Red Hat Certificate System certificate renewal error "Sorry, your request is not submitted. The reason is "Server Internal Error" error.

Solution Verified - Updated -

Environment

  • Red Hat Certificate System 8.0
  • Red Hat Enterprise Linux 5

Issue

  • The Red Hat Certificate System may complain on failed certificate renewal with the following error:

    Sorry, your request is not submitted. The reason is "Server Internal Error

  • On the CA end-entity page, after clicking on "Renewal: Renew certificate to be manually approved by agents" and entering "0x18" as the "Serial Number of Certificate to Renew" in the text field and clicking submit, the following error is displayed:

    java.lang.NumberFormatException: For input string: "x18"

Resolution

In the HTML renewal form, provide a decimal value in the field "Serial Number of Certificate to Renew" instead of the hexadecimal value. For example, a hexadecimal value of "0x18" would convert into a decimal value of "24". Enter a value of "24" into the renewal field.

Root Cause

Attempting to pass a hexadecimal value in the renewal HTML form which resulted in an untreated exception in Java code.

Diagnostic Steps

Error in web browser after renewal submission, corresponding CA debug log:

[10/Jun/2013:13:32:54][http-9444-Processor24]: ProfileSubmitServlet: renewal: serial number of cert to renew:16000
...
[10/Jun/2013:13:32:54][http-9444-Processor24]: ProfileSubmitServlet: renewal: exception:LDAP operation failure - cn=16000,ou=certificateRepository, ou=ca, dc=example-pki-ca netscape.ldap.LDAPException: error result (32); matchedDN = ou=certificaterepository,ou=ca,dc=example.com-pki-ca

The /var/log/pki-ca/catalina.out log fie may also have an exception similar to this:

Jun 10, 2013 1:32:46 PM org.apache.catalina.core.ApplicationContext log INFO: caProfileSubmit: java.lang.NumberFormatException: For input string: "<U+200E>016000"

This solution is part of Red Hat’s fast-track publication program, providing a huge library of solutions that Red Hat engineers have created while supporting our customers. To give you the knowledge you need the instant it becomes available, these articles may be presented in a raw and unedited form.

Comments