2021-04-23 02:09:02,839 main INFO Log4j appears to be running in a Servlet environment, but there's no log4j-web module available. If you want better web container support, please add the log4j-web JAR to your web archive or server lib directory. 2021-04-23 02:09:06,934 main INFO Log4j appears to be running in a Servlet environment, but there's no log4j-web module available. If you want better web container support, please add the log4j-web JAR to your web archive or server lib directory. . ____ _ __ _ _ /\\ / ___'_ __ _ _(_)_ __ __ _ \ \ \ \ ( ( )\___ | '_ | '_| | '_ \/ _` | \ \ \ \ \\/ ___)| |_)| | | | | || (_| | ) ) ) ) ' |____| .__|_| |_|_| |_\__, | / / / / =========|_|==============|___/=/_/_/_/ :: Spring Boot :: (v2.2.4.RELEASE) 2021-04-23 02:09:09.629  INFO 1 [ main] o.s.b.SpringApplication  : No active profile set, falling back to default profiles: default 2021-04-23 02:09:21.034 DEBUG 1 [ main] o.j.l.LoggerProviders  : Logging Provider: org.jboss.logging.Log4j2LoggerProvider 2021-04-23 02:09:22.226  INFO 1 [ main] o.o.o.c.c.c.CmpServersConfig  : Loading initial configuration 2021-04-23 02:09:23.025  INFO 1 [ main] o.o.o.c.c.c.CmpServersConfig  : CMP Servers configuration successfully loaded from file /etc/onap/oom/certservice/cmpServers.json 2021-04-23 02:09:35.932  INFO 1 [ main] o.s.b.StartupInfoLogger  : Started CertServiceApplication in 35.18 seconds (JVM running for 41.52) 2021-04-23 02:21:46.533  INFO 1 [nio-8443-exec-5] o.o.o.c.a.CertificationController  : Received certificate signing request for CA named: RA 2021-04-23 02:21:46.547 DEBUG 1 [nio-8443-exec-5] .o.c.c.Pkcs10CertificationRequestFactory : Creating certification request from pem object 2021-04-23 02:21:46.658 DEBUG 1 [nio-8443-exec-5] o.o.o.c.c.CertificationModelFactory  : Received CSR meta data: Subject: { L=San-Francisco,OU=ONAP,O=Linux-Foundation,ST=California,C=US,CN=sdnc.simpledemo.onap.org ,SANs: [] } 2021-04-23 02:21:46.662 DEBUG 1 [nio-8443-exec-5] o.o.o.c.c.CertificationModelFactory  : Found server for given CA name: Cmpv2Server{authentication=Authentication{ iak=*****, rv=*****}, caMode=RA, caName='RA', issuerDN='CN=ManagementCA', url='http://ejbca:8080/ejbca/publicweb/cmp/cmpRA'} 2021-04-23 02:21:46.735  INFO 1 [nio-8443-exec-5] o.o.o.c.c.CertificationModelFactory  : Sending sign request for certification model for CA named: RA, and certificate signing request: Subject: { L=San-Francisco,OU=ONAP,O=Linux-Foundation,ST=California,C=US,CN=sdnc.simpledemo.onap.org ,SANs: [] } 2021-04-23 02:21:46.740  INFO 1 [nio-8443-exec-5] o.o.o.c.c.i.CmpClientImpl  : Validate before creating Certificate Request for CA :RA in Mode RA 2021-04-23 02:21:46.826  INFO 1 [nio-8443-exec-5] o.o.o.c.c.i.CmpUtil  : Generating random integer 2021-04-23 02:21:46.827  INFO 1 [nio-8443-exec-5] o.o.o.c.c.i.CmpUtil  : Generating random array of bytes 2021-04-23 02:21:46.828  INFO 1 [nio-8443-exec-5] o.o.o.c.c.i.CmpUtil  : Generating random integer 2021-04-23 02:21:46.838  INFO 1 [nio-8443-exec-5] o.o.o.c.c.i.CmpMessageHelper  : Generating Extensions from Subject Alternative Names 2021-04-23 02:21:46.926  INFO 1 [nio-8443-exec-5] o.o.o.c.c.i.CmpMessageHelper  : Generating Optional Validity from Date objects 2021-04-23 02:21:47.043  INFO 1 [nio-8443-exec-5] o.o.o.c.c.i.CmpUtil  : Generating a Pki Header Builder 2021-04-23 02:21:47.049  INFO 1 [nio-8443-exec-5] o.o.o.c.c.i.CmpUtil  : Generating random array of bytes 2021-04-23 02:21:47.049  INFO 1 [nio-8443-exec-5] o.o.o.c.c.i.CmpUtil  : Generating random array of bytes 2021-04-23 02:21:47.140  INFO 1 [nio-8443-exec-5] o.o.o.c.c.i.CmpUtil  : Generating array of bytes representing PkiHeader and PkiBody 2021-04-23 02:21:48.838  INFO 1 [nio-8443-exec-5] o.o.o.c.c.i.CmpClientImpl  : Received response from Server 2021-04-23 02:21:48.842 DEBUG 1 [nio-8443-exec-5] o.o.o.c.c.i.CmpClientImpl  : Verifying signature of the response. 2021-04-23 02:21:48.928 DEBUG 1 [nio-8443-exec-5] o.o.o.c.c.i.CmpClientImpl  : Verifying PasswordBased Protection of the Response. 2021-04-23 02:21:48.930  INFO 1 [nio-8443-exec-5] o.o.o.c.c.i.CmpResponseValidationHelper  : Iteration count is: 1606 2021-04-23 02:21:48.930  INFO 1 [nio-8443-exec-5] o.o.o.c.c.i.CmpResponseValidationHelper  : One Way Function type is: 1.3.14.3.2.26 2021-04-23 02:21:48.934  INFO 1 [nio-8443-exec-5] o.o.o.c.c.i.CmpResponseValidationHelper  : Mac type is: 1.3.6.1.5.5.8.1.2 2021-04-23 02:21:48.935  INFO 1 [nio-8443-exec-5] o.o.o.c.c.i.CmpResponseValidationHelper  : Implicit Confirm on certificate from server. 2021-04-23 02:21:49.026  INFO 1 [nio-8443-exec-5] o.o.o.c.c.i.CmpClientImpl  : Verifying certificates returned as part of CertResponse. 2021-04-23 02:21:49.028 DEBUG 1 [nio-8443-exec-5] o.o.o.c.c.i.CmpResponseHelper  : Retrieving certificate of type class java.security.cert.X509Certificate from byte array. 2021-04-23 02:21:49.029 DEBUG 1 [nio-8443-exec-5] o.o.o.c.c.i.CmpResponseHelper  : Parsing X509Certificate from bytes with provider BC 2021-04-23 02:21:49.029 DEBUG 1 [nio-8443-exec-5] o.o.o.c.c.i.CmpResponseHelper  : Creating certificate Factory to generate certificate using provider BC 2021-04-23 02:21:49.043 DEBUG 1 [nio-8443-exec-5] o.o.o.c.c.i.CmpResponseHelper  : Retrieving certificate of type class java.security.cert.X509Certificate from byte array. 2021-04-23 02:21:49.044 DEBUG 1 [nio-8443-exec-5] o.o.o.c.c.i.CmpResponseHelper  : Parsing X509Certificate from bytes with provider BC 2021-04-23 02:21:49.044 DEBUG 1 [nio-8443-exec-5] o.o.o.c.c.i.CmpResponseHelper  : Creating certificate Factory to generate certificate using provider BC 2021-04-23 02:21:49.128 DEBUG 1 [nio-8443-exec-5] o.o.o.c.c.i.CmpResponseHelper  : Verifying certificate CN=sdnc.simpledemo.onap.org,OU=ONAP,O=Linux-Foundation,L=San-Francisco,ST=California,C=US as part of cert chain with certificate UID=c-07e2fdfb81fffecfb,CN=ManagementCA,O=EJBCA Container Quickstart 2021-04-23 02:21:49.240 DEBUG 1 [nio-8443-exec-5] o.o.o.c.c.i.CmpResponseHelper  : Certificate verify result:PKIXCertPathValidatorResult: [ Trust Anchor: [ Trusted CA cert: [0] Version: 3 SerialNumber: 565980089967157409987209835597233243245652920660 IssuerDN: UID=c-07e2fdfb81fffecfb,CN=ManagementCA,O=EJBCA Container Quickstart Start Date: Fri Apr 23 02:05:34 UTC 2021 Final Date: Wed Apr 23 02:05:34 UTC 2031 SubjectDN: UID=c-07e2fdfb81fffecfb,CN=ManagementCA,O=EJBCA Container Quickstart Public Key: RSA Public Key [00:bd:4b:29:f5:6e:a0:86:ee:07:33:e1:8f:16:70:ca:f9:03:df:09] modulus: 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 public exponent: 10001 Signature Algorithm: SHA256WITHRSA Signature: 992f5d84cc64b3f8d476bd95a98320841c3dd3c6 0eab1caa08f7e3bdc63e309b1a085d599754d933 ebcb92a55add44f10d470afc677355d14d1c91dc 887145d53dba7b9824a6e2a612e50059b996d60d a464958d2497c34906a9ba3918354921dba199c7 a484fff484431321cc8805e4274716b78a6fa1f7 4afcf6466164bf8df84fe885efd8772fddb3c2b8 edf332dbb185efa089372100e90f870c95f0fcf9 54e47b7d12a120d21567db3390d1f209612ef5ec 19660170ce93b39ceb1cdcf6e2d315dbbd5f5bb5 9e3e90be72e51df202ed555503aad267c8e3b4f4 eb94eea3cf2b53d9ed6d00b301b7d961dfa30106 d2bfd6048dab5066acb60d636b3ca8a671bb7009 bbc8fc3afbee2de39974a7636ca04abe70e2b0c8 dc0fbc2da66c5fbef03d17949a1b83f476039a5e 031ebd25dde4dc462d936960705e30ff9f4e9019 ea540c92bb35e568421fdab131c1485d831cb149 780dc6fd192c68bddfdb344b3b6a9d2b6b250e02 3a2fe0a35358ea5e31f3a70c9ed4948ef7706f8c 925f603a Extensions: critical(true) BasicConstraints: isCa(true) critical(false) 2.5.29.35 value = Sequence Tagged [0] IMPLICIT DER Octet String[20] critical(false) 2.5.29.14 value = DER Octet String[20] critical(true) KeyUsage: 0x86 Policy Tree: null Subject Public Key: RSA Public Key [7f:27:aa:5c:31:d7:f8:1b:47:d7:4b:2b:2e:4b:28:e3:bf:68:21:db] modulus: 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 public exponent: 10001 ] 2021-04-23 03:11:15.612  INFO 1 [nio-8443-exec-8] o.o.o.c.a.CertificationController  : Received certificate signing request for CA named: RA 2021-04-23 03:11:15.615 DEBUG 1 [nio-8443-exec-8] .o.c.c.Pkcs10CertificationRequestFactory : Creating certification request from pem object 2021-04-23 03:11:15.627 DEBUG 1 [nio-8443-exec-8] o.o.o.c.c.CertificationModelFactory  : Received CSR meta data: Subject: { L=San-Francisco,OU=ONAP,O=Linux-Foundation,ST=California,C=US,CN=pnf-simulator ,SANs: [pnf-simulator] } 2021-04-23 03:11:15.629 DEBUG 1 [nio-8443-exec-8] o.o.o.c.c.CertificationModelFactory  : Found server for given CA name: Cmpv2Server{authentication=Authentication{ iak=*****, rv=*****}, caMode=RA, caName='RA', issuerDN='CN=ManagementCA', url='http://ejbca:8080/ejbca/publicweb/cmp/cmpRA'} 2021-04-23 03:11:15.631  INFO 1 [nio-8443-exec-8] o.o.o.c.c.CertificationModelFactory  : Sending sign request for certification model for CA named: RA, and certificate signing request: Subject: { L=San-Francisco,OU=ONAP,O=Linux-Foundation,ST=California,C=US,CN=pnf-simulator ,SANs: [pnf-simulator] } 2021-04-23 03:11:15.632  INFO 1 [nio-8443-exec-8] o.o.o.c.c.i.CmpClientImpl  : Validate before creating Certificate Request for CA :RA in Mode RA 2021-04-23 03:11:15.632  INFO 1 [nio-8443-exec-8] o.o.o.c.c.i.CmpUtil  : Generating random integer 2021-04-23 03:11:15.633  INFO 1 [nio-8443-exec-8] o.o.o.c.c.i.CmpMessageHelper  : Generating Extensions from Subject Alternative Names 2021-04-23 03:11:15.633  INFO 1 [nio-8443-exec-8] o.o.o.c.c.i.CmpMessageHelper  : Generating Optional Validity from Date objects 2021-04-23 03:11:15.643  INFO 1 [nio-8443-exec-8] o.o.o.c.c.i.CmpUtil  : Generating a Pki Header Builder 2021-04-23 03:11:15.644  INFO 1 [nio-8443-exec-8] o.o.o.c.c.i.CmpUtil  : Generating random array of bytes 2021-04-23 03:11:15.644  INFO 1 [nio-8443-exec-8] o.o.o.c.c.i.CmpUtil  : Generating random array of bytes 2021-04-23 03:11:15.725  INFO 1 [nio-8443-exec-8] o.o.o.c.c.i.CmpUtil  : Generating array of bytes representing PkiHeader and PkiBody 2021-04-23 03:11:15.948  INFO 1 [nio-8443-exec-8] o.o.o.c.c.i.CmpClientImpl  : Received response from Server 2021-04-23 03:11:15.949 DEBUG 1 [nio-8443-exec-8] o.o.o.c.c.i.CmpClientImpl  : Verifying signature of the response. 2021-04-23 03:11:15.952 DEBUG 1 [nio-8443-exec-8] o.o.o.c.c.i.CmpClientImpl  : Verifying PasswordBased Protection of the Response. 2021-04-23 03:11:15.953  INFO 1 [nio-8443-exec-8] o.o.o.c.c.i.CmpResponseValidationHelper  : Iteration count is: 1606 2021-04-23 03:11:15.953  INFO 1 [nio-8443-exec-8] o.o.o.c.c.i.CmpResponseValidationHelper  : One Way Function type is: 1.3.14.3.2.26 2021-04-23 03:11:15.956  INFO 1 [nio-8443-exec-8] o.o.o.c.c.i.CmpResponseValidationHelper  : Mac type is: 1.3.6.1.5.5.8.1.2 2021-04-23 03:11:15.957  INFO 1 [nio-8443-exec-8] o.o.o.c.c.i.CmpResponseValidationHelper  : Implicit Confirm on certificate from server. 2021-04-23 03:11:15.957  INFO 1 [nio-8443-exec-8] o.o.o.c.c.i.CmpClientImpl  : Verifying certificates returned as part of CertResponse. 2021-04-23 03:11:15.958 DEBUG 1 [nio-8443-exec-8] o.o.o.c.c.i.CmpResponseHelper  : Retrieving certificate of type class java.security.cert.X509Certificate from byte array. 2021-04-23 03:11:15.958 DEBUG 1 [nio-8443-exec-8] o.o.o.c.c.i.CmpResponseHelper  : Parsing X509Certificate from bytes with provider BC 2021-04-23 03:11:15.959 DEBUG 1 [nio-8443-exec-8] o.o.o.c.c.i.CmpResponseHelper  : Creating certificate Factory to generate certificate using provider BC 2021-04-23 03:11:15.960 DEBUG 1 [nio-8443-exec-8] o.o.o.c.c.i.CmpResponseHelper  : Retrieving certificate of type class java.security.cert.X509Certificate from byte array. 2021-04-23 03:11:15.960 DEBUG 1 [nio-8443-exec-8] o.o.o.c.c.i.CmpResponseHelper  : Parsing X509Certificate from bytes with provider BC 2021-04-23 03:11:15.961 DEBUG 1 [nio-8443-exec-8] o.o.o.c.c.i.CmpResponseHelper  : Creating certificate Factory to generate certificate using provider BC 2021-04-23 03:11:16.024 DEBUG 1 [nio-8443-exec-8] o.o.o.c.c.i.CmpResponseHelper  : Verifying certificate CN=pnf-simulator,OU=ONAP,O=Linux-Foundation,L=San-Francisco,ST=California,C=US as part of cert chain with certificate UID=c-07e2fdfb81fffecfb,CN=ManagementCA,O=EJBCA Container Quickstart 2021-04-23 03:11:16.030 DEBUG 1 [nio-8443-exec-8] o.o.o.c.c.i.CmpResponseHelper  : Certificate verify result:PKIXCertPathValidatorResult: [ Trust Anchor: [ Trusted CA cert: [0] Version: 3 SerialNumber: 565980089967157409987209835597233243245652920660 IssuerDN: UID=c-07e2fdfb81fffecfb,CN=ManagementCA,O=EJBCA Container Quickstart Start Date: Fri Apr 23 02:05:34 UTC 2021 Final Date: Wed Apr 23 02:05:34 UTC 2031 SubjectDN: UID=c-07e2fdfb81fffecfb,CN=ManagementCA,O=EJBCA Container Quickstart Public Key: RSA Public Key [00:bd:4b:29:f5:6e:a0:86:ee:07:33:e1:8f:16:70:ca:f9:03:df:09] modulus: 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 public exponent: 10001 Signature Algorithm: SHA256WITHRSA Signature: 992f5d84cc64b3f8d476bd95a98320841c3dd3c6 0eab1caa08f7e3bdc63e309b1a085d599754d933 ebcb92a55add44f10d470afc677355d14d1c91dc 887145d53dba7b9824a6e2a612e50059b996d60d a464958d2497c34906a9ba3918354921dba199c7 a484fff484431321cc8805e4274716b78a6fa1f7 4afcf6466164bf8df84fe885efd8772fddb3c2b8 edf332dbb185efa089372100e90f870c95f0fcf9 54e47b7d12a120d21567db3390d1f209612ef5ec 19660170ce93b39ceb1cdcf6e2d315dbbd5f5bb5 9e3e90be72e51df202ed555503aad267c8e3b4f4 eb94eea3cf2b53d9ed6d00b301b7d961dfa30106 d2bfd6048dab5066acb60d636b3ca8a671bb7009 bbc8fc3afbee2de39974a7636ca04abe70e2b0c8 dc0fbc2da66c5fbef03d17949a1b83f476039a5e 031ebd25dde4dc462d936960705e30ff9f4e9019 ea540c92bb35e568421fdab131c1485d831cb149 780dc6fd192c68bddfdb344b3b6a9d2b6b250e02 3a2fe0a35358ea5e31f3a70c9ed4948ef7706f8c 925f603a Extensions: critical(true) BasicConstraints: isCa(true) critical(false) 2.5.29.35 value = Sequence Tagged [0] IMPLICIT DER Octet String[20] critical(false) 2.5.29.14 value = DER Octet String[20] critical(true) KeyUsage: 0x86 Policy Tree: null Subject Public Key: RSA Public Key [be:68:f7:8d:40:7a:9f:b4:71:c9:e0:e6:04:b7:f2:67:f5:62:bc:fb] modulus: 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 public exponent: 10001 ] 2021-04-23 03:14:19.427  INFO 1 [nio-8443-exec-6] o.o.o.c.a.CertificationController  : Received certificate signing request for CA named: RA 2021-04-23 03:14:19.428 DEBUG 1 [nio-8443-exec-6] .o.c.c.Pkcs10CertificationRequestFactory : Creating certification request from pem object 2021-04-23 03:14:19.430 DEBUG 1 [nio-8443-exec-6] o.o.o.c.c.CertificationModelFactory  : Received CSR meta data: Subject: { L=San-Francisco,OU=ONAP,O=Linux-Foundation,ST=California,C=US,CN=dcae-ves-collector-cmpv2-cert ,SANs: [dcae-ves-collector-cmpv2-cert, ves-collector-cmpv2-cert, ves-cmpv2-cert] } 2021-04-23 03:14:19.430 DEBUG 1 [nio-8443-exec-6] o.o.o.c.c.CertificationModelFactory  : Found server for given CA name: Cmpv2Server{authentication=Authentication{ iak=*****, rv=*****}, caMode=RA, caName='RA', issuerDN='CN=ManagementCA', url='http://ejbca:8080/ejbca/publicweb/cmp/cmpRA'} 2021-04-23 03:14:19.431  INFO 1 [nio-8443-exec-6] o.o.o.c.c.CertificationModelFactory  : Sending sign request for certification model for CA named: RA, and certificate signing request: Subject: { L=San-Francisco,OU=ONAP,O=Linux-Foundation,ST=California,C=US,CN=dcae-ves-collector-cmpv2-cert ,SANs: [dcae-ves-collector-cmpv2-cert, ves-collector-cmpv2-cert, ves-cmpv2-cert] } 2021-04-23 03:14:19.432  INFO 1 [nio-8443-exec-6] o.o.o.c.c.i.CmpClientImpl  : Validate before creating Certificate Request for CA :RA in Mode RA 2021-04-23 03:14:19.432  INFO 1 [nio-8443-exec-6] o.o.o.c.c.i.CmpUtil  : Generating random integer 2021-04-23 03:14:19.433  INFO 1 [nio-8443-exec-6] o.o.o.c.c.i.CmpMessageHelper  : Generating Extensions from Subject Alternative Names 2021-04-23 03:14:19.433  INFO 1 [nio-8443-exec-6] o.o.o.c.c.i.CmpMessageHelper  : Generating Optional Validity from Date objects 2021-04-23 03:14:19.441  INFO 1 [nio-8443-exec-6] o.o.o.c.c.i.CmpUtil  : Generating a Pki Header Builder 2021-04-23 03:14:19.442  INFO 1 [nio-8443-exec-6] o.o.o.c.c.i.CmpUtil  : Generating random array of bytes 2021-04-23 03:14:19.442  INFO 1 [nio-8443-exec-6] o.o.o.c.c.i.CmpUtil  : Generating random array of bytes 2021-04-23 03:14:19.445  INFO 1 [nio-8443-exec-6] o.o.o.c.c.i.CmpUtil  : Generating array of bytes representing PkiHeader and PkiBody 2021-04-23 03:14:19.644  INFO 1 [nio-8443-exec-6] o.o.o.c.c.i.CmpClientImpl  : Received response from Server 2021-04-23 03:14:19.645 DEBUG 1 [nio-8443-exec-6] o.o.o.c.c.i.CmpClientImpl  : Verifying signature of the response. 2021-04-23 03:14:19.646 DEBUG 1 [nio-8443-exec-6] o.o.o.c.c.i.CmpClientImpl  : Verifying PasswordBased Protection of the Response. 2021-04-23 03:14:19.647  INFO 1 [nio-8443-exec-6] o.o.o.c.c.i.CmpResponseValidationHelper  : Iteration count is: 1606 2021-04-23 03:14:19.647  INFO 1 [nio-8443-exec-6] o.o.o.c.c.i.CmpResponseValidationHelper  : One Way Function type is: 1.3.14.3.2.26 2021-04-23 03:14:19.650  INFO 1 [nio-8443-exec-6] o.o.o.c.c.i.CmpResponseValidationHelper  : Mac type is: 1.3.6.1.5.5.8.1.2 2021-04-23 03:14:19.651  INFO 1 [nio-8443-exec-6] o.o.o.c.c.i.CmpResponseValidationHelper  : Implicit Confirm on certificate from server. 2021-04-23 03:14:19.651  INFO 1 [nio-8443-exec-6] o.o.o.c.c.i.CmpClientImpl  : Verifying certificates returned as part of CertResponse. 2021-04-23 03:14:19.652 DEBUG 1 [nio-8443-exec-6] o.o.o.c.c.i.CmpResponseHelper  : Retrieving certificate of type class java.security.cert.X509Certificate from byte array. 2021-04-23 03:14:19.652 DEBUG 1 [nio-8443-exec-6] o.o.o.c.c.i.CmpResponseHelper  : Parsing X509Certificate from bytes with provider BC 2021-04-23 03:14:19.652 DEBUG 1 [nio-8443-exec-6] o.o.o.c.c.i.CmpResponseHelper  : Creating certificate Factory to generate certificate using provider BC 2021-04-23 03:14:19.653 DEBUG 1 [nio-8443-exec-6] o.o.o.c.c.i.CmpResponseHelper  : Retrieving certificate of type class java.security.cert.X509Certificate from byte array. 2021-04-23 03:14:19.653 DEBUG 1 [nio-8443-exec-6] o.o.o.c.c.i.CmpResponseHelper  : Parsing X509Certificate from bytes with provider BC 2021-04-23 03:14:19.654 DEBUG 1 [nio-8443-exec-6] o.o.o.c.c.i.CmpResponseHelper  : Creating certificate Factory to generate certificate using provider BC 2021-04-23 03:14:19.655 DEBUG 1 [nio-8443-exec-6] o.o.o.c.c.i.CmpResponseHelper  : Verifying certificate CN=dcae-ves-collector-cmpv2-cert,OU=ONAP,O=Linux-Foundation,L=San-Francisco,ST=California,C=US as part of cert chain with certificate UID=c-07e2fdfb81fffecfb,CN=ManagementCA,O=EJBCA Container Quickstart 2021-04-23 03:14:19.658 DEBUG 1 [nio-8443-exec-6] o.o.o.c.c.i.CmpResponseHelper  : Certificate verify result:PKIXCertPathValidatorResult: [ Trust Anchor: [ Trusted CA cert: [0] Version: 3 SerialNumber: 565980089967157409987209835597233243245652920660 IssuerDN: UID=c-07e2fdfb81fffecfb,CN=ManagementCA,O=EJBCA Container Quickstart Start Date: Fri Apr 23 02:05:34 UTC 2021 Final Date: Wed Apr 23 02:05:34 UTC 2031 SubjectDN: UID=c-07e2fdfb81fffecfb,CN=ManagementCA,O=EJBCA Container Quickstart Public Key: RSA Public Key [00:bd:4b:29:f5:6e:a0:86:ee:07:33:e1:8f:16:70:ca:f9:03:df:09] modulus: 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 public exponent: 10001 Signature Algorithm: SHA256WITHRSA Signature: 992f5d84cc64b3f8d476bd95a98320841c3dd3c6 0eab1caa08f7e3bdc63e309b1a085d599754d933 ebcb92a55add44f10d470afc677355d14d1c91dc 887145d53dba7b9824a6e2a612e50059b996d60d a464958d2497c34906a9ba3918354921dba199c7 a484fff484431321cc8805e4274716b78a6fa1f7 4afcf6466164bf8df84fe885efd8772fddb3c2b8 edf332dbb185efa089372100e90f870c95f0fcf9 54e47b7d12a120d21567db3390d1f209612ef5ec 19660170ce93b39ceb1cdcf6e2d315dbbd5f5bb5 9e3e90be72e51df202ed555503aad267c8e3b4f4 eb94eea3cf2b53d9ed6d00b301b7d961dfa30106 d2bfd6048dab5066acb60d636b3ca8a671bb7009 bbc8fc3afbee2de39974a7636ca04abe70e2b0c8 dc0fbc2da66c5fbef03d17949a1b83f476039a5e 031ebd25dde4dc462d936960705e30ff9f4e9019 ea540c92bb35e568421fdab131c1485d831cb149 780dc6fd192c68bddfdb344b3b6a9d2b6b250e02 3a2fe0a35358ea5e31f3a70c9ed4948ef7706f8c 925f603a Extensions: critical(true) BasicConstraints: isCa(true) critical(false) 2.5.29.35 value = Sequence Tagged [0] IMPLICIT DER Octet String[20] critical(false) 2.5.29.14 value = DER Octet String[20] critical(true) KeyUsage: 0x86 Policy Tree: null Subject Public Key: RSA Public Key [dd:9b:e9:0a:59:04:05:46:bc:61:4b:5e:68:eb:bf:b7:2a:b4:d9:eb] modulus: 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 public exponent: 10001 ] 2021-04-23 03:16:10.434  INFO 1 [nio-8443-exec-7] o.o.o.c.a.CertificationController  : Received certificate signing request for CA named: RA 2021-04-23 03:16:10.435 DEBUG 1 [nio-8443-exec-7] .o.c.c.Pkcs10CertificationRequestFactory : Creating certification request from pem object 2021-04-23 03:16:10.436 DEBUG 1 [nio-8443-exec-7] o.o.o.c.c.CertificationModelFactory  : Received CSR meta data: Subject: { L=San-Francisco,OU=ONAP,O=Linux-Foundation,ST=California,C=US,CN=dcae-ves-collector-cmpv2-cert-wrong-sans ,SANs: [wrong-sans] } 2021-04-23 03:16:10.437 DEBUG 1 [nio-8443-exec-7] o.o.o.c.c.CertificationModelFactory  : Found server for given CA name: Cmpv2Server{authentication=Authentication{ iak=*****, rv=*****}, caMode=RA, caName='RA', issuerDN='CN=ManagementCA', url='http://ejbca:8080/ejbca/publicweb/cmp/cmpRA'} 2021-04-23 03:16:10.437  INFO 1 [nio-8443-exec-7] o.o.o.c.c.CertificationModelFactory  : Sending sign request for certification model for CA named: RA, and certificate signing request: Subject: { L=San-Francisco,OU=ONAP,O=Linux-Foundation,ST=California,C=US,CN=dcae-ves-collector-cmpv2-cert-wrong-sans ,SANs: [wrong-sans] } 2021-04-23 03:16:10.438  INFO 1 [nio-8443-exec-7] o.o.o.c.c.i.CmpClientImpl  : Validate before creating Certificate Request for CA :RA in Mode RA 2021-04-23 03:16:10.439  INFO 1 [nio-8443-exec-7] o.o.o.c.c.i.CmpUtil  : Generating random integer 2021-04-23 03:16:10.440  INFO 1 [nio-8443-exec-7] o.o.o.c.c.i.CmpMessageHelper  : Generating Extensions from Subject Alternative Names 2021-04-23 03:16:10.440  INFO 1 [nio-8443-exec-7] o.o.o.c.c.i.CmpMessageHelper  : Generating Optional Validity from Date objects 2021-04-23 03:16:10.530  INFO 1 [nio-8443-exec-7] o.o.o.c.c.i.CmpUtil  : Generating a Pki Header Builder 2021-04-23 03:16:10.531  INFO 1 [nio-8443-exec-7] o.o.o.c.c.i.CmpUtil  : Generating random array of bytes 2021-04-23 03:16:10.531  INFO 1 [nio-8443-exec-7] o.o.o.c.c.i.CmpUtil  : Generating random array of bytes 2021-04-23 03:16:10.532  INFO 1 [nio-8443-exec-7] o.o.o.c.c.i.CmpUtil  : Generating array of bytes representing PkiHeader and PkiBody 2021-04-23 03:16:10.695  INFO 1 [nio-8443-exec-7] o.o.o.c.c.i.CmpClientImpl  : Received response from Server 2021-04-23 03:16:10.696 DEBUG 1 [nio-8443-exec-7] o.o.o.c.c.i.CmpClientImpl  : Verifying signature of the response. 2021-04-23 03:16:10.697 DEBUG 1 [nio-8443-exec-7] o.o.o.c.c.i.CmpClientImpl  : Verifying PasswordBased Protection of the Response. 2021-04-23 03:16:10.698  INFO 1 [nio-8443-exec-7] o.o.o.c.c.i.CmpResponseValidationHelper  : Iteration count is: 1606 2021-04-23 03:16:10.699  INFO 1 [nio-8443-exec-7] o.o.o.c.c.i.CmpResponseValidationHelper  : One Way Function type is: 1.3.14.3.2.26 2021-04-23 03:16:10.700  INFO 1 [nio-8443-exec-7] o.o.o.c.c.i.CmpResponseValidationHelper  : Mac type is: 1.3.6.1.5.5.8.1.2 2021-04-23 03:16:10.725  INFO 1 [nio-8443-exec-7] o.o.o.c.c.i.CmpResponseValidationHelper  : Implicit Confirm on certificate from server. 2021-04-23 03:16:10.726  INFO 1 [nio-8443-exec-7] o.o.o.c.c.i.CmpClientImpl  : Verifying certificates returned as part of CertResponse. 2021-04-23 03:16:10.726 DEBUG 1 [nio-8443-exec-7] o.o.o.c.c.i.CmpResponseHelper  : Retrieving certificate of type class java.security.cert.X509Certificate from byte array. 2021-04-23 03:16:10.727 DEBUG 1 [nio-8443-exec-7] o.o.o.c.c.i.CmpResponseHelper  : Parsing X509Certificate from bytes with provider BC 2021-04-23 03:16:10.727 DEBUG 1 [nio-8443-exec-7] o.o.o.c.c.i.CmpResponseHelper  : Creating certificate Factory to generate certificate using provider BC 2021-04-23 03:16:10.728 DEBUG 1 [nio-8443-exec-7] o.o.o.c.c.i.CmpResponseHelper  : Retrieving certificate of type class java.security.cert.X509Certificate from byte array. 2021-04-23 03:16:10.728 DEBUG 1 [nio-8443-exec-7] o.o.o.c.c.i.CmpResponseHelper  : Parsing X509Certificate from bytes with provider BC 2021-04-23 03:16:10.729 DEBUG 1 [nio-8443-exec-7] o.o.o.c.c.i.CmpResponseHelper  : Creating certificate Factory to generate certificate using provider BC 2021-04-23 03:16:10.730 DEBUG 1 [nio-8443-exec-7] o.o.o.c.c.i.CmpResponseHelper  : Verifying certificate CN=dcae-ves-collector-cmpv2-cert-wrong-sans,OU=ONAP,O=Linux-Foundation,L=San-Francisco,ST=California,C=US as part of cert chain with certificate UID=c-07e2fdfb81fffecfb,CN=ManagementCA,O=EJBCA Container Quickstart 2021-04-23 03:16:10.733 DEBUG 1 [nio-8443-exec-7] o.o.o.c.c.i.CmpResponseHelper  : Certificate verify result:PKIXCertPathValidatorResult: [ Trust Anchor: [ Trusted CA cert: [0] Version: 3 SerialNumber: 565980089967157409987209835597233243245652920660 IssuerDN: UID=c-07e2fdfb81fffecfb,CN=ManagementCA,O=EJBCA Container Quickstart Start Date: Fri Apr 23 02:05:34 UTC 2021 Final Date: Wed Apr 23 02:05:34 UTC 2031 SubjectDN: UID=c-07e2fdfb81fffecfb,CN=ManagementCA,O=EJBCA Container Quickstart Public Key: RSA Public Key [00:bd:4b:29:f5:6e:a0:86:ee:07:33:e1:8f:16:70:ca:f9:03:df:09] modulus: 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 public exponent: 10001 Signature Algorithm: SHA256WITHRSA Signature: 992f5d84cc64b3f8d476bd95a98320841c3dd3c6 0eab1caa08f7e3bdc63e309b1a085d599754d933 ebcb92a55add44f10d470afc677355d14d1c91dc 887145d53dba7b9824a6e2a612e50059b996d60d a464958d2497c34906a9ba3918354921dba199c7 a484fff484431321cc8805e4274716b78a6fa1f7 4afcf6466164bf8df84fe885efd8772fddb3c2b8 edf332dbb185efa089372100e90f870c95f0fcf9 54e47b7d12a120d21567db3390d1f209612ef5ec 19660170ce93b39ceb1cdcf6e2d315dbbd5f5bb5 9e3e90be72e51df202ed555503aad267c8e3b4f4 eb94eea3cf2b53d9ed6d00b301b7d961dfa30106 d2bfd6048dab5066acb60d636b3ca8a671bb7009 bbc8fc3afbee2de39974a7636ca04abe70e2b0c8 dc0fbc2da66c5fbef03d17949a1b83f476039a5e 031ebd25dde4dc462d936960705e30ff9f4e9019 ea540c92bb35e568421fdab131c1485d831cb149 780dc6fd192c68bddfdb344b3b6a9d2b6b250e02 3a2fe0a35358ea5e31f3a70c9ed4948ef7706f8c 925f603a Extensions: critical(true) BasicConstraints: isCa(true) critical(false) 2.5.29.35 value = Sequence Tagged [0] IMPLICIT DER Octet String[20] critical(false) 2.5.29.14 value = DER Octet String[20] critical(true) KeyUsage: 0x86 Policy Tree: null Subject Public Key: RSA Public Key [04:9d:6d:8e:ef:ee:8a:00:a9:bb:68:2f:44:23:cb:b3:9b:b3:93:f5] modulus: 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 public exponent: 10001 ]