aca_debug

There are several potential issues with the hirs-AttestationCA application that can occur while installing. HIRS will log all error log file ubder the tomcat log directory (located at /var/log/tomcat/HIRS_Provisioner.log). Note that the file /etc/hirs/logging.properties can be edited to configure the desired level. Valid levels that may be set are, in order of decreasing verbosity: trace, debug, info, warn, error, fatal.

Error/Debug procedure

No Attestation portal appears at HIRS_Server package. Portal URL:

https://<server-address>:8443/HIRS_AttestationCAPortal/

This can be due to multiple reasons. Most common are:

• Check that the HIRS_Server and HIRS_ACA is installed on the server
  • sudo yum list installed | grep HIRS
• Check that tomcat is running
  • sudo systemctl tomcat status (Centos 7)
• Check that there is not a firewall blocking between your browser and the server the ACA is installed on.
  • Use tracetroute, netcat, or other test to see if port is being blocked from your device: traceroute -p 8443 privacyCAaddress
• For firefox check that there are not multiple certificates in your browser for the ACA application (happens when the ACA is installed more than five times)

Cannot find Keytool

Sometimes java paths can become convoluted when multiple versions of java are installed. Keytool is installed with java and sometime the reference to keytool can be lost even though which ketool seems to work. If edit /etc/hirs/provisioner/hirs-provisioner-config.sh and replace the call to key tool with the full path to key tool. Example:

• which keytool /usr/bin/keytool
• sudo nano /etc/hirs/provisioner/hirs-provisioner-config.sh
• Use the path from the output of which