Hello Stijn,

the workflow ID being 0 is not a problem it just indicates a "volatile" workflow that runs in memory and is not persisted into the database.

A question upfront: Do your certifcates have other DN components than CN? If not than this is the problem as we do a sting match on the stringified subject with "CN=[% context.common_name %],*" which has oviously no result if there is no component after CN.

Otherwise the log looks ok, you can see the workflow is running but does not find anything for the query - I would suggest to raise the loglevel for the RPC wrapper to "TRACE" to see if the parameters are interpreted properly and handed over to the workflow, if this does also not help try running the search workflow from the command line

openxpkicmd certificate_search --param common_name=servername:1234 --context

if this returns a result, then something with your parameter input is wrong, if this also has no result I have no idea to be honest.

Oliver

On 16.05.23 16:11, Stijn Adriaensens via OpenXPKI-users wrote:

Hello OpenXPKI users,

I’m running an OpenXPKI 3.2.0 docker installation. The system has been up and running for a few years.

When trying to use the RPC endpoint (default configuration) and requesting the SearchCertificate procedure, a Workflow with ID 0 is created, and I’m never getting any result from the system. Even when searching a certificate of which I know it’s in there.

I’m not sure if this is normal behavior (workflow ID 0) or if I’m missing something else. During the setup of the system, this RPC call used to work, but for some reason (might be configuration related) I’m not able to get any results using RPC. Should I setup an alternate authentication stack and not use _System?

curl call:

curl --insecure -v -X POST --data "method=SearchCertificate" --data "common_name=servername:8089" http://pkisystem:15180/rpc/

rpc/default/conf:

[SearchCertificate]

workflow = certificate_search

param = common_name

output = cert_identifier, notbefore, notafter, status

OpenXPKI logging:

2023/05/16 15:29:30 INFO Purged 2 expired sessions [pid=9|sid=V34R]

2023/05/16 15:29:31 INFO New session created [pid=12|sid=z/9G]

2023/05/16 15:29:31 INFO Login successful using authentication stack '_System' (user: 'anonymous', role: 'System') [pid=12|sid=z/9G]

2023/05/16 15:29:31 INFO Loading 88 API plugins [pid=12|user=anonymous|role=System|sid=z/9G]

2023/05/16 15:29:31 INFO Instantiating workflow of with ID '' and type 'certificate_search' with current state 'INITIAL' [pid=12|user=anonymous|role=System|sid=z/9G]

2023/05/16 15:29:31 INFO Instantiated workflow object properly, persisting... [pid=12|user=anonymous|role=System|sid=z/9G]

2023/05/16 15:29:31 INFO Created volatile workflow for type certificate_search [pid=12|user=anonymous|role=System|sid=z/9G]

2023/05/16 15:29:31 INFO Persisted workflow with ID '0'; creating history... [pid=12|user=anonymous|role=System|sid=z/9G]

2023/05/16 15:29:31 INFO Created history object ok [pid=12|user=anonymous|role=System|sid=z/9G]

2023/05/16 15:29:31 INFO Workflow 0/certificate_search/INITIAL created [pid=12|user=anonymous|role=System|sid=z/9G]

2023/05/16 15:29:31 INFO Workflow instance 0 created for anonymous (type: 'certificate_search') [pid=12|user=anonymous|role=System|sid=z/9G|wftype=certificate_search|wfid=0]

2023/05/16 15:29:31 INFO Set new state 'RESULT' after action executed [pid=12|user=anonymous|role=System|sid=z/9G|wftype=certificate_search|wfid=0]

2023/05/16 15:29:31 INFO Workflow '0' updated ok [pid=12|user=anonymous|role=System|sid=z/9G|wftype=certificate_search|wfid=0]

2023/05/16 15:29:31 INFO Created necessary history objects ok [pid=12|user=anonymous|role=System|sid=z/9G|wftype=certificate_search|wfid=0]

2023/05/16 15:29:31 INFO Saved workflow with possible new state ok [pid=12|user=anonymous|role=System|sid=z/9G|wftype=certificate_search|wfid=0]

2023/05/16 15:29:31 INFO Workflow '0' updated ok [pid=12|user=anonymous|role=System|sid=z/9G|wftype=certificate_search|wfid=0]

2023/05/16 15:29:31 INFO Created necessary history objects ok [pid=12|user=anonymous|role=System|sid=z/9G|wftype=certificate_search|wfid=0]

2023/05/16 15:29:31 INFO Workflow 0/certificate_search/RESULT executed 'certsearch_initialize' in state 'INITIAL' [pid=12|user=anonymous|role=System|sid=z/9G|wftype=certificate_search|wfid=0]

2023/05/16 15:29:31 INFO Workflow 0/certificate_search/RESULT changed from state 'INITIAL' [pid=12|user=anonymous|role=System|sid=z/9G|wftype=certificate_search|wfid=0]

2023/05/16 15:29:31 INFO State 'RESULT' marked to be run automatically; executing that state/action... [pid=12|user=anonymous|role=System|sid=z/9G|wftype=certificate_search|wfid=0]

2023/05/16 15:29:31 INFO Evaluating '$context->{cert_identifier}' to see if it returns true... [pid=12|user=anonymous|role=System|sid=z/9G|wftype=certificate_search|wfid=0]

2023/05/16 15:29:31 INFO Evaluating '$context->{cert_identifier}' to see if it returns true... [pid=12|user=anonymous|role=System|sid=z/9G|wftype=certificate_search|wfid=0]

2023/05/16 15:29:31 INFO Workflow '0' updated ok [pid=12|user=anonymous|role=System|sid=z/9G|wftype=certificate_search|wfid=0]

2023/05/16 15:29:31 INFO Created necessary history objects ok [pid=12|user=anonymous|role=System|sid=z/9G|wftype=certificate_search|wfid=0]

2023/05/16 15:29:31 INFO Set new state 'NORESULT' after action executed [pid=12|user=anonymous|role=System|sid=z/9G|wftype=certificate_search|wfid=0]

2023/05/16 15:29:31 INFO Workflow '0' updated ok [pid=12|user=anonymous|role=System|sid=z/9G|wftype=certificate_search|wfid=0]

2023/05/16 15:29:31 INFO Created necessary history objects ok [pid=12|user=anonymous|role=System|sid=z/9G|wftype=certificate_search|wfid=0]

2023/05/16 15:29:31 INFO Saved workflow with possible new state ok [pid=12|user=anonymous|role=System|sid=z/9G|wftype=certificate_search|wfid=0]

2023/05/16 15:29:31 INFO Workflow '0' updated ok [pid=12|user=anonymous|role=System|sid=z/9G|wftype=certificate_search|wfid=0]

2023/05/16 15:29:31 INFO Created necessary history objects ok [pid=12|user=anonymous|role=System|sid=z/9G|wftype=certificate_search|wfid=0]

2023/05/16 15:29:31 INFO Workflow 0/certificate_search/NORESULT executed 'global_noop' (autorun) in state 'RESULT' [pid=12|user=anonymous|role=System|sid=z/9G|wftype=certificate_search|wfid=0]

2023/05/16 15:29:31 INFO Workflow 0/certificate_search/NORESULT changed from state 'RESULT' [pid=12|user=anonymous|role=System|sid=z/9G|wftype=certificate_search|wfid=0]

2023/05/16 15:29:31 INFO Workflow '0' updated ok [pid=12|user=anonymous|role=System|sid=z/9G|wftype=certificate_search|wfid=0]

2023/05/16 15:29:31 INFO Created necessary history objects ok [pid=12|user=anonymous|role=System|sid=z/9G|wftype=certificate_search|wfid=0]

2023/05/16 15:29:31 INFO Workflow '0' updated ok [pid=12|user=anonymous|role=System|sid=z/9G|wftype=certificate_search|wfid=0]

2023/05/16 15:29:31 INFO Created necessary history objects ok [pid=12|user=anonymous|role=System|sid=z/9G|wftype=certificate_search|wfid=0]

**

Best regards,
Stijn


Sensitivity: Company



_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users

--
Protect your environment -  close windows and adopt a penguin!
_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users

Reply via email to