https://communities.sas.com/t5/Administration-and-Deployment/VAULT-CERTIFICATE-ISSUED-ERROR-Encountered-exception-issuing/m-p/921346#M28257 <P>Hi SAS Communities,</P> <P>&nbsp;</P> <P>Any idea why this error happened after a reboot of the server?<BR />WARN 1492 --- [ main] c.s.c.rest.boot.vault.CertificateUtil : service [VAULT_CERTIFICATE_ISSUED_ERROR] Encountered exception issuing certificate from Vault.<BR />org.springframework.vault.VaultException: Status 400 Bad Request: cannot satisfy request, as TTL would result in notAfter 2025-03-21T18:58:29.501676651+08:00 that is beyond the expiration of the CA certificate at 2025-03-04T03:38:55Z; nested exception is org.springframework.web.client.HttpClientErrorException$BadRequest: 400 Bad Request:</P> <P>Caused by: org.springframework.boot.web.server.WebServerException: Unable to start embedded Tomcat server</P> <P>Caused by: java.lang.IllegalArgumentException: standardService.connector.startFailed</P> <P>Caused by: org.apache.catalina.LifecycleException: Protocol handler start failed</P> <P>Caused by: java.io.IOException: Keystore was tampered with, or password was incorrect</P> <P>Caused by: java.security.UnrecoverableKeyException: Password verification failed</P> <P>&nbsp;</P> <P>I'm suspecting the last renewal of SSL cert last month but that was long ago and was able to do couple of service restarts after the renewal.</P> <P>I was able to find this documentation with similar errors but even after running it failed. <A href="https://documentation.sas.com/doc/en/calcdc/3.5/calencryptmotion/p1xeu488m00x85n16g3rbjcmv6wr.htm#p0p7xpimoi9fmhn103076jcay15t" target="_blank">https://documentation.sas.com/doc/en/calcdc/3.5/calencryptmotion/p1xeu488m00x85n16g3rbjcmv6wr.htm#p0p7xpimoi9fmhn103076jcay15t</A></P> <P>&nbsp;</P> <P>&nbsp;</P> Thu, 21 Mar 2024 17:05:25 GMT jbond007 2024-03-21T17:05:25Z https://communities.sas.com/t5/Administration-and-Deployment/VAULT-CERTIFICATE-ISSUED-ERROR-Encountered-exception-issuing/m-p/921346#M28257 <P>Hi SAS Communities,</P> <P>&nbsp;</P> <P>Any idea why this error happened after a reboot of the server?<BR />WARN 1492 --- [ main] c.s.c.rest.boot.vault.CertificateUtil : service [VAULT_CERTIFICATE_ISSUED_ERROR] Encountered exception issuing certificate from Vault.<BR />org.springframework.vault.VaultException: Status 400 Bad Request: cannot satisfy request, as TTL would result in notAfter 2025-03-21T18:58:29.501676651+08:00 that is beyond the expiration of the CA certificate at 2025-03-04T03:38:55Z; nested exception is org.springframework.web.client.HttpClientErrorException$BadRequest: 400 Bad Request:</P> <P>Caused by: org.springframework.boot.web.server.WebServerException: Unable to start embedded Tomcat server</P> <P>Caused by: java.lang.IllegalArgumentException: standardService.connector.startFailed</P> <P>Caused by: org.apache.catalina.LifecycleException: Protocol handler start failed</P> <P>Caused by: java.io.IOException: Keystore was tampered with, or password was incorrect</P> <P>Caused by: java.security.UnrecoverableKeyException: Password verification failed</P> <P>&nbsp;</P> <P>I'm suspecting the last renewal of SSL cert last month but that was long ago and was able to do couple of service restarts after the renewal.</P> <P>I was able to find this documentation with similar errors but even after running it failed. <A href="https://documentation.sas.com/doc/en/calcdc/3.5/calencryptmotion/p1xeu488m00x85n16g3rbjcmv6wr.htm#p0p7xpimoi9fmhn103076jcay15t" target="_blank">https://documentation.sas.com/doc/en/calcdc/3.5/calencryptmotion/p1xeu488m00x85n16g3rbjcmv6wr.htm#p0p7xpimoi9fmhn103076jcay15t</A></P> <P>&nbsp;</P> <P>&nbsp;</P> Thu, 21 Mar 2024 17:05:25 GMT https://communities.sas.com/t5/Administration-and-Deployment/VAULT-CERTIFICATE-ISSUED-ERROR-Encountered-exception-issuing/m-p/921346#M28257 jbond007 2024-03-21T17:05:25Z https://communities.sas.com/t5/Administration-and-Deployment/VAULT-CERTIFICATE-ISSUED-ERROR-Encountered-exception-issuing/m-p/921559#M28260 The renew-security-artifacts.yml playbook should generate new certificates for vault to use to issue certificates to the services, so if this didn't work for you, you may wish to engage SAS Technical Support. Fri, 22 Mar 2024 20:21:23 GMT https://communities.sas.com/t5/Administration-and-Deployment/VAULT-CERTIFICATE-ISSUED-ERROR-Encountered-exception-issuing/m-p/921559#M28260 gwootton 2024-03-22T20:21:23Z