This is also happening on my current deployment of 1.20.2 running on Ubuntu 
14.04. Trying to migrate to Debian 10 + OpenXPKI 3.2.x for better supported.

Both instances are running side by side. I set up a “clean” schema in MySQL, 
then used a sql compare tool to migrate data from current DB to 3.2 clean db.

Then, took relevant configuration files and had to reconcile them against the 
template realm bundle and got 1 of my 7 realms working as expected, EXCEPT this 
failure when trying to complete certificate generation.

2019/12/26 23:00:20 openxpki.system.ERROR Could not find token alias by group; 
__group__ => signer-1, __noafter__ => 1640581220, __notbefore__ => 1577422820, 
__pki_realm__ => realm-1 [pid=15661|sid=mzDc]
2019/12/26 23:00:20 openxpki.application.ERROR NICE backend error: 
I18N_OPENXPKI_UI_NICE_BACKEND_ERROR [pid=15661|sid=mzDc]
2019/12/26 23:00:20 openxpki.workflow.INFO Workflow 
1793279/certificate_signing_request_v2/APPROVED_GLOBAL_PERSIST_CSR_0 paused at 
action global_nice_issue_certificate, cause: 
I18N_OPENXPKI_UI_NICE_BACKEND_ERROR [pid=15661|sid=mzDc]
2019/12/26 23:00:20 openxpki.application.INFO Action 
global_nice_issue_certificate paused (I18N_OPENXPKI_UI_NICE_BACKEND_ERROR), 
wakeup 2019-12-27T05:05:03 [pid=15661|sid=mzDc]
2019/12/26 23:00:20 Workflow.ERROR Caught exception from action: [Generic 
exception]; reset workflow to old state 'APPROVED_GLOBAL_PERSIST_CSR_0' 
[pid=15661|sid=mzDc]
2019/12/26 23:05:05 openxpki.system.ERROR Could not find token alias by group; 
__group__ => signer-1, __noafter__ => 1640581505, __notbefore__ => 1577423105, 
__pki_realm__ => realm-1 [pid=15672|user=20578|role=RA Operator|sid=fADC]
2019/12/26 23:05:05 openxpki.application.ERROR NICE backend error: 
I18N_OPENXPKI_UI_NICE_BACKEND_ERROR [pid=15672|user=20578|role=RA 
Operator|sid=fADC]
2019/12/26 23:05:05 Workflow.ERROR Caught exception from action: [Generic 
exception]; reset workflow to old state 'APPROVED_GLOBAL_PERSIST_CSR_0' 
[pid=15672|user=20578|role=RA Operator|sid=fADC]
2019/12/26 23:11:42 openxpki.system.ERROR Could not find token alias by group; 
__group__ => signer-1, __noafter__ => 1640581902, __notbefore__ => 1577423502, 
__pki_realm__ => realm-1 [pid=15793|sid=me9z]
2019/12/26 23:11:42 openxpki.application.ERROR NICE backend error: 
I18N_OPENXPKI_UI_NICE_BACKEND_ERROR [pid=15793|sid=me9z]
2019/12/26 23:11:42 Workflow.ERROR Caught exception from action: [Generic 
exception]; reset workflow to old state 'APPROVED_GLOBAL_PERSIST_CSR_0' 
[pid=15793|sid=me9z]


Thanks,
Drew


From: Drew Reis <[email protected]>
Date: Friday, December 27, 2019 at 4:52 AM
To: [email protected] <[email protected]>
Subject: [OpenXPKI-users] ERROR while issuing certificate: PAUSED: Backend 
Communication Error
Trying to upgrade from 1.20.1 to 3.2.1.

Receiving the following error when trying to issue a new certificate:

2019/12/26 23:00:20 ERROR Could not find token alias by group; __group__ => 
signer-1, __noafter__ => 1640581220, __notbefore__ => 1577422820, __pki_realm__ 
=> realm [pid=15661|sid=mzDc]

No other logs show any other errors. All aliases and keys show up when running: 
openxpkiadm {alias,key} –realm signer-1

Please advise.

Drew

_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users

Reply via email to