2022-01-26 00:37:02,154 main INFO Log4j appears to be running in a Servlet environment, but there's no log4j-web module available. If you want better web container support, please add the log4j-web JAR to your web archive or server lib directory. 2022-01-26 00:37:05,457 main INFO Log4j appears to be running in a Servlet environment, but there's no log4j-web module available. If you want better web container support, please add the log4j-web JAR to your web archive or server lib directory. . ____ _ __ _ _ /\\ / ___'_ __ _ _(_)_ __ __ _ \ \ \ \ ( ( )\___ | '_ | '_| | '_ \/ _` | \ \ \ \ \\/ ___)| |_)| | | | | || (_| | ) ) ) ) ' |____| .__|_| |_|_| |_\__, | / / / / =========|_|==============|___/=/_/_/_/ :: Spring Boot :: (v2.5.8) 2022-01-26 00:37:08.247  INFO 1 [ main] o.s.b.SpringApplication  : No active profile set, falling back to default profiles: default Jan 26, 2022 12:37:15 AM org.apache.coyote.AbstractProtocol init INFO: Initializing ProtocolHandler ["https-jsse-nio-8443"] Jan 26, 2022 12:37:15 AM org.apache.catalina.core.StandardService startInternal INFO: Starting service [Tomcat] Jan 26, 2022 12:37:15 AM org.apache.catalina.core.StandardEngine startInternal INFO: Starting Servlet engine: [Apache Tomcat/9.0.56] Jan 26, 2022 12:37:15 AM org.apache.catalina.core.ApplicationContext log INFO: Initializing Spring embedded WebApplicationContext 2022-01-26 00:37:17.445 DEBUG 1 [ main] o.j.l.LoggerProviders  : Logging Provider: org.jboss.logging.Log4j2LoggerProvider 2022-01-26 00:37:18.453  INFO 1 [ main] o.o.o.c.c.c.CmpServersConfig  : Loading initial configuration 2022-01-26 00:37:19.054  INFO 1 [ main] o.o.o.c.c.c.CmpServersConfig  : CMP Servers configuration successfully loaded from file /etc/onap/oom/certservice/cmpServers.json 2022-01-26 00:37:21.563 DEBUG 1 [ main] o.s.w.s.h.AbstractHandlerMethodMapping  : o.o.o.c.a.ReloadConfigController: {GET [/reload], produces [application/json]}: reloadConfiguration() 2022-01-26 00:37:21.643 DEBUG 1 [ main] o.s.w.s.h.AbstractHandlerMethodMapping  : o.o.o.c.a.CertificationController: {GET [/v1/certificate/{caName}], produces [application/json]}: signCertificate(String,String,String) {GET [/v1/certificate-update/{caName}], produces [application/json]}: updateCertificate(String,String,String,String,String) 2022-01-26 00:37:21.644 DEBUG 1 [ main] o.s.w.s.h.AbstractHandlerMethodMapping  : o.o.o.c.a.ReadinessController: {GET [/ready], produces [application/json]}: checkReady() 2022-01-26 00:37:21.647 DEBUG 1 [ main] o.s.w.s.h.AbstractHandlerMethodMapping  : o.s.b.a.w.s.e.BasicErrorController: { [/error]}: error(HttpServletRequest) { [/error], produces [text/html]}: errorHtml(HttpServletRequest,HttpServletResponse) 2022-01-26 00:37:21.759 DEBUG 1 [ main] o.s.w.s.h.AbstractHandlerMethodMapping  : o.s.a.OpenApiResource: {GET [/v3/api-docs], produces [application/json]}: openapiJson(HttpServletRequest,String) {GET [/v3/api-docs.yaml], produces [application/vnd.oai.openapi]}: openapiYaml(HttpServletRequest,String) 2022-01-26 00:37:21.761 DEBUG 1 [ main] o.s.w.s.h.AbstractHandlerMethodMapping  : o.s.u.SwaggerWelcome: {GET [/v3/api-docs/swagger-config], produces [application/json]}: openapiYaml(HttpServletRequest) {GET [/docs]}: redirectToUi(HttpServletRequest) 2022-01-26 00:37:22.159 DEBUG 1 [ main] w.s.h.AbstractDetectingUrlHandlerMapping : 'beanNameHandlerMapping' {} 2022-01-26 00:37:25.346 DEBUG 1 [ main] o.s.w.s.h.SimpleUrlHandlerMapping  : 'resourceHandlerMapping' {/webjars/**=ResourceHttpRequestHandler [classpath [META-INF/resources/webjars/]], /**=ResourceHttpRequestHandler [classpath [META-INF/resources/], classpath [resources/], classpath [static/], classpath [public/], ServletContext [/]], /**/swagger-ui/**=ResourceHttpRequestHandler [classpath [META-INF/resources/webjars/]]} Jan 26, 2022 12:37:28 AM org.apache.coyote.AbstractProtocol start INFO: Starting ProtocolHandler ["https-jsse-nio-8443"] 2022-01-26 00:37:29.543  INFO 1 [ main] o.s.b.StartupInfoLogger  : Started CertServiceApplication in 30.007 seconds (JVM running for 36.134) Jan 26, 2022 12:37:32 AM org.apache.catalina.core.ApplicationContext log INFO: Initializing Spring DispatcherServlet 'dispatcherServlet' 2022-01-26 00:38:04.557  INFO 1 [io-8443-exec-10] o.o.o.c.a.CertificationController  : Received certificate initialization request for CA named: RA 2022-01-26 00:38:04.656 DEBUG 1 [io-8443-exec-10] .c.c.c.Pkcs10CertificationRequestFactory : Creating certification request from pem object 2022-01-26 00:38:04.847 DEBUG 1 [io-8443-exec-10] .o.c.c.CertificationResponseModelFactory : Received CSR meta data: CSR: { Subject: { C=US,ST=California,L=San-Francisco,O=Linux-Foundation,OU=ONAP,CN=sdnc.simpledemo.onap.org }, SANs: [sdnc.simpledemo.onap.org] } 2022-01-26 00:38:04.852 DEBUG 1 [io-8443-exec-10] .o.c.c.CertificationResponseModelFactory : Found server for given CA name: Cmpv2Server{authentication=Authentication{ iak=*****, rv=*****}, caName='RA', issuerDN='O=EJBCA Container Quickstart,CN=ManagementCA,UID=12345', url='http://ejbca:8080/ejbca/publicweb/cmp/cmpRA'} 2022-01-26 00:38:04.946  INFO 1 [io-8443-exec-10] .o.c.c.CertificationResponseModelFactory : Sending initialization request for certification model for CA named: RA, and certificate signing request: CSR: { Subject: { C=US,ST=California,L=San-Francisco,O=Linux-Foundation,OU=ONAP,CN=sdnc.simpledemo.onap.org }, SANs: [sdnc.simpledemo.onap.org] } 2022-01-26 00:38:04.949  INFO 1 [io-8443-exec-10] o.o.o.c.c.v.CmpCertificationValidator  : Validate before creating Certificate Request for CA: RA 2022-01-26 00:38:04.950  INFO 1 [io-8443-exec-10] o.o.o.c.c.v.CmpCertificationValidator  : Validation completed successfully. 2022-01-26 00:38:04.951 DEBUG 1 [io-8443-exec-10] o.o.o.c.c.i.CmpUtil  : Generating random integer 2022-01-26 00:38:04.952 DEBUG 1 [io-8443-exec-10] o.o.o.c.c.i.CmpUtil  : Generating random array of bytes 2022-01-26 00:38:04.955 DEBUG 1 [io-8443-exec-10] o.o.o.c.c.i.CmpUtil  : Generating random integer 2022-01-26 00:38:04.960 DEBUG 1 [io-8443-exec-10] o.o.o.c.c.i.CmpMessageHelper  : Generating Extensions from Subject Alternative Names 2022-01-26 00:38:04.963 DEBUG 1 [io-8443-exec-10] o.o.o.c.c.i.CmpMessageHelper  : Generating Optional Validity from Date objects 2022-01-26 00:38:05.152 DEBUG 1 [io-8443-exec-10] o.o.o.c.c.i.CmpUtil  : Generating a Pki Header Builder 2022-01-26 00:38:05.157 DEBUG 1 [io-8443-exec-10] o.o.o.c.c.i.CmpUtil  : Generating random array of bytes 2022-01-26 00:38:05.157 DEBUG 1 [io-8443-exec-10] o.o.o.c.c.i.CmpUtil  : Generating random array of bytes 2022-01-26 00:38:05.160 DEBUG 1 [io-8443-exec-10] o.o.o.c.c.i.CmpUtil  : Generating array of bytes representing PkiHeader and PkiBody 2022-01-26 00:38:06.453  INFO 1 [io-8443-exec-10] o.o.o.c.c.i.CmpClientImpl  : Received response from Server 2022-01-26 00:38:06.455  INFO 1 [io-8443-exec-10] o.o.o.c.c.i.CmpResponseHelper  : Response type is: INIT_REP 2022-01-26 00:38:06.456 DEBUG 1 [io-8443-exec-10] o.o.o.c.c.v.CmpCertificationValidator  : Verifying signature of the response. 2022-01-26 00:38:06.457 DEBUG 1 [io-8443-exec-10] o.o.o.c.c.i.CmpUtil  : Generating array of bytes representing PkiHeader and PkiBody 2022-01-26 00:38:06.546  INFO 1 [io-8443-exec-10] o.o.o.c.c.v.CmpCertificationValidator  : Response status code: 0 2022-01-26 00:38:06.547  INFO 1 [io-8443-exec-10] o.o.o.c.c.i.CmpClientImpl  : Verifying certificates returned as part of CertResponse. 2022-01-26 00:38:06.548 DEBUG 1 [io-8443-exec-10] o.o.o.c.c.i.CmpResponseHelper  : Retrieving certificate of type class java.security.cert.X509Certificate from byte array. 2022-01-26 00:38:06.548 DEBUG 1 [io-8443-exec-10] o.o.o.c.c.i.CmpResponseHelper  : Parsing X509Certificate from bytes with provider BC 2022-01-26 00:38:06.548 DEBUG 1 [io-8443-exec-10] o.o.o.c.c.i.CmpResponseHelper  : Creating certificate Factory to generate certificate using provider BC 2022-01-26 00:38:06.558 DEBUG 1 [io-8443-exec-10] o.o.o.c.c.i.CmpResponseHelper  : Retrieving certificate of type class java.security.cert.X509Certificate from byte array. 2022-01-26 00:38:06.558 DEBUG 1 [io-8443-exec-10] o.o.o.c.c.i.CmpResponseHelper  : Parsing X509Certificate from bytes with provider BC 2022-01-26 00:38:06.559 DEBUG 1 [io-8443-exec-10] o.o.o.c.c.i.CmpResponseHelper  : Creating certificate Factory to generate certificate using provider BC 2022-01-26 00:38:06.645 DEBUG 1 [io-8443-exec-10] o.o.o.c.c.i.CmpResponseHelper  : Retrieving certificate of type class java.security.cert.X509Certificate from byte array. 2022-01-26 00:38:06.646 DEBUG 1 [io-8443-exec-10] o.o.o.c.c.i.CmpResponseHelper  : Parsing X509Certificate from bytes with provider BC 2022-01-26 00:38:06.646 DEBUG 1 [io-8443-exec-10] o.o.o.c.c.i.CmpResponseHelper  : Creating certificate Factory to generate certificate using provider BC 2022-01-26 00:38:06.647 DEBUG 1 [io-8443-exec-10] o.o.o.c.c.i.CmpResponseHelper  : Verifying certificate CN=sdnc.simpledemo.onap.org,OU=ONAP,O=Linux-Foundation,L=San-Francisco,ST=California,C=US as part of cert chain with certificate UID=12345,CN=ManagementCA,O=EJBCA Container Quickstart 2022-01-26 00:38:06.753 DEBUG 1 [io-8443-exec-10] o.o.o.c.c.i.CmpResponseHelper  : Certificate verify result:PKIXCertPathValidatorResult: [ Trust Anchor: [ Trusted CA cert: [0] Version: 3 SerialNumber: 364374168438436349149650100379927208920436242875 IssuerDN: UID=12345,CN=ManagementCA,O=EJBCA Container Quickstart Start Date: Wed Jan 26 00:32:54 UTC 2022 Final Date: Mon Jan 26 00:32:53 UTC 2032 SubjectDN: UID=12345,CN=ManagementCA,O=EJBCA Container Quickstart Public Key: RSA Public Key [96:35:59:e4:5a:19:9c:ed:ac:35:83:05:83:8a:5e:ed:36:ee:64:14] modulus: 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 public exponent: 10001 Signature Algorithm: SHA256WITHRSA Signature: 3d61bf84cc6f250574547678f09c7bb3ccd351a1 6647b5f880db8b8fe36080ec3be43d9cccd52133 d1de61007d2842a83da5ab78637c89838b3fd80a 6f4bb1fce2ad7a1e10d345e8df32a7d46c02cc58 5cfae7c574fadea80b7de5da7852fb067d99f9eb ba039c24c9b393cd633cff05c9051d5ec541b535 dd9167f9a0955816aeefda1349444be5b91bbc93 7760a04f3f1292acc7a8b3a13f575e66e947f9ac f3758aefe6556337fe8aa09b64ab19667ed44824 a9ea5d3575fc6f5705f93a6181c011648d3f2c4d 90ceef41b2615069b0e7b93b93da39b559985936 996ab6c08d9e9a994172a9bbd0da70486a71c228 e2681ca7221af4670d01cd505280a5a90f28e7f0 c699d74b2db2731e15f31642a26549acdc2188ac 298ab9ea10f740d4037a2bc02cd24692455b9e16 351fd7a9ace4e8b8b667afe696467f85a40d264c 26dc283fdd479de13d7f7819a40c30fb1a02da51 08e2b6be9a8564cba65a5d7c64f4e358e623833c 5f300ff43079e80eada4baae9fd7d7a12c28ee91 42058585 Extensions: critical(true) BasicConstraints: isCa(true) critical(false) 2.5.29.35 value = Sequence Tagged [0] IMPLICIT DER Octet String[20] critical(false) 2.5.29.14 value = DER Octet String[20] critical(true) KeyUsage: 0x86 Policy Tree: null Subject Public Key: RSA Public Key [10:74:12:ba:15:27:f4:ce:b7:e8:39:81:80:eb:8e:5e:a2:f5:18:e3] modulus: a02fddee46ca8eb50906572959a9feb50a5b09d4fdce7245a813e0b901fb8cf340d9cc4a782b97cd72be82490917c36ff9809839323afdd76387d7ec236fc654f6fd34848c070ba0d9cf20390791517fe238dee48a7a3309b9397a5836752208f6e2fc2cf568a2b1b0c163b90a0099c4227a70213f28e659f1d731e48febfda4bb7587fb8fa6f05d1c77b20b89e88b8ca6281acda79e19f665489321cbec98376904f55ef8fde4e6055e58a005fc3b1f70220307af48f7716601c8e28ed9f4dc57445180cf89b791012f5dbfcd8858ec4aa51f8573307bd29cb0bb944baacf9e8a07f79aee7d852ba56220db428dc000c819840083e3d41d223092a89f9feb4d public exponent: 10001 ]