a6dc384b6e245667827245bf5 8297e29bf9877fe62b2c6a7736deb4d55510ea4f 852944e3b0cf0a817be5dccb58794f75a4b48a93 8f19160c615f8d8d1b24f7d2b6607465b0ef8ecd c8ce94f93a8c159561bf156f524b4dda90ba48db 34f6b599b2af553dcee9290e919fec57d2a81ebd 7fd7456df7365d115fb7ac62ff7990fc42c6c469 780b3f87d4828a21f4b264803a4d6e94a6cfc94c f667177926ac9a97e2a853790a020ae3c8ffd531 efabce4976e63eb8ecc05d3d31f39c11143e5c49 346206d3 Extensions: critical(true) BasicConstraints: isCa(true) critical(false) 2.5.29.35 value = Sequence Tagged [0] IMPLICIT DER Octet String[20] critical(false) 2.5.29.14 value = DER Octet String[20] critical(true) KeyUsage: 0x86 Policy Tree: null Subject Public Key: RSA Public Key [e4:f3:46:80:09:3e:a8:fe:8e:fa:47:81:34:d9:05:5a:03:43:28:11] modulus: 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 public exponent: 10001 ]