Page MenuHomePhabricator
Paste P8808

acme-chief-err.log
ActivePublic

Authored by ema on Jul 26 2019, 8:46 AM.
Jul 26 08:26:52 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/File[/etc/acmecerts/unified/a40ba19e20ff4516bb7906d154cf5539]/ensure) created
Jul 26 08:26:52 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/File[/etc/acmecerts/unified/a40ba19e20ff4516bb7906d154cf5539/ec-prime256v1.chained.crt]/ensure) defined content as '{md5}cdcd9230dad16d13d2c9225a15d02a5a'
Jul 26 08:26:52 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/File[/etc/acmecerts/unified/a40ba19e20ff4516bb7906d154cf5539/ec-prime256v1.key]/ensure) defined content as '{md5}6a5cf5b2d62ee17036133a6d54a259e0'
Jul 26 08:26:52 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/File[/etc/acmecerts/unified/a40ba19e20ff4516bb7906d154cf5539/rsa-2048.chained.crt]/ensure) defined content as '{md5}e064a89c1281057e44973cd5f73b8037'
Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/File[/etc/acmecerts/unified/a40ba19e20ff4516bb7906d154cf5539/rsa-2048.key]/ensure) defined content as '{md5}21dc517379d4502d7e59b9916f712113'
Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/File[/etc/acmecerts/unified/new]/target) target changed '/etc/acmecerts/unified/7342d4c2c8fa4e5ba2264a3f13000fae' to '/etc/acmecerts/unified/a40ba19e20ff4516bb7906d154cf5539'
Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-ec-prime256v1-create-ocsp]/returns) Traceback (most recent call last):
Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-ec-prime256v1-create-ocsp]/returns) File "/usr/local/sbin/update-ocsp", line 290, in <module>
Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-ec-prime256v1-create-ocsp]/returns) main()
Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-ec-prime256v1-create-ocsp]/returns) File "/usr/local/sbin/update-ocsp", line 283, in main
Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-ec-prime256v1-create-ocsp]/returns) certs_fetch_ocsp(out_tempfile, args)
Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-ec-prime256v1-create-ocsp]/returns) File "/usr/local/sbin/update-ocsp", line 170, in certs_fetch_ocsp
Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-ec-prime256v1-create-ocsp]/returns) issuer_path = cert_get_issuer_filename(certs[0], cadir)
Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-ec-prime256v1-create-ocsp]/returns) File "/usr/local/sbin/update-ocsp", line 136, in cert_get_issuer_filename
Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-ec-prime256v1-create-ocsp]/returns) issuer_subject = cert_x509_option_kv(cert, "issuer")
Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-ec-prime256v1-create-ocsp]/returns) File "/usr/local/sbin/update-ocsp", line 124, in cert_x509_option_kv
Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-ec-prime256v1-create-ocsp]/returns) k, v = cert_x509_option(filename, attrib).split("=", 1)
Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-ec-prime256v1-create-ocsp]/returns) File "/usr/local/sbin/update-ocsp", line 117, in cert_x509_option
Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-ec-prime256v1-create-ocsp]/returns) "-" + attrib,
Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-ec-prime256v1-create-ocsp]/returns) File "/usr/local/sbin/update-ocsp", line 101, in check_output_errtext
Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-ec-prime256v1-create-ocsp]/returns) (" ".join(args), p.returncode, p_err))
Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-ec-prime256v1-create-ocsp]/returns) Exception: Command openssl x509 -noout -in /etc/acmecerts/unified/new/ec-prime256v1.crt -issuer failed with exit code 1, stderr:
Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-ec-prime256v1-create-ocsp]/returns) x509: Cannot open input file /etc/acmecerts/unified/new/ec-prime256v1.crt, No such file or directory
Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-ec-prime256v1-create-ocsp]/returns) x509: Use -help for summary.
Jul 26 08:26:53 cp5011 puppet-agent[41102]: '/usr/local/sbin/update-ocsp --config /etc/update-ocsp.d/unified-new-ec-prime256v1.conf' returned 1 instead of one of [0]
Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-ec-prime256v1-create-ocsp]/returns) change from 'notrun' to ['0'] failed: '/usr/local/sbin/update-ocsp --config /etc/update-ocsp.d/unified-new-ec-prime256v1.conf' returned 1 instead of one of [0]
Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-rsa-2048-create-ocsp]/returns) Traceback (most recent call last):
Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-rsa-2048-create-ocsp]/returns) File "/usr/local/sbin/update-ocsp", line 290, in <module>
Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-rsa-2048-create-ocsp]/returns) main()
Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-rsa-2048-create-ocsp]/returns) File "/usr/local/sbin/update-ocsp", line 283, in main
Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-rsa-2048-create-ocsp]/returns) certs_fetch_ocsp(out_tempfile, args)
Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-rsa-2048-create-ocsp]/returns) File "/usr/local/sbin/update-ocsp", line 170, in certs_fetch_ocsp
Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-rsa-2048-create-ocsp]/returns) issuer_path = cert_get_issuer_filename(certs[0], cadir)
Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-rsa-2048-create-ocsp]/returns) File "/usr/local/sbin/update-ocsp", line 136, in cert_get_issuer_filename
Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-rsa-2048-create-ocsp]/returns) issuer_subject = cert_x509_option_kv(cert, "issuer")
Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-rsa-2048-create-ocsp]/returns) File "/usr/local/sbin/update-ocsp", line 124, in cert_x509_option_kv
Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-rsa-2048-create-ocsp]/returns) k, v = cert_x509_option(filename, attrib).split("=", 1)
Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-rsa-2048-create-ocsp]/returns) File "/usr/local/sbin/update-ocsp", line 117, in cert_x509_option
Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-rsa-2048-create-ocsp]/returns) "-" + attrib,
Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-rsa-2048-create-ocsp]/returns) File "/usr/local/sbin/update-ocsp", line 101, in check_output_errtext
Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-rsa-2048-create-ocsp]/returns) (" ".join(args), p.returncode, p_err))
Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-rsa-2048-create-ocsp]/returns) Exception: Command openssl x509 -noout -in /etc/acmecerts/unified/new/rsa-2048.crt -issuer failed with exit code 1, stderr:
Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-rsa-2048-create-ocsp]/returns) x509: Cannot open input file /etc/acmecerts/unified/new/rsa-2048.crt, No such file or directory
Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-rsa-2048-create-ocsp]/returns) x509: Use -help for summary.
Jul 26 08:26:53 cp5011 puppet-agent[41102]: '/usr/local/sbin/update-ocsp --config /etc/update-ocsp.d/unified-new-rsa-2048.conf' returned 1 instead of one of [0]
Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-rsa-2048-create-ocsp]/returns) change from 'notrun' to ['0'] failed: '/usr/local/sbin/update-ocsp --config /etc/update-ocsp.d/unified-new-rsa-2048.conf' returned 1 instead of one of [0]
Jul 26 08:26:53 cp5011 puppet-agent[41102]: (Acme_chief::Cert[unified]) Unscheduling all events on Acme_chief::Cert[unified]
Jul 26 08:26:53 cp5011 puppet-agent[41102]: (Tlsproxy::Localssl[unified]) Unscheduling all events on Tlsproxy::Localssl[unified]
Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Nginx/Service[nginx]) Dependency Exec[unified-new-ec-prime256v1-create-ocsp] has failures: true
Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Nginx/Service[nginx]) Dependency Exec[unified-new-rsa-2048-create-ocsp] has failures: true