1 - setup a kra instance with nethsm 2000 2 - use pkiconsole to login to kra 3 - goto "System Certificates/keys". select the kra server - cert. 4 - click add/renew 5 - when the wizard is ready to generate the server cert request , I see a message saying "server is unreachable". And I see this in catalina.out ==> catalina.out <== # Java VM: OpenJDK 64-Bit Server VM (1.6.0-b09 mixed mode linux-amd64) # Problematic frame: # V [libjvm.so+0x36dd33] # # An error report file with more information is saved as: # /tmp/hs_err_pid12644.log # # If you would like to submit a bug report, please visit: # http://icedtea.classpath.org/bugzilla #
We had a similar bug reported to this for other subystems that did not specify the hsm token. Those bugs were fixed and cert renewal works just fine there. For this bug, I tested the same scenario on a very recent kra connected to the hsm2000. I was then able to successfully request a renewed kra server certificate just fine. The progress made was past where the original server crash was noted. Marking modified for testing verification.
VERIFIED. CS8.1 nightly (x86_64) RHEL5.6(x86_64) nightly 1 - setup a kra instance with nethsm 2000 2 - use pkiconsole to login to kra 3 - goto "System Certificates/keys" -> "Local Certificates" -> select the kra SSL server - cert. 4 - click add/renew 5. wizard successfully generates certificate renewal request.