#1544 CA cloning when serial number range is less than serialCloneTransferNumber throws an exception
Closed: migrated 3 years ago by dmoluguw. Opened 8 years ago by rpattath.

CA cloning when serial number range is less than serialCloneTransferNumber
throws an exception

Steps to Reproduce:

1. pkispawn master CA
2. edit CS.cfg

beginSerialNumber=1
endSerialNumber=100

cloneTansferNumber=1000

Actual results:

[root@qe-blade-03 dogtag]# pkispawn -s CA -f /tmp/cloneca_instance.inf
Log file: /var/log/pki/pki-ca-spawn.20150805162349.log
Loading deployment configuration from /tmp/cloneca_instance.inf.
Installing CA into /var/lib/pki/clone1.
Storing deployment configuration into
/etc/sysconfig/pki/tomcat/clone1/ca/deployment.cfg.
password file contains no data
pkispawn    : ERROR    ....... Exception from Java Configuration Servlet: 500
Server Error: Internal Server Error
pkispawn    : ERROR    ....... ParseError: mismatched tag: line 76, column 183:
<html><head><title>Apache Tomcat/7.0.54 - Error report</title><style><!--H1 {fo
nt-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;font-siz
e:22px;} H2 {font-family:Tahoma,Arial,sans-serif;color:white;background-color:#
525D76;font-size:16px;} H3 {font-family:Tahoma,Arial,sans-serif;color:white;bac
kground-color:#525D76;font-size:14px;} BODY
{font-family:Tahoma,Arial,sans-serif;color:black;background-color:white;} B
{font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;} P {
font-family:Tahoma,Arial,sans-serif;background:white;color:black;font-size:12px
;}A {color : black;}A.name {color : black;}HR {color : #525D76;}--></style>
</head><body><h1>HTTP Status 500 - java.io.IOException: Error: Failed to update
number range.</h1><HR size="1" noshade="noshade"><p><b>type</b> Exception
report</p><p><b>message</b> <u>java.io.IOException: Error: Failed to update
number range.</u></p><p><b>description</b> <u>The server encountered an
internal error that prevented it from fulfilling this
request.</u></p><p><b>exception</b>
<pre>org.jboss.resteasy.spi.UnhandledException: java.io.IOException: Error:
Failed to update number range.
        org.jboss.resteasy.core.ExceptionHandler.handleApplicationException(Exc
eptionHandler.java:76)
        org.jboss.resteasy.core.ExceptionHandler.handleException(ExceptionHandl
er.java:212)
        org.jboss.resteasy.core.SynchronousDispatcher.writeException(Synchronou
sDispatcher.java:149)
        org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatc
her.java:372)
        org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatc
her.java:179)
        org.jboss.resteasy.plugins.server.servlet.ServletContainerDispatcher.se
rvice(ServletContainerDispatcher.java:220)
        org.jboss.resteasy.plugins.server.servlet.HttpServletDispatcher.service
(HttpServletDispatcher.java:56)
        org.jboss.resteasy.plugins.server.servlet.HttpServletDispatcher.service
(HttpServletDispatcher.java:51)
        javax.servlet.http.HttpServlet.service(HttpServlet.java:727)
        sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
        sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccesso
rImpl.java:43)
        java.lang.reflect.Method.invoke(Method.java:606)
        org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:277)
        org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:274)
        java.security.AccessController.doPrivileged(Native Method)
        javax.security.auth.Subject.doAsPrivileged(Subject.java:536)
org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:309)
org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:169)
        java.security.AccessController.doPrivileged(Native Method)
        org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52)
        sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
        sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccesso
rImpl.java:43)
        java.lang.reflect.Method.invoke(Method.java:606)
        org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:277)
        org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:274)
        java.security.AccessController.doPrivileged(Native Method)
        javax.security.auth.Subject.doAsPrivileged(Subject.java:536)
org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:309)
org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:249)
</pre></p><p><b>root cause</b> <pre>java.io.IOException: Error: Failed to
update number range.
        com.netscape.cms.servlet.csadmin.ConfigurationUtils.updateNumberRange(C
onfigurationUtils.java:735)
        com.netscape.cms.servlet.csadmin.ConfigurationUtils.getConfigEntriesFro
mMaster(ConfigurationUtils.java:614)
        org.dogtagpki.server.rest.SystemConfigService.configureClone(SystemConf
igService.java:837)
        org.dogtagpki.server.rest.SystemConfigService.configureSubsystem(System
ConfigService.java:983)
        org.dogtagpki.server.rest.SystemConfigService.configure(SystemConfigSer
vice.java:163)
        org.dogtagpki.server.rest.SystemConfigService.configure(SystemConfigSer
vice.java:120)
        sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
        sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccesso
rImpl.java:43)
        java.lang.reflect.Method.invoke(Method.java:606)
org.jboss.resteasy.core.MethodInjectorImpl.invoke(MethodInjectorImpl.java:137)
        org.jboss.resteasy.core.ResourceMethodInvoker.invokeOnTarget(ResourceMe
thodInvoker.java:280)
        org.jboss.resteasy.core.ResourceMethodInvoker.invoke(ResourceMethodInvo
ker.java:234)
        org.jboss.resteasy.core.ResourceMethodInvoker.invoke(ResourceMethodInvo
ker.java:221)
        org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatc
her.java:356)
        org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatc
her.java:179)
        org.jboss.resteasy.plugins.server.servlet.ServletContainerDispatcher.se
rvice(ServletContainerDispatcher.java:220)
        org.jboss.resteasy.plugins.server.servlet.HttpServletDispatcher.service
(HttpServletDispatcher.java:56)
        org.jboss.resteasy.plugins.server.servlet.HttpServletDispatcher.service
(HttpServletDispatcher.java:51)
        javax.servlet.http.HttpServlet.service(HttpServlet.java:727)
        sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
        sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccesso
rImpl.java:43)
        java.lang.reflect.Method.invoke(Method.java:606)
        org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:277)
        org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:274)
        java.security.AccessController.doPrivileged(Native Method)
        javax.security.auth.Subject.doAsPrivileged(Subject.java:536)
org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:309)
org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:169)
        java.security.AccessController.doPrivileged(Native Method)
        org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52)
        sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
        sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccesso
rImpl.java:43)
        java.lang.reflect.Method.invoke(Method.java:606)
        org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:277)
        org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:274)
        java.security.AccessController.doPrivileged(Native Method)
        javax.security.auth.Subject.doAsPrivileged(Subject.java:536)
org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:309)
org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:249)
</pre></p><p><b>note</b> <u>The full stack trace of the root cause is available
in the Apache Tomcat/7.0.54 logs.</u></p><HR size="1"
noshade="noshade"><h3>Apache Tomcat/7.0.54</h3></body></html>

Installation failed.

Expected results:

Proper error message should be shown

Per CS/DS meeting of 08/10/2015: 10.3

Filed Bugzilla Bug #1252169 to document this as a known issue in the release notes.

Per Bug Triage of 05/05/2016: 10.4

NOTE: (corner case)

Per Offline Triage of 11/30/2016-12/01/2016: FUTURE - minor

Metadata Update from @rpattath:
- Issue set to the milestone: FUTURE

7 years ago

Metadata Update from @mharmsen:
- Custom field feature adjusted to None
- Custom field lowhangingfruit adjusted to vakwetu: X
- Custom field proposedmilestone adjusted to None
- Custom field proposedpriority adjusted to None
- Custom field reviewer adjusted to None
- Custom field version adjusted to None
- Issue close_status updated to: None

6 years ago

Per 10.5.x/10.6 Triage: FUTURE

RHBZ: CLOSED UPSTREAM

Metadata Update from @mharmsen:
- Custom field rhbz reset (from https://bugzilla.redhat.com/show_bug.cgi?id=1250734)

5 years ago

Dogtag PKI is moving from Pagure issues to GitHub issues. This means that existing or new
issues will be reported and tracked through Dogtag PKI's GitHub Issue tracker.

This issue has been cloned to GitHub and is available here:
https://github.com/dogtagpki/pki/issues/2103

If you want to receive further updates on the issue, please navigate to the
GitHub issue and click on Subscribe button.

Thank you for understanding, and we apologize for any inconvenience.

Metadata Update from @dmoluguw:
- Issue close_status updated to: migrated
- Issue status updated to: Closed (was: Open)

3 years ago

Login to comment on this ticket.

Metadata