Menu

RenewalWorker problems...

2013-06-25
2013-07-05
  • Diego de Felice

    Diego de Felice - 2013-06-25

    Hi all,

    I'm trying to put in place a RenewalWorker for a TimeStampWorker, in order to renew the TS certificate automatically with an external EJBCA service. The problem is that I always receive this error:

    2013-06-25 17:29:25,448 DEBUG [RenewalWorker] Loaded 4 certs to truststore
    2013-06-25 17:29:25,464 INFO [RenewalWorker] Getting WS
    2013-06-25 17:29:37,694 DEBUG [RenewalWorker] Got EjbcaWS
    2013-06-25 17:29:37,756 ERROR [RenewalWorker] org.jboss.ws.WSException: Target endpoint address not set

    I've configured the URL of EJBCA correctly (WSDL is reachable from browser), configured the PKCS12 for client authentication and the EJBCA CA inside the truststore on file, and so on. This is the Status Summary of the RenewalWorker:

    Status of Signer with Id 309 is :
    Worker status : Active
    Token status : Active
    Signings: 21

    Active Properties are :
    SIGNERCERTCHAIN=

    KEYSTOREPATH=C:/signserver-3.4.1/conf/tsurenew.p12

    TRUSTSTOREPATH=C:/signserver-3.4.1/conf/tsachain.pem

    SIGNERCERT=

    KEYSTOREPASSWORD=tsurenew

    KEYSTORETYPE=PKCS12

    NAME=RenewalWorker

    TRUSTSTORETYPE=PEM

    AUTHTYPE=NOAUTH

    CLASSPATH=org.signserver.common.ProcessableConfig

    DEFAULTKEY=tsu renewal service

    TRUSTSTOREPASSWORD=changeit

    EJBCAWSURL=https://VM1:8443/ejbca

    Active Authorized Clients are are (Cert DN, IssuerDN):
    The current configuration use the following signer certificate :

             Subject DN:     CN=TSU Renewal Service
             Serial number:  3d1da051c52e08c3
             Issuer DN:      CN=AdminCADS,O=Atos,C=IT
             Valid from:     2013-06-24 15:05:37 CEST
             Valid until:    2015-06-24 15:05:37 CEST
    

    What am I missing ? The EJBCA version is 4.0.15 and SignServer version is 3.4.1

     
  • Markus Kilås

    Markus Kilås - 2013-07-05

    Sounds like some configuration problem.
    Which exact version of JBoss are you using at the CA side (ie JBoss 5.1.0.GA-jdk6)?
    What's the endpoint URL in the WSDL file in the response from vm1?
    Is there a stacktrace available in the signserver log?

    BR,
    Markus

     

Log in to post a comment.