Hi Drew, the naming of the "signer tokens" has changed - compare the head section of "crypto.yaml" inside the realm directories.
You must either keep the naming of your old crypto.yaml or reassign the certsign token alias using the new group name. Oliver Am 27.12.19 um 17:21 schrieb Drew Reis: > This is also happening on my current deployment of 1.20.2 running on > Ubuntu 14.04. Trying to migrate to Debian 10 + OpenXPKI 3.2.x for better > supported. > > > > Both instances are running side by side. I set up a “clean” schema in > MySQL, then used a sql compare tool to migrate data from current DB to > 3.2 clean db. > > > > Then, took relevant configuration files and had to reconcile them > against the template realm bundle and got 1 of my 7 realms working as > expected, EXCEPT this failure when trying to complete certificate > generation. > > > > 2019/12/26 23:00:20 openxpki.system.ERROR Could not find token alias by > group; __group__ => signer-1, __noafter__ => 1640581220, __notbefore__ > => 1577422820, __pki_realm__ => realm-1 [pid=15661|sid=mzDc] > > 2019/12/26 23:00:20 openxpki.application.ERROR NICE backend error: > I18N_OPENXPKI_UI_NICE_BACKEND_ERROR [pid=15661|sid=mzDc] > > 2019/12/26 23:00:20 openxpki.workflow.INFO Workflow > 1793279/certificate_signing_request_v2/APPROVED_GLOBAL_PERSIST_CSR_0 > paused at action global_nice_issue_certificate, cause: > I18N_OPENXPKI_UI_NICE_BACKEND_ERROR [pid=15661|sid=mzDc] > > 2019/12/26 23:00:20 openxpki.application.INFO Action > global_nice_issue_certificate paused > (I18N_OPENXPKI_UI_NICE_BACKEND_ERROR), wakeup 2019-12-27T05:05:03 > [pid=15661|sid=mzDc] > > 2019/12/26 23:00:20 Workflow.ERROR Caught exception from action: > [Generic exception]; reset workflow to old state > 'APPROVED_GLOBAL_PERSIST_CSR_0' [pid=15661|sid=mzDc] > > 2019/12/26 23:05:05 openxpki.system.ERROR Could not find token alias by > group; __group__ => signer-1, __noafter__ => 1640581505, __notbefore__ > => 1577423105, __pki_realm__ => realm-1 [pid=15672|user=20578|role=RA > Operator|sid=fADC] > > 2019/12/26 23:05:05 openxpki.application.ERROR NICE backend error: > I18N_OPENXPKI_UI_NICE_BACKEND_ERROR [pid=15672|user=20578|role=RA > Operator|sid=fADC] > > 2019/12/26 23:05:05 Workflow.ERROR Caught exception from action: > [Generic exception]; reset workflow to old state > 'APPROVED_GLOBAL_PERSIST_CSR_0' [pid=15672|user=20578|role=RA > Operator|sid=fADC] > > 2019/12/26 23:11:42 openxpki.system.ERROR Could not find token alias by > group; __group__ => signer-1, __noafter__ => 1640581902, __notbefore__ > => 1577423502, __pki_realm__ => realm-1 [pid=15793|sid=me9z] > > 2019/12/26 23:11:42 openxpki.application.ERROR NICE backend error: > I18N_OPENXPKI_UI_NICE_BACKEND_ERROR [pid=15793|sid=me9z] > > 2019/12/26 23:11:42 Workflow.ERROR Caught exception from action: > [Generic exception]; reset workflow to old state > 'APPROVED_GLOBAL_PERSIST_CSR_0' [pid=15793|sid=me9z] > > > > > > *Thanks,* > > *Drew* > > > > > > *From: *Drew Reis <[email protected]> > *Date: *Friday, December 27, 2019 at 4:52 AM > *To: *[email protected] > <[email protected]> > *Subject: *[OpenXPKI-users] ERROR while issuing certificate: PAUSED: > Backend Communication Error > > Trying to upgrade from 1.20.1 to 3.2.1. > > > > Receiving the following error when trying to issue a new certificate: > > > > 2019/12/26 23:00:20 ERROR Could not find token alias by group; __group__ > => signer-1, __noafter__ => 1640581220, __notbefore__ => 1577422820, > __pki_realm__ => realm [pid=15661|sid=mzDc] > > > > No other logs show any other errors. All aliases and keys show up when > running: openxpkiadm {alias,key} –realm signer-1 > > > > Please advise. > > > > *Drew* > > > > > > _______________________________________________ > OpenXPKI-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/openxpki-users > -- Protect your environment - close windows and adopt a penguin!
smime.p7s
Description: S/MIME Cryptographic Signature
_______________________________________________ OpenXPKI-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openxpki-users
