Re: [Ejbca-develop] EJBCA OCSP Responder does not appear to

[<oh...@ya...>]

 Hi,
I got the index done and now am running the CRL import, which has been running about 1/2 hour now, but so far, only about 5500 entries imported, so it doesn't look like it hugely faster than before?
I was wondering... on the server side, I think outputting messages like the following to stdout for every entry in the CRL:
09:32:37,008 INFO  [org.cesecore.audit.impl.log4j.Log4jDevice] (default task-1) 2019-07-19 09:32:37-04:00;ACCESS_CONTROL;SUCCESS;ACCESSCONTROL;CORE;ejbca;;;;resource0=/endentityprofilesrules/1/revoke_end_entity;resource1=/ra_functionality/revoke_end_entity
09:32:37,025 INFO  [org.cesecore.audit.impl.log4j.Log4jDevice] (default task-1) 2019-07-19 09:32:37-04:00;ACCESS_CONTROL;SUCCESS;ACCESSCONTROL;CORE;ejbca;;;;resource0=/ca/1164433895
09:32:37,035 INFO  [org.cesecore.audit.impl.log4j.Log4jDevice] (default task-1) 2019-07-19 09:32:37-04:00;CERT_REVOKED;SUCCESS;CERTIFICATE;CORE;ejbca;1164433895;8A296;*** Missing During CRL Import to: XXXXXXXXXXXCA_41;msg=Revoked certificate for username '*** Missing During CRL Import to: XXXXXXXXXXXCA_41', fp=667d63d9060a424dd67ed19bdcd25917106eba5a, revocationReason=1, subjectDN 'CN=Dummy Missing in Imported CRL,SN=8A296', issuerDN 'CN=XXXXXX', serialNo=8A296.
09:32:37,079 INFO  [org.cesecore.audit.impl.log4j.Log4jDevice] (default task-1) 2019-07-19 09:32:37-04:00;ACCESS_CONTROL;SUCCESS;ACCESSCONTROL;CORE;ejbca;;;;resource0=/ca/1164433895
09:32:37,115 INFO  [org.cesecore.audit.impl.log4j.Log4jDevice] (default task-2) 2019-07-19 09:32:37-04:00;ACCESS_CONTROL;SUCCESS;ACCESSCONTROL;CORE;ejbca;;;;resource0=/ca/1164433895
09:32:37,133 INFO  [org.cesecore.audit.impl.log4j.Log4jDevice] (default task-2) 2019-07-19 09:32:37-04:00;CERT_STORED;SUCCESS;CERTIFICATE;CORE;ejbca;1164433895;4B78C;*** Missing During CRL Import to: XXXXXXXXXXXCA_41;msg=Certificate stored for username '*** Missing During CRL Import to: XXXXXXXXXXXCA_41', fp=bf50e62fe1bde64cca1a4ffa050d99bc750c68b1, subjectDN 'CN=Dummy Missin

Is it possible that that logging is slowing the CRL import?
How is your logging setup (log level) compared to what mine is?
Other that, it just may be that my system is much slower than your laptop :)??
Jim




    On Friday, July 19, 2019, 8:18:07 AM UTC, Tomas Gustavsson <to...@pr...> wrote:  
 
 Ah, eap 7.2 corresponds to wildly 14 as base.

Yes, run that to convert, then you should be able to create the index.

Cheers,
Tomas


On July 19, 2019 10:07:01 AM GMT+02:00, ohaya--- via Ejbca-develop <ejb...@li...> wrote:
 Hi Tomas,
No, I am not using Wildfly, but rather JBOSS... specifically "jboss-eap-7.2".
So I restored my snapshot from just after I had deleted all the rows in CertificateData that were created before.
And it looks like all the tables in the "ejbca" database are MyISAM.
So I found a one-liner that will convert them all to InnoDB:
mysql -u root -p ejbca -e "show table status where Engine='MyISAM';" | awk 'NR>1 {print "ALTER TABLE "$1" ENGINE = InnoDB;"}'  |  mysql -u root -p ejbca
Should I run that and convert all the tables in the "ejbca" to InnoDB???

And then try to run the create indexes SQL script?

Thanks for all your help!
Jim