2021-04-04 03:56:40,920 main INFO Log4j appears to be running in a Servlet environment, but there's no log4j-web module available. If you want better web container support, please add the log4j-web JAR to your web archive or server lib directory. 2021-04-04 03:56:45,314 main INFO Log4j appears to be running in a Servlet environment, but there's no log4j-web module available. If you want better web container support, please add the log4j-web JAR to your web archive or server lib directory. . ____ _ __ _ _ /\\ / ___'_ __ _ _(_)_ __ __ _ \ \ \ \ ( ( )\___ | '_ | '_| | '_ \/ _` | \ \ \ \ \\/ ___)| |_)| | | | | || (_| | ) ) ) ) ' |____| .__|_| |_|_| |_\__, | / / / / =========|_|==============|___/=/_/_/_/ :: Spring Boot :: (v2.2.4.RELEASE) 2021-04-04 03:56:48.711  INFO 1 [ main] o.s.b.SpringApplication  : No active profile set, falling back to default profiles: default 2021-04-04 03:57:01.517 DEBUG 1 [ main] o.j.l.LoggerProviders  : Logging Provider: org.jboss.logging.Log4j2LoggerProvider 2021-04-04 03:57:03.002  INFO 1 [ main] o.o.o.c.c.c.CmpServersConfig  : Loading initial configuration 2021-04-04 03:57:03.810  INFO 1 [ main] o.o.o.c.c.c.CmpServersConfig  : CMP Servers configuration successfully loaded from file /etc/onap/oom/certservice/cmpServers.json 2021-04-04 03:57:19.917  INFO 1 [ main] o.s.b.StartupInfoLogger  : Started CertServiceApplication in 41.799 seconds (JVM running for 50.091) 2021-04-04 04:11:46.217  INFO 1 [nio-8443-exec-1] o.o.o.c.a.CertificationController  : Received certificate signing request for CA named: RA 2021-04-04 04:11:46.315 DEBUG 1 [nio-8443-exec-1] .o.c.c.Pkcs10CertificationRequestFactory : Creating certification request from pem object 2021-04-04 04:11:46.512 DEBUG 1 [nio-8443-exec-1] o.o.o.c.c.CertificationModelFactory  : Received CSR meta data: CSR: { Subject: { L=San-Francisco,OU=ONAP,O=Linux-Foundation,ST=California,C=US,CN=sdnc.simpledemo.onap.org }, SANs: [sdnc.simpledemo.onap.org] } 2021-04-04 04:11:46.517 DEBUG 1 [nio-8443-exec-1] o.o.o.c.c.CertificationModelFactory  : Found server for given CA name: Cmpv2Server{authentication=Authentication{ iak=*****, rv=*****}, caMode=RA, caName='RA', issuerDN='CN=ManagementCA', url='http://ejbca:8080/ejbca/publicweb/cmp/cmpRA'} 2021-04-04 04:11:46.613  INFO 1 [nio-8443-exec-1] o.o.o.c.c.CertificationModelFactory  : Sending sign request for certification model for CA named: RA, and certificate signing request: CSR: { Subject: { L=San-Francisco,OU=ONAP,O=Linux-Foundation,ST=California,C=US,CN=sdnc.simpledemo.onap.org }, SANs: [sdnc.simpledemo.onap.org] } 2021-04-04 04:11:46.616  INFO 1 [nio-8443-exec-1] o.o.o.c.c.i.CmpClientImpl  : Validate before creating Certificate Request for CA :RA in Mode RA 2021-04-04 04:11:46.620  INFO 1 [nio-8443-exec-1] o.o.o.c.c.i.CmpUtil  : Generating random integer 2021-04-04 04:11:46.620  INFO 1 [nio-8443-exec-1] o.o.o.c.c.i.CmpUtil  : Generating random array of bytes 2021-04-04 04:11:46.620  INFO 1 [nio-8443-exec-1] o.o.o.c.c.i.CmpUtil  : Generating random integer 2021-04-04 04:11:46.709  INFO 1 [nio-8443-exec-1] o.o.o.c.c.i.CmpMessageHelper  : Generating Extensions from Subject Alternative Names 2021-04-04 04:11:46.713  INFO 1 [nio-8443-exec-1] o.o.o.c.c.i.CmpMessageHelper  : Generating Optional Validity from Date objects 2021-04-04 04:11:46.908  INFO 1 [nio-8443-exec-1] o.o.o.c.c.i.CmpUtil  : Generating a Pki Header Builder 2021-04-04 04:11:46.916  INFO 1 [nio-8443-exec-1] o.o.o.c.c.i.CmpUtil  : Generating random array of bytes 2021-04-04 04:11:46.917  INFO 1 [nio-8443-exec-1] o.o.o.c.c.i.CmpUtil  : Generating random array of bytes 2021-04-04 04:11:47.015  INFO 1 [nio-8443-exec-1] o.o.o.c.c.i.CmpUtil  : Generating array of bytes representing PkiHeader and PkiBody 2021-04-04 04:11:48.487  INFO 1 [nio-8443-exec-1] o.o.o.c.c.i.CmpClientImpl  : Received response from Server 2021-04-04 04:11:48.491  INFO 1 [nio-8443-exec-1] o.o.o.c.c.i.CmpResponseHelper  : Response type: 1 2021-04-04 04:11:48.491 DEBUG 1 [nio-8443-exec-1] o.o.o.c.c.i.CmpClientImpl  : Verifying signature of the response. 2021-04-04 04:11:48.498 DEBUG 1 [nio-8443-exec-1] o.o.o.c.c.i.CmpClientImpl  : Verifying PasswordBased Protection of the Response. 2021-04-04 04:11:48.504  INFO 1 [nio-8443-exec-1] o.o.o.c.c.i.CmpResponseValidationHelper  : Iteration count is: 1411 2021-04-04 04:11:48.505  INFO 1 [nio-8443-exec-1] o.o.o.c.c.i.CmpResponseValidationHelper  : One Way Function type is: 1.3.14.3.2.26 2021-04-04 04:11:48.509  INFO 1 [nio-8443-exec-1] o.o.o.c.c.i.CmpResponseValidationHelper  : Mac type is: 1.3.6.1.5.5.8.1.2 2021-04-04 04:11:48.510  INFO 1 [nio-8443-exec-1] o.o.o.c.c.i.CmpResponseValidationHelper  : Implicit Confirm on certificate from server. 2021-04-04 04:11:48.516  INFO 1 [nio-8443-exec-1] o.o.o.c.c.i.CmpClientImpl  : Response status code: 0 2021-04-04 04:11:48.517  INFO 1 [nio-8443-exec-1] o.o.o.c.c.i.CmpClientImpl  : Verifying certificates returned as part of CertResponse. 2021-04-04 04:11:48.518 DEBUG 1 [nio-8443-exec-1] o.o.o.c.c.i.CmpResponseHelper  : Retrieving certificate of type class java.security.cert.X509Certificate from byte array. 2021-04-04 04:11:48.519 DEBUG 1 [nio-8443-exec-1] o.o.o.c.c.i.CmpResponseHelper  : Parsing X509Certificate from bytes with provider BC 2021-04-04 04:11:48.520 DEBUG 1 [nio-8443-exec-1] o.o.o.c.c.i.CmpResponseHelper  : Creating certificate Factory to generate certificate using provider BC 2021-04-04 04:11:48.611 DEBUG 1 [nio-8443-exec-1] o.o.o.c.c.i.CmpResponseHelper  : Retrieving certificate of type class java.security.cert.X509Certificate from byte array. 2021-04-04 04:11:48.612 DEBUG 1 [nio-8443-exec-1] o.o.o.c.c.i.CmpResponseHelper  : Parsing X509Certificate from bytes with provider BC 2021-04-04 04:11:48.612 DEBUG 1 [nio-8443-exec-1] o.o.o.c.c.i.CmpResponseHelper  : Creating certificate Factory to generate certificate using provider BC 2021-04-04 04:11:48.704 DEBUG 1 [nio-8443-exec-1] o.o.o.c.c.i.CmpResponseHelper  : Verifying certificate CN=sdnc.simpledemo.onap.org,OU=ONAP,O=Linux-Foundation,L=San-Francisco,ST=California,C=US as part of cert chain with certificate UID=c-0f54ca251c0d1dbea,CN=ManagementCA,O=EJBCA Container Quickstart 2021-04-04 04:11:48.910 DEBUG 1 [nio-8443-exec-1] o.o.o.c.c.i.CmpResponseHelper  : Certificate verify result:PKIXCertPathValidatorResult: [ Trust Anchor: [ Trusted CA cert: [0] Version: 3 SerialNumber: 225953294071095954819655330023732728634165323117 IssuerDN: UID=c-0f54ca251c0d1dbea,CN=ManagementCA,O=EJBCA Container Quickstart Start Date: Sun Apr 04 03:53:36 UTC 2021 Final Date: Fri Apr 04 03:53:36 UTC 2031 SubjectDN: UID=c-0f54ca251c0d1dbea,CN=ManagementCA,O=EJBCA Container Quickstart Public Key: RSA Public Key [b8:af:62:9e:63:0d:f5:eb:9d:d1:fd:22:be:a7:07:22:ce:21:b7:77] modulus: a7b802bfac89bb46f446cd44b668d9631683dffceaad62a25a79195eaf1d9c953f52b1952660030219e9559e213b789ccdf4303e6ca8b55875ce0e5b1851485f573b75ecec677534aa4ca464f6d633504ae6033ff1dc7ab3361f40d0d38cb2f62e7c2ab0a881d00556302db248a2751206b1b164ebdb0bdcf7bd67bc882247f5e50f90c4e7adb71124ef48b42f0993988ea09df1401927f9cb1d45cde2aecee4a85279603ee2c40727e3df8875b1f5a05fa71c704879f758023509e4a4ef695242798f4492572fa8072f87b1bc08faa1849ec6fb4e0f3f957f8df7c0c0c18e77484229e5fb19031446516aaf20d0f0a0404a5e7cc5744abfcaf4d6570509cfb304d007a4c7ee2dd19610794d2e3360dd425eb92181730c269058ead75dd033512dd12c7d154f6cdeec57eea4e447c854064fa0e91bebe70525e58a4206ff65ae8d20498fd27147bd9979fe67a31747ca3b07e2946fa2a7c86a3d72f1aad5f5006e6d8beb3ab0a130a0dd5ef070838f01c12d9596239dc403e22198123e1239a7 public exponent: 10001 Signature Algorithm: SHA256WITHRSA Signature: 9a591e071396be1a01d72336b0a47738741e3bc1 ceb9c37263c15f47ba73a0cf479c33abf83459b2 fec64b2377f0532e162c144d8a58aa56eeef30dd 52cfaffaa452af21b3c7e0c72d0377119c17875c 4ffb85c9a723c2be55672f2d8fa920b04b854556 da7e929f40def88a1879c87a7e71b570f1bcbb26 6a3f6ed2f462b43f1356c14363e9f4274fff8170 1ee489c47eb5ea81c8a05e45101bf9460c0cbe85 f321510da32471b02c682a5e6fc5d24ec4d9a15b c5c3ec617e4b1feef07823b7800905e255a77204 28facde8c3c96885effd747d4673586f61160b50 69fb71bc022ec766e1f949260a17a996805ebdb1 c0dfbb51221ed4c4b9e061a0552869c9203a7e58 5c12cd3a319f6f9962bc732a6829c1f768eae594 10a0bd4c22b2ec24474268468f703e86af69b2c7 49a08bf6fc4015419ffbd882cf90a5e6a5025480 1c31a29b40bb2be91bbca095eef0cbfc5d99a29e a6677e3ad3f9b7e1b636d8af9c72617a5628a998 e8ae37bf0552a34f004da998e0202e17344e4b63 0954f4fd Extensions: critical(true) BasicConstraints: isCa(true) critical(false) 2.5.29.35 value = Sequence Tagged [0] IMPLICIT DER Octet String[20] critical(false) 2.5.29.14 value = DER Octet String[20] critical(true) KeyUsage: 0x86 Policy Tree: null Subject Public Key: RSA Public Key [b7:ff:ae:6e:bc:bb:ef:2e:71:60:26:a4:a5:40:5d:79:c4:0c:c1:52] modulus: 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 public exponent: 10001 ] 2021-04-04 05:03:31.874  INFO 1 [nio-8443-exec-5] o.o.o.c.a.CertificationController  : Received certificate signing request for CA named: RA 2021-04-04 05:03:31.876 DEBUG 1 [nio-8443-exec-5] .o.c.c.Pkcs10CertificationRequestFactory : Creating certification request from pem object 2021-04-04 05:03:31.880 DEBUG 1 [nio-8443-exec-5] o.o.o.c.c.CertificationModelFactory  : Received CSR meta data: CSR: { Subject: { L=San-Francisco,OU=ONAP,O=Linux-Foundation,ST=California,C=US,CN=pnf-simulator }, SANs: [pnf-simulator] } 2021-04-04 05:03:31.881 DEBUG 1 [nio-8443-exec-5] o.o.o.c.c.CertificationModelFactory  : Found server for given CA name: Cmpv2Server{authentication=Authentication{ iak=*****, rv=*****}, caMode=RA, caName='RA', issuerDN='CN=ManagementCA', url='http://ejbca:8080/ejbca/publicweb/cmp/cmpRA'} 2021-04-04 05:03:31.882  INFO 1 [nio-8443-exec-5] o.o.o.c.c.CertificationModelFactory  : Sending sign request for certification model for CA named: RA, and certificate signing request: CSR: { Subject: { L=San-Francisco,OU=ONAP,O=Linux-Foundation,ST=California,C=US,CN=pnf-simulator }, SANs: [pnf-simulator] } 2021-04-04 05:03:31.903  INFO 1 [nio-8443-exec-5] o.o.o.c.c.i.CmpClientImpl  : Validate before creating Certificate Request for CA :RA in Mode RA 2021-04-04 05:03:31.904  INFO 1 [nio-8443-exec-5] o.o.o.c.c.i.CmpUtil  : Generating random integer 2021-04-04 05:03:31.905  INFO 1 [nio-8443-exec-5] o.o.o.c.c.i.CmpMessageHelper  : Generating Extensions from Subject Alternative Names 2021-04-04 05:03:31.906  INFO 1 [nio-8443-exec-5] o.o.o.c.c.i.CmpMessageHelper  : Generating Optional Validity from Date objects 2021-04-04 05:03:31.914  INFO 1 [nio-8443-exec-5] o.o.o.c.c.i.CmpUtil  : Generating a Pki Header Builder 2021-04-04 05:03:31.914  INFO 1 [nio-8443-exec-5] o.o.o.c.c.i.CmpUtil  : Generating random array of bytes 2021-04-04 05:03:31.915  INFO 1 [nio-8443-exec-5] o.o.o.c.c.i.CmpUtil  : Generating random array of bytes 2021-04-04 05:03:31.917  INFO 1 [nio-8443-exec-5] o.o.o.c.c.i.CmpUtil  : Generating array of bytes representing PkiHeader and PkiBody 2021-04-04 05:03:32.215  INFO 1 [nio-8443-exec-5] o.o.o.c.c.i.CmpClientImpl  : Received response from Server 2021-04-04 05:03:32.216  INFO 1 [nio-8443-exec-5] o.o.o.c.c.i.CmpResponseHelper  : Response type: 1 2021-04-04 05:03:32.217 DEBUG 1 [nio-8443-exec-5] o.o.o.c.c.i.CmpClientImpl  : Verifying signature of the response. 2021-04-04 05:03:32.220 DEBUG 1 [nio-8443-exec-5] o.o.o.c.c.i.CmpClientImpl  : Verifying PasswordBased Protection of the Response. 2021-04-04 05:03:32.221  INFO 1 [nio-8443-exec-5] o.o.o.c.c.i.CmpResponseValidationHelper  : Iteration count is: 1411 2021-04-04 05:03:32.221  INFO 1 [nio-8443-exec-5] o.o.o.c.c.i.CmpResponseValidationHelper  : One Way Function type is: 1.3.14.3.2.26 2021-04-04 05:03:32.223  INFO 1 [nio-8443-exec-5] o.o.o.c.c.i.CmpResponseValidationHelper  : Mac type is: 1.3.6.1.5.5.8.1.2 2021-04-04 05:03:32.224  INFO 1 [nio-8443-exec-5] o.o.o.c.c.i.CmpResponseValidationHelper  : Implicit Confirm on certificate from server. 2021-04-04 05:03:32.224  INFO 1 [nio-8443-exec-5] o.o.o.c.c.i.CmpClientImpl  : Response status code: 0 2021-04-04 05:03:32.225  INFO 1 [nio-8443-exec-5] o.o.o.c.c.i.CmpClientImpl  : Verifying certificates returned as part of CertResponse. 2021-04-04 05:03:32.225 DEBUG 1 [nio-8443-exec-5] o.o.o.c.c.i.CmpResponseHelper  : Retrieving certificate of type class java.security.cert.X509Certificate from byte array. 2021-04-04 05:03:32.226 DEBUG 1 [nio-8443-exec-5] o.o.o.c.c.i.CmpResponseHelper  : Parsing X509Certificate from bytes with provider BC 2021-04-04 05:03:32.226 DEBUG 1 [nio-8443-exec-5] o.o.o.c.c.i.CmpResponseHelper  : Creating certificate Factory to generate certificate using provider BC 2021-04-04 05:03:32.228 DEBUG 1 [nio-8443-exec-5] o.o.o.c.c.i.CmpResponseHelper  : Retrieving certificate of type class java.security.cert.X509Certificate from byte array. 2021-04-04 05:03:32.228 DEBUG 1 [nio-8443-exec-5] o.o.o.c.c.i.CmpResponseHelper  : Parsing X509Certificate from bytes with provider BC 2021-04-04 05:03:32.228 DEBUG 1 [nio-8443-exec-5] o.o.o.c.c.i.CmpResponseHelper  : Creating certificate Factory to generate certificate using provider BC 2021-04-04 05:03:32.230 DEBUG 1 [nio-8443-exec-5] o.o.o.c.c.i.CmpResponseHelper  : Verifying certificate CN=pnf-simulator,OU=ONAP,O=Linux-Foundation,L=San-Francisco,ST=California,C=US as part of cert chain with certificate UID=c-0f54ca251c0d1dbea,CN=ManagementCA,O=EJBCA Container Quickstart 2021-04-04 05:03:32.309 DEBUG 1 [nio-8443-exec-5] o.o.o.c.c.i.CmpResponseHelper  : Certificate verify result:PKIXCertPathValidatorResult: [ Trust Anchor: [ Trusted CA cert: [0] Version: 3 SerialNumber: 225953294071095954819655330023732728634165323117 IssuerDN: UID=c-0f54ca251c0d1dbea,CN=ManagementCA,O=EJBCA Container Quickstart Start Date: Sun Apr 04 03:53:36 UTC 2021 Final Date: Fri Apr 04 03:53:36 UTC 2031 SubjectDN: UID=c-0f54ca251c0d1dbea,CN=ManagementCA,O=EJBCA Container Quickstart Public Key: RSA Public Key [b8:af:62:9e:63:0d:f5:eb:9d:d1:fd:22:be:a7:07:22:ce:21:b7:77] modulus: a7b802bfac89bb46f446cd44b668d9631683dffceaad62a25a79195eaf1d9c953f52b1952660030219e9559e213b789ccdf4303e6ca8b55875ce0e5b1851485f573b75ecec677534aa4ca464f6d633504ae6033ff1dc7ab3361f40d0d38cb2f62e7c2ab0a881d00556302db248a2751206b1b164ebdb0bdcf7bd67bc882247f5e50f90c4e7adb71124ef48b42f0993988ea09df1401927f9cb1d45cde2aecee4a85279603ee2c40727e3df8875b1f5a05fa71c704879f758023509e4a4ef695242798f4492572fa8072f87b1bc08faa1849ec6fb4e0f3f957f8df7c0c0c18e77484229e5fb19031446516aaf20d0f0a0404a5e7cc5744abfcaf4d6570509cfb304d007a4c7ee2dd19610794d2e3360dd425eb92181730c269058ead75dd033512dd12c7d154f6cdeec57eea4e447c854064fa0e91bebe70525e58a4206ff65ae8d20498fd27147bd9979fe67a31747ca3b07e2946fa2a7c86a3d72f1aad5f5006e6d8beb3ab0a130a0dd5ef070838f01c12d9596239dc403e22198123e1239a7 public exponent: 10001 Signature Algorithm: SHA256WITHRSA Signature: 9a591e071396be1a01d72336b0a47738741e3bc1 ceb9c37263c15f47ba73a0cf479c33abf83459b2 fec64b2377f0532e162c144d8a58aa56eeef30dd 52cfaffaa452af21b3c7e0c72d0377119c17875c 4ffb85c9a723c2be55672f2d8fa920b04b854556 da7e929f40def88a1879c87a7e71b570f1bcbb26 6a3f6ed2f462b43f1356c14363e9f4274fff8170 1ee489c47eb5ea81c8a05e45101bf9460c0cbe85 f321510da32471b02c682a5e6fc5d24ec4d9a15b c5c3ec617e4b1feef07823b7800905e255a77204 28facde8c3c96885effd747d4673586f61160b50 69fb71bc022ec766e1f949260a17a996805ebdb1 c0dfbb51221ed4c4b9e061a0552869c9203a7e58 5c12cd3a319f6f9962bc732a6829c1f768eae594 10a0bd4c22b2ec24474268468f703e86af69b2c7 49a08bf6fc4015419ffbd882cf90a5e6a5025480 1c31a29b40bb2be91bbca095eef0cbfc5d99a29e a6677e3ad3f9b7e1b636d8af9c72617a5628a998 e8ae37bf0552a34f004da998e0202e17344e4b63 0954f4fd Extensions: critical(true) BasicConstraints: isCa(true) critical(false) 2.5.29.35 value = Sequence Tagged [0] IMPLICIT DER Octet String[20] critical(false) 2.5.29.14 value = DER Octet String[20] critical(true) KeyUsage: 0x86 Policy Tree: null Subject Public Key: RSA Public Key [f1:25:f3:f9:27:65:25:4a:99:ef:35:57:b8:97:de:1a:26:cf:6f:85] modulus: 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 public exponent: 10001 ] 2021-04-04 05:06:05.710  INFO 1 [nio-8443-exec-4] o.o.o.c.a.CertificationController  : Received certificate signing request for CA named: RA 2021-04-04 05:06:05.712 DEBUG 1 [nio-8443-exec-4] .o.c.c.Pkcs10CertificationRequestFactory : Creating certification request from pem object 2021-04-04 05:06:05.714 DEBUG 1 [nio-8443-exec-4] o.o.o.c.c.CertificationModelFactory  : Received CSR meta data: CSR: { Subject: { L=San-Francisco,OU=ONAP,O=Linux-Foundation,ST=California,C=US,CN=dcae-ves-collector-cmpv2-cert }, SANs: [dcae-ves-collector-cmpv2-cert, ves-collector-cmpv2-cert, ves-cmpv2-cert] } 2021-04-04 05:06:05.716 DEBUG 1 [nio-8443-exec-4] o.o.o.c.c.CertificationModelFactory  : Found server for given CA name: Cmpv2Server{authentication=Authentication{ iak=*****, rv=*****}, caMode=RA, caName='RA', issuerDN='CN=ManagementCA', url='http://ejbca:8080/ejbca/publicweb/cmp/cmpRA'} 2021-04-04 05:06:05.717  INFO 1 [nio-8443-exec-4] o.o.o.c.c.CertificationModelFactory  : Sending sign request for certification model for CA named: RA, and certificate signing request: CSR: { Subject: { L=San-Francisco,OU=ONAP,O=Linux-Foundation,ST=California,C=US,CN=dcae-ves-collector-cmpv2-cert }, SANs: [dcae-ves-collector-cmpv2-cert, ves-collector-cmpv2-cert, ves-cmpv2-cert] } 2021-04-04 05:06:05.718  INFO 1 [nio-8443-exec-4] o.o.o.c.c.i.CmpClientImpl  : Validate before creating Certificate Request for CA :RA in Mode RA 2021-04-04 05:06:05.718  INFO 1 [nio-8443-exec-4] o.o.o.c.c.i.CmpUtil  : Generating random integer 2021-04-04 05:06:05.719  INFO 1 [nio-8443-exec-4] o.o.o.c.c.i.CmpMessageHelper  : Generating Extensions from Subject Alternative Names 2021-04-04 05:06:05.720  INFO 1 [nio-8443-exec-4] o.o.o.c.c.i.CmpMessageHelper  : Generating Optional Validity from Date objects 2021-04-04 05:06:05.730  INFO 1 [nio-8443-exec-4] o.o.o.c.c.i.CmpUtil  : Generating a Pki Header Builder 2021-04-04 05:06:05.732  INFO 1 [nio-8443-exec-4] o.o.o.c.c.i.CmpUtil  : Generating random array of bytes 2021-04-04 05:06:05.732  INFO 1 [nio-8443-exec-4] o.o.o.c.c.i.CmpUtil  : Generating random array of bytes 2021-04-04 05:06:05.804  INFO 1 [nio-8443-exec-4] o.o.o.c.c.i.CmpUtil  : Generating array of bytes representing PkiHeader and PkiBody 2021-04-04 05:06:05.929  INFO 1 [nio-8443-exec-4] o.o.o.c.c.i.CmpClientImpl  : Received response from Server 2021-04-04 05:06:05.930  INFO 1 [nio-8443-exec-4] o.o.o.c.c.i.CmpResponseHelper  : Response type: 1 2021-04-04 05:06:05.930 DEBUG 1 [nio-8443-exec-4] o.o.o.c.c.i.CmpClientImpl  : Verifying signature of the response. 2021-04-04 05:06:05.934 DEBUG 1 [nio-8443-exec-4] o.o.o.c.c.i.CmpClientImpl  : Verifying PasswordBased Protection of the Response. 2021-04-04 05:06:05.935  INFO 1 [nio-8443-exec-4] o.o.o.c.c.i.CmpResponseValidationHelper  : Iteration count is: 1411 2021-04-04 05:06:05.936  INFO 1 [nio-8443-exec-4] o.o.o.c.c.i.CmpResponseValidationHelper  : One Way Function type is: 1.3.14.3.2.26 2021-04-04 05:06:05.937  INFO 1 [nio-8443-exec-4] o.o.o.c.c.i.CmpResponseValidationHelper  : Mac type is: 1.3.6.1.5.5.8.1.2 2021-04-04 05:06:05.938  INFO 1 [nio-8443-exec-4] o.o.o.c.c.i.CmpResponseValidationHelper  : Implicit Confirm on certificate from server. 2021-04-04 05:06:05.938  INFO 1 [nio-8443-exec-4] o.o.o.c.c.i.CmpClientImpl  : Response status code: 0 2021-04-04 05:06:05.939  INFO 1 [nio-8443-exec-4] o.o.o.c.c.i.CmpClientImpl  : Verifying certificates returned as part of CertResponse. 2021-04-04 05:06:05.939 DEBUG 1 [nio-8443-exec-4] o.o.o.c.c.i.CmpResponseHelper  : Retrieving certificate of type class java.security.cert.X509Certificate from byte array. 2021-04-04 05:06:05.940 DEBUG 1 [nio-8443-exec-4] o.o.o.c.c.i.CmpResponseHelper  : Parsing X509Certificate from bytes with provider BC 2021-04-04 05:06:05.940 DEBUG 1 [nio-8443-exec-4] o.o.o.c.c.i.CmpResponseHelper  : Creating certificate Factory to generate certificate using provider BC 2021-04-04 05:06:05.941 DEBUG 1 [nio-8443-exec-4] o.o.o.c.c.i.CmpResponseHelper  : Retrieving certificate of type class java.security.cert.X509Certificate from byte array. 2021-04-04 05:06:05.941 DEBUG 1 [nio-8443-exec-4] o.o.o.c.c.i.CmpResponseHelper  : Parsing X509Certificate from bytes with provider BC 2021-04-04 05:06:05.942 DEBUG 1 [nio-8443-exec-4] o.o.o.c.c.i.CmpResponseHelper  : Creating certificate Factory to generate certificate using provider BC 2021-04-04 05:06:06.003 DEBUG 1 [nio-8443-exec-4] o.o.o.c.c.i.CmpResponseHelper  : Verifying certificate CN=dcae-ves-collector-cmpv2-cert,OU=ONAP,O=Linux-Foundation,L=San-Francisco,ST=California,C=US as part of cert chain with certificate UID=c-0f54ca251c0d1dbea,CN=ManagementCA,O=EJBCA Container Quickstart 2021-04-04 05:06:06.007 DEBUG 1 [nio-8443-exec-4] o.o.o.c.c.i.CmpResponseHelper  : Certificate verify result:PKIXCertPathValidatorResult: [ Trust Anchor: [ Trusted CA cert: [0] Version: 3 SerialNumber: 225953294071095954819655330023732728634165323117 IssuerDN: UID=c-0f54ca251c0d1dbea,CN=ManagementCA,O=EJBCA Container Quickstart Start Date: Sun Apr 04 03:53:36 UTC 2021 Final Date: Fri Apr 04 03:53:36 UTC 2031 SubjectDN: UID=c-0f54ca251c0d1dbea,CN=ManagementCA,O=EJBCA Container Quickstart Public Key: RSA Public Key [b8:af:62:9e:63:0d:f5:eb:9d:d1:fd:22:be:a7:07:22:ce:21:b7:77] modulus: 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 public exponent: 10001 Signature Algorithm: SHA256WITHRSA Signature: 9a591e071396be1a01d72336b0a47738741e3bc1 ceb9c37263c15f47ba73a0cf479c33abf83459b2 fec64b2377f0532e162c144d8a58aa56eeef30dd 52cfaffaa452af21b3c7e0c72d0377119c17875c 4ffb85c9a723c2be55672f2d8fa920b04b854556 da7e929f40def88a1879c87a7e71b570f1bcbb26 6a3f6ed2f462b43f1356c14363e9f4274fff8170 1ee489c47eb5ea81c8a05e45101bf9460c0cbe85 f321510da32471b02c682a5e6fc5d24ec4d9a15b c5c3ec617e4b1feef07823b7800905e255a77204 28facde8c3c96885effd747d4673586f61160b50 69fb71bc022ec766e1f949260a17a996805ebdb1 c0dfbb51221ed4c4b9e061a0552869c9203a7e58 5c12cd3a319f6f9962bc732a6829c1f768eae594 10a0bd4c22b2ec24474268468f703e86af69b2c7 49a08bf6fc4015419ffbd882cf90a5e6a5025480 1c31a29b40bb2be91bbca095eef0cbfc5d99a29e a6677e3ad3f9b7e1b636d8af9c72617a5628a998 e8ae37bf0552a34f004da998e0202e17344e4b63 0954f4fd Extensions: critical(true) BasicConstraints: isCa(true) critical(false) 2.5.29.35 value = Sequence Tagged [0] IMPLICIT DER Octet String[20] critical(false) 2.5.29.14 value = DER Octet String[20] critical(true) KeyUsage: 0x86 Policy Tree: null Subject Public Key: RSA Public Key [9b:89:03:fb:9f:e2:53:a0:b0:cc:8a:8c:24:c2:90:93:fe:f0:eb:8e] modulus: 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 public exponent: 10001 ] 2021-04-04 05:08:19.053  INFO 1 [nio-8443-exec-9] o.o.o.c.a.CertificationController  : Received certificate signing request for CA named: RA 2021-04-04 05:08:19.055 DEBUG 1 [nio-8443-exec-9] .o.c.c.Pkcs10CertificationRequestFactory : Creating certification request from pem object 2021-04-04 05:08:19.057 DEBUG 1 [nio-8443-exec-9] o.o.o.c.c.CertificationModelFactory  : Received CSR meta data: CSR: { Subject: { L=San-Francisco,OU=ONAP,O=Linux-Foundation,ST=California,C=US,CN=dcae-ves-collector-cmpv2-cert-wrong-sans }, SANs: [wrong-sans] } 2021-04-04 05:08:19.059 DEBUG 1 [nio-8443-exec-9] o.o.o.c.c.CertificationModelFactory  : Found server for given CA name: Cmpv2Server{authentication=Authentication{ iak=*****, rv=*****}, caMode=RA, caName='RA', issuerDN='CN=ManagementCA', url='http://ejbca:8080/ejbca/publicweb/cmp/cmpRA'} 2021-04-04 05:08:19.059  INFO 1 [nio-8443-exec-9] o.o.o.c.c.CertificationModelFactory  : Sending sign request for certification model for CA named: RA, and certificate signing request: CSR: { Subject: { L=San-Francisco,OU=ONAP,O=Linux-Foundation,ST=California,C=US,CN=dcae-ves-collector-cmpv2-cert-wrong-sans }, SANs: [wrong-sans] } 2021-04-04 05:08:19.102  INFO 1 [nio-8443-exec-9] o.o.o.c.c.i.CmpClientImpl  : Validate before creating Certificate Request for CA :RA in Mode RA 2021-04-04 05:08:19.103  INFO 1 [nio-8443-exec-9] o.o.o.c.c.i.CmpUtil  : Generating random integer 2021-04-04 05:08:19.104  INFO 1 [nio-8443-exec-9] o.o.o.c.c.i.CmpMessageHelper  : Generating Extensions from Subject Alternative Names 2021-04-04 05:08:19.105  INFO 1 [nio-8443-exec-9] o.o.o.c.c.i.CmpMessageHelper  : Generating Optional Validity from Date objects 2021-04-04 05:08:19.115  INFO 1 [nio-8443-exec-9] o.o.o.c.c.i.CmpUtil  : Generating a Pki Header Builder 2021-04-04 05:08:19.116  INFO 1 [nio-8443-exec-9] o.o.o.c.c.i.CmpUtil  : Generating random array of bytes 2021-04-04 05:08:19.116  INFO 1 [nio-8443-exec-9] o.o.o.c.c.i.CmpUtil  : Generating random array of bytes 2021-04-04 05:08:19.118  INFO 1 [nio-8443-exec-9] o.o.o.c.c.i.CmpUtil  : Generating array of bytes representing PkiHeader and PkiBody 2021-04-04 05:08:19.203  INFO 1 [nio-8443-exec-9] o.o.o.c.c.i.CmpClientImpl  : Received response from Server 2021-04-04 05:08:19.204  INFO 1 [nio-8443-exec-9] o.o.o.c.c.i.CmpResponseHelper  : Response type: 1 2021-04-04 05:08:19.205 DEBUG 1 [nio-8443-exec-9] o.o.o.c.c.i.CmpClientImpl  : Verifying signature of the response. 2021-04-04 05:08:19.208 DEBUG 1 [nio-8443-exec-9] o.o.o.c.c.i.CmpClientImpl  : Verifying PasswordBased Protection of the Response. 2021-04-04 05:08:19.210  INFO 1 [nio-8443-exec-9] o.o.o.c.c.i.CmpResponseValidationHelper  : Iteration count is: 1411 2021-04-04 05:08:19.211  INFO 1 [nio-8443-exec-9] o.o.o.c.c.i.CmpResponseValidationHelper  : One Way Function type is: 1.3.14.3.2.26 2021-04-04 05:08:19.213  INFO 1 [nio-8443-exec-9] o.o.o.c.c.i.CmpResponseValidationHelper  : Mac type is: 1.3.6.1.5.5.8.1.2 2021-04-04 05:08:19.214  INFO 1 [nio-8443-exec-9] o.o.o.c.c.i.CmpResponseValidationHelper  : Implicit Confirm on certificate from server. 2021-04-04 05:08:19.214  INFO 1 [nio-8443-exec-9] o.o.o.c.c.i.CmpClientImpl  : Response status code: 0 2021-04-04 05:08:19.215  INFO 1 [nio-8443-exec-9] o.o.o.c.c.i.CmpClientImpl  : Verifying certificates returned as part of CertResponse. 2021-04-04 05:08:19.215 DEBUG 1 [nio-8443-exec-9] o.o.o.c.c.i.CmpResponseHelper  : Retrieving certificate of type class java.security.cert.X509Certificate from byte array. 2021-04-04 05:08:19.215 DEBUG 1 [nio-8443-exec-9] o.o.o.c.c.i.CmpResponseHelper  : Parsing X509Certificate from bytes with provider BC 2021-04-04 05:08:19.216 DEBUG 1 [nio-8443-exec-9] o.o.o.c.c.i.CmpResponseHelper  : Creating certificate Factory to generate certificate using provider BC 2021-04-04 05:08:19.216 DEBUG 1 [nio-8443-exec-9] o.o.o.c.c.i.CmpResponseHelper  : Retrieving certificate of type class java.security.cert.X509Certificate from byte array. 2021-04-04 05:08:19.217 DEBUG 1 [nio-8443-exec-9] o.o.o.c.c.i.CmpResponseHelper  : Parsing X509Certificate from bytes with provider BC 2021-04-04 05:08:19.217 DEBUG 1 [nio-8443-exec-9] o.o.o.c.c.i.CmpResponseHelper  : Creating certificate Factory to generate certificate using provider BC 2021-04-04 05:08:19.218 DEBUG 1 [nio-8443-exec-9] o.o.o.c.c.i.CmpResponseHelper  : Verifying certificate CN=dcae-ves-collector-cmpv2-cert-wrong-sans,OU=ONAP,O=Linux-Foundation,L=San-Francisco,ST=California,C=US as part of cert chain with certificate UID=c-0f54ca251c0d1dbea,CN=ManagementCA,O=EJBCA Container Quickstart 2021-04-04 05:08:19.221 DEBUG 1 [nio-8443-exec-9] o.o.o.c.c.i.CmpResponseHelper  : Certificate verify result:PKIXCertPathValidatorResult: [ Trust Anchor: [ Trusted CA cert: [0] Version: 3 SerialNumber: 225953294071095954819655330023732728634165323117 IssuerDN: UID=c-0f54ca251c0d1dbea,CN=ManagementCA,O=EJBCA Container Quickstart Start Date: Sun Apr 04 03:53:36 UTC 2021 Final Date: Fri Apr 04 03:53:36 UTC 2031 SubjectDN: UID=c-0f54ca251c0d1dbea,CN=ManagementCA,O=EJBCA Container Quickstart Public Key: RSA Public Key [b8:af:62:9e:63:0d:f5:eb:9d:d1:fd:22:be:a7:07:22:ce:21:b7:77] modulus: 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 public exponent: 10001 Signature Algorithm: SHA256WITHRSA Signature: 9a591e071396be1a01d72336b0a47738741e3bc1 ceb9c37263c15f47ba73a0cf479c33abf83459b2 fec64b2377f0532e162c144d8a58aa56eeef30dd 52cfaffaa452af21b3c7e0c72d0377119c17875c 4ffb85c9a723c2be55672f2d8fa920b04b854556 da7e929f40def88a1879c87a7e71b570f1bcbb26 6a3f6ed2f462b43f1356c14363e9f4274fff8170 1ee489c47eb5ea81c8a05e45101bf9460c0cbe85 f321510da32471b02c682a5e6fc5d24ec4d9a15b c5c3ec617e4b1feef07823b7800905e255a77204 28facde8c3c96885effd747d4673586f61160b50 69fb71bc022ec766e1f949260a17a996805ebdb1 c0dfbb51221ed4c4b9e061a0552869c9203a7e58 5c12cd3a319f6f9962bc732a6829c1f768eae594 10a0bd4c22b2ec24474268468f703e86af69b2c7 49a08bf6fc4015419ffbd882cf90a5e6a5025480 1c31a29b40bb2be91bbca095eef0cbfc5d99a29e a6677e3ad3f9b7e1b636d8af9c72617a5628a998 e8ae37bf0552a34f004da998e0202e17344e4b63 0954f4fd Extensions: critical(true) BasicConstraints: isCa(true) critical(false) 2.5.29.35 value = Sequence Tagged [0] IMPLICIT DER Octet String[20] critical(false) 2.5.29.14 value = DER Octet String[20] critical(true) KeyUsage: 0x86 Policy Tree: null Subject Public Key: RSA Public Key [de:43:5a:81:9e:2a:2d:4f:06:5c:e5:63:ef:65:51:2e:68:63:f3:47] modulus: 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 public exponent: 10001 ]