Non shared tomcat instance:

[root@sigma ~]# pkispawn -s OCSP -f /tmp/ocsp_hsm_instance_nonshared.inf
Loading deployment configuration from /tmp/ocsp_hsm_instance_nonshared.inf.
Installing OCSP into /var/lib/pki/rootocsp.
Storing deployment configuration into
/etc/sysconfig/pki/tomcat/rootocsp/ocsp/deployment.cfg.
pkispawn    : ERROR    ....... Exception from Java Configuration Servlet: 500
Server Error: Internal Server Error
pkispawn    : ERROR    ....... ParseError: not well-formed (invalid token):
line 1, column 0: {"Attributes":{"Attribute":[]},"ClassName":"com.netscape.cert
srv.base.PKIException","Code":500,"Message":"Error in setting certificate names
and key sizes: java.io.IOException: java.io.IOException: SSL_ForceHandshake
failed: (-5938) Encountered end of file."}

Installation failed.

Attaching the ocsp debug log

Shared tomcat instance:

[root@sigma ~]# pkispawn -s OCSP -f /tmp/ocsp_hsm_instance_shared.inf
Loading deployment configuration from /tmp/ocsp_hsm_instance_shared.inf.
Installing OCSP into /var/lib/pki/pki-new-master.
Storing deployment configuration into
/etc/sysconfig/pki/tomcat/pki-new-master/ocsp/deployment.cfg.
ERROR: Failed to add module "nfast". Probable cause : "The certificate/key
database is in an old, unsupported format.".
pkispawn    : ERROR    ....... subprocess.CalledProcessError:  Command
'['modutil', '-dbdir', '/etc/pki/pki-new-master/alias', '-nocertdb', '-add',
'nfast', '-libfile', '/opt/nfast/toolkits/pkcs11/libcknfast.so', '-force']'
returned non-zero exit status 22!

Installation failed.

Trying to add hsm module nfast when it already exist

pkispawn fails

pkispawn should succeed