VAULT_CERTIFICATE_ISSUED_ERROR Encountered exception issuing certificate from Vault.

[jbond007]

Hi SAS Communities,

Any idea why this error happened after a reboot of the server?
WARN 1492 --- [ main] c.s.c.rest.boot.vault.CertificateUtil : service [VAULT_CERTIFICATE_ISSUED_ERROR] Encountered exception issuing certificate from Vault.
org.springframework.vault.VaultException: Status 400 Bad Request: cannot satisfy request, as TTL would result in notAfter 2025-03-21T18:58:29.501676651+08:00 that is beyond the expiration of the CA certificate at 2025-03-04T03:38:55Z; nested exception is org.springframework.web.client.HttpClientErrorException$BadRequest: 400 Bad Request:

Caused by: org.springframework.boot.web.server.WebServerException: Unable to start embedded Tomcat server

Caused by: java.lang.IllegalArgumentException: standardService.connector.startFailed

Caused by: org.apache.catalina.LifecycleException: Protocol handler start failed

Caused by: java.io.IOException: Keystore was tampered with, or password was incorrect

Caused by: java.security.UnrecoverableKeyException: Password verification failed

I'm suspecting the last renewal of SSL cert last month but that was long ago and was able to do couple of service restarts after the renewal.

I was able to find this documentation with similar errors but even after running it failed. https://documentation.sas.com/doc/en/calcdc/3.5/calencryptmotion/p1xeu488m00x85n16g3rbjcmv6wr.htm#p0...

[gwootton]

The renew-security-artifacts.yml playbook should generate new certificates for vault to use to issue certificates to the services, so if this didn't work for you, you may wish to engage SAS Technical Support.