Bug 1914587

Description of problem:

there have been this error in all the RHEL IPA PKI CA's debug log each time a getSatus is serviced:

/var/log/pki/pki-tomcat/ca/debug

[07/Jan/2021:23:50:24][http-bio-8080-exec-1]: CMSServlet:service() uri = /ca/admin/ca/getStatus
[07/Jan/2021:23:50:24][http-bio-8080-exec-1]: CMSServlet: caGetStatus start to service.
[07/Jan/2021:23:50:24][http-bio-8080-exec-1]: Failed to read product version String. java.io.FileNotFoundException: /usr/share/pki/CS_SERVER_VERSION (No such file or directory)

the package version is returned, but there is this Java exception and error message that appears and is confusing.

this is a non fatal and cosmetic error, but is should not be triggered logged in RHEL IPA.


this happens because the package redhat-pki-server-theme is not installed in IPA context.

this version status feature was added in the layered product RHCS for common criteria and as a general troubleshooting improvment, probably on 2018:
bz 1624097 - CC: Identify version/release of all relevant PKI RPMS in a file for easy identification
https://bugzilla.redhat.com/1624097
and implemented for RHCS, in getStatus, with the PKI server used as a layered product in mind.

and in IPA context, or if redhat-pki-server-theme is not installed, only the presence of the file /usr/share/pki/VERSION provided by pki-core should be tested.

so we may need to improve in
base/server/cms/src/com/netscape/cms/servlet/csadmin/GetStatus.java
    protected void process(CMSRequest cmsReq) throws EBaseException {
the call to
            String productVersion = getProductVersion(productVersionFILE);


Version-Release number of selected component (if applicable):
RHEL-7

How reproducible:
on demand

Steps to Reproduce:

1. install RHEL IPA with a CA

2. test:
tail -f /var/log/pki/pki-tomcat/ca/debug &
curl --cacert /etc/ipa/ca.crt https://`hostname -f`:8443/ca/admin/ca/getStatus


Actual results:

[10/Jan/2021:00:04:28][http-bio-8443-exec-1]: SignedAuditLogger: event ACCESS_SESSION_ESTABLISH
[10/Jan/2021:00:04:28][http-bio-8443-exec-1]: CMSServlet:service() uri = /ca/admin/ca/getStatus
[10/Jan/2021:00:04:28][http-bio-8443-exec-1]: CMSServlet: caGetStatus start to service.
[10/Jan/2021:00:04:28][http-bio-8443-exec-1]: Failed to read product version String. java.io.FileNotFoundException: /usr/share/pki/CS_SERVER_VERSION (No such file or directory)
<?xml version="1.0" encoding="UTF-8" standalone="no"?><XMLResponse><State>1</State><Type>CA</Type><Status>running</Status><Version>10.5.17-6.el7</Version></XMLResponse>[10/Jan/2021:00:04:28][http-bio-8443-exec-1]: CMSServlet: curDate=Sun Jan 10 00:04:28 UTC 2021 id=caGetStatus time=4
[root@ipaserver1 ~]# [10/Jan/2021:00:04:28][http-bio-8443-exec-1]: SignedAuditLogger: event ACCESS_SESSION_TERMINATED
[10/Jan/2021:00:04:28][http-bio-8443-exec-1]: SignedAuditLogger: event ACCESS_SESSION_TERMINATED


Expected results:
yes


Additional info:
this is "not clean" in the debug log when it comes to troubleshoot or audit RHEL IPA.