bad certificate

[Phiona Chao]

Failed to set capabilities on file `/usr/bin/vault’ (Invalid argument)
usage: setcap [-q] [-v] (-r|-|<caps>) <filename> [ … (-r|-|<capsN>) <filenameN> ]

Note <filename> must be a regular (non-symlink) file.
useradd: user ‘vault’ already exists
Generating RSA private key, 2048 bit long modulus
…………………..+++
………………………………..+++
e is 65537 (0x10001)
Generating RSA private key, 2048 bit long modulus
……..+++
..+++
e is 65537 (0x10001)
Signature ok
subject=/C=US/ST=NY/L=NY/O=OPENIAM/OU=PRODUCTION/CN=localhost
Getting CA Private Key
writing RSA key
Warning: use -cacerts option to access cacerts keystore
Certificate was added to keystore
[Storing /usr/local/openiam/jdk/lib/security/cacerts]
Starting etcd…
Starting vault…
2021-07-07T16:48:25.407+0800 [INFO] http: TLS handshake error from 127.0.0.1:42514: remote error: tls: bad certificate
Wait vault service to wakeup
2021-07-07T16:48:35.456+0800 [INFO] http: TLS handshake error from 127.0.0.1:42528: remote error: tls: bad certificate
Error checking seal status: Get https://localhost:8200/v1/sys/seal-status: x509: certificate signed by unknown authority (possibly because of “crypto/rsa: verification error” while trying to verify candidate authority certificate “localhost”)
Cannot get initialized status. Was empty
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
0 0 0 0 0 0 0 0 –:–:– –:–:– –:–:– 02021-07-07T16:48:40.556+0800 [INFO] http: TLS handshake error from 127.0.0.1:42538: remote error: tls: bad certificate
2021-07-07T16:48:40.560+0800 [INFO] http: TLS handshake error from 127.0.0.1:42534: remote error: tls: bad certificate
0 0 0 0 0 0 0 0 –:–:– –:–:– –:–:– 0
curl: (35) You are attempting to import a cert with the same issuer/serial as an existing cert, but that is not the same cert.
Generate OpenIAM encryption secrets
=============== CRITICAL SECTION ===============
Database
Set OpenIAM username for schema ‘openiam’ , default: idmuser
2021-07-07T16:48:55.806+0800 [INFO] http: TLS handshake error from 127.0.0.1:42546: remote error: tls: bad certificate

[xmx 4u2]

curl: (35) You are attempting to import a cert with the same issuer/serial as an existing cert, but that is not the same cert.
Token was empty. Can’t initialize vault.

[Author]

Posts