All,

This is solved. For those that find themselves in the same ship as I do,
it was versioning, as Fraser said.

The dir /var/lib/pki/pki-tomcat/ca/webapps was pointing to the wrong pki
package.

# Correct:
[root@starkey webapps]# rpm -qf
/usr/share/pki/ca/webapps/ca/WEB-INF/lib/pki-cmscore.jar
pki-ca-10.6.8-3.fc29.noarch

# Wrong:
[root@starkey webapps]# rpm -qf /usr/share/java/pki/pki-cmscore.jar
pki-server-10.6.8-3.fc29.noarch

In the meantime I am wondering how other's dir's are looking. More
symlinks? This installation is ancient (the 10 yead root-CA expired two
months ago), perhaps something went missing in the fedora updates.


[root@starkey ca]# pwd
/var/lib/pki/pki-tomcat/ca
[root@starkey ca]# ll
total 32
lrwxrwxrwx. 1 pkiuser pkiuser   29 Dec  7  2014 alias ->
/var/lib/pki/pki-tomcat/alias
lrwxrwxrwx. 1 pkiuser pkiuser   22 Dec  7  2014 conf ->
/etc/pki/pki-tomcat/ca
drwxrwx---. 2 pkiuser pkiuser 4096 Dec  7  2014 emails
lrwxrwxrwx. 1 pkiuser pkiuser   26 Dec  7  2014 logs ->
/var/log/pki/pki-tomcat/ca
drwxrwx---. 3 pkiuser pkiuser 4096 Dec  7  2014 profiles
lrwxrwxrwx. 1 pkiuser pkiuser   36 Dec  7  2014 registry ->
/etc/sysconfig/pki/tomcat/pki-tomcat
lrwxrwxrwx. 1 root    root      25 Dec 20 14:12 webapps ->
/usr/share/pki/ca/webapps

Kind Regards,

Arjen Heidinga


Op 14-12-18 om 15:52 schreef Arjen Heidinga via FreeIPA-users:
> Dear all,
>
> I fear somehow my freeipa server is broken. Perhaps it is time to create
> a new one, however that would be very time-consuming.
>
> Yesterday everything broke, after FreeIPA was upgraded. It is worth
> mentioning that I had certificate issues recently. My root-CA, and
> httpd-cert expired.
>
> When I start the tomcat-pki daemon, I get presented the stacktrace
> below. Note to mention, the pcscd lines are everytime exactly there when
> trying to start.
>
> I'd appreciate it if someone has a clue.
>
> Kind Regards,
>
> Arjen Heidinga
>
>
> Dec 14 15:31:44 starkey.platypusnet.org systemd[1]: Starting PKI Tomcat
> Server pki-tomcat...
> -- Subject: Unit [email protected] has begun start-up
> -- Defined-By: systemd
> -- Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
>
> _______________________________________________
> FreeIPA-users mailing list -- [email protected]
> To unsubscribe send an email to [email protected]
> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: 
> https://lists.fedorahosted.org/archives/list/[email protected]

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/[email protected]

Reply via email to