A Basis Life: 2020

EJBCA is an Open Source Certificate Authority and covers all your needs – from certificate management, registration and enrollment to certificate validation. There is an enterprise offering with more advanced features, so please review any requirements before installing the community edition that this blog focuses on.

To quote from https://www.ejbca.org/

“EJBCA Community is a free edition of PrimeKey’s PKI Software. It is an outstanding tool for those who want to test and learn the core functionalities of PKI. If you have a need for PKI and don’t require any advanced features or guaranteed certifications and regulations, this is for you. You can find more about EJBCA Community on ejbca.org.”

The following blog post “EJBCA Community” edition, I had some issues following the standard guides. These were around the mariadb install and SQL dialect used in wildfly and the following documents my fixes for these issues.

Outline of my installation

Suse Version Information

rootca:~ # more /etc/os*rel*

NAME="openSUSE Leap"

VERSION="15.1"

….

Network Setup

I find the wicked network service more stable in my Hyper-V environment

Server IP address

10.10.50.100

hostnamectl

rjrussca

hostname --fqdn

rjrussca.rjruss.org

ping rjrussca

ping rjrussca.rjruss.org

Checked HOST FILE

rjrussca:~ # tail /etc/hosts

::1 localhost ipv6-localhost ipv6-loopback

fe00::0 ipv6-localnet

ff00::0 ipv6-mcastprefix

ff02::1 ipv6-allnodes

ff02::2 ipv6-allrouters

ff02::3 ipv6-allhosts

10.10.50.100 rjrussca.rjruss.org rjrussca

rjrussca:~ #

Install pre-reqs for EJBCA from SUSE repo

Using Yast install ant and openjdk, the install chose the dependencies required automatically - as shown below.

Install Maria DB

Following the guide on the maria db page

https://mariadb.com/kb/en/installing-mariadb-with-zypper/

I found the automatic script did not work for Open Suse Leap 15.1

rjrussca:~ # curl -sS https://downloads.mariadb.com/MariaDB/mariadb_repo_setup | sudo bash

[error] Could not identify OS type or version.

[error] The MariaDB Repository supports these Linux OSs, on x86-64 only:

* RHEL/CentOS 6, 7, & 8

* Ubuntu 16.04 LTS (xenial), 18.04 LTS (bionic), & 20.04 LTS (focal)

* Debian 8 (jessie), 9 (stretch), & 10 (buster)

* SLES 12 & 15

rjrussca:~ #

Adding the repo manually - I chose this version

https://yum.mariadb.org/10.4.13/

Adapted the repo command to match the opensuse site above

One liner as follows

sudo zypper addrepo --gpgcheck --refresh https://yum.mariadb.org/10.4.13/opensuse15-amd64/ mariadb

Run this and the repo is added

rjrussca:~ # zypper addrepo --gpgcheck --refresh https://yum.mariadb.org/10.4.13/opensuse15-amd64/ mariadb

Adding repository 'mariadb' ....................................................................................................................................[done]

Repository 'mariadb' successfully added

URI : https://yum.mariadb.org/10.4.13/opensuse15-amd64/

Enabled : Yes

GPG Check : Yes

Autorefresh : Yes

Priority : 99 (default priority)

Repository priorities are without effect. All enabled repositories share the same priority.

rjrussca:~ #

Check repo list

rjrussca:~ # zypper ls

---+---------------------------+------------------------------------+---------+-----------+---------+-------

1 | mariadb | mariadb | Yes | ( p) Yes | Yes | NONE

2 | openSUSE-Leap-15.1-1 | openSUSE-Leap-15.1-1 | No | ---- | ---- | rpm-md

3 | repo-debug | Debug Repository | No | ---- | ---- | NONE

4 | repo-debug-non-oss | Debug Repository (Non-OSS) | No | ---- | ---- | NONE

5 | repo-debug-update | Update Repository (Debug) | No | ---- | ---- | NONE

6 | repo-debug-update-non-oss | Update Repository (Debug, Non-OSS) | No | ---- | ---- | NONE

7 | repo-non-oss | Non-OSS Repository | Yes | (r ) Yes | Yes | rpm-md

8 | repo-oss | Main Repository | Yes | (r ) Yes | Yes | rpm-md

9 | repo-source | Source Repository | No | ---- | ---- | NONE

10 | repo-source-non-oss | Source Repository (Non-OSS) | No | ---- | ---- | NONE

11 | repo-update | Main Update Repository | Yes | (r ) Yes | Yes | rpm-md

12 | repo-update-non-oss | Update Repository (Non-Oss) | Yes | (r ) Yes | Yes | rpm-md

rjrussca:~ #

ADD KEY

sudo rpm --import https://yum.mariadb.org/RPM-GPG-KEY-MariaDB

**to bypass ERROR “Problem: nothing provides libboost_program_options.”

zypper in boost-devel.x86_64

zypper in libboost_program_options1_66_0 libboost_program_options1_66_0-devel

Remove mariadb lib

rjrussca:~ # zypper remove libmariadb3

Disable standard repos temporarily

rjrussca:~ # zypper mr -d 7 8 11 12

Repository 'repo-non-oss' has been successfully disabled.

Repository 'repo-oss' has been successfully disabled.

Repository 'repo-update' has been successfully disabled.

Repository 'repo-update-non-oss' has been successfully disabled.

rjrussca:~ # zypper ls

---+---------------------------+------------------------------------+---------+-----------+---------+-------

1 | mariadb | mariadb | Yes | ( p) Yes | Yes | NONE

2 | openSUSE-Leap-15.1-1 | openSUSE-Leap-15.1-1 | No | ---- | ---- | rpm-md

3 | repo-debug | Debug Repository | No | ---- | ---- | NONE

4 | repo-debug-non-oss | Debug Repository (Non-OSS) | No | ---- | ---- | NONE

5 | repo-debug-update | Update Repository (Debug) | No | ---- | ---- | NONE

6 | repo-debug-update-non-oss | Update Repository (Debug, Non-OSS) | No | ---- | ---- | NONE

7 | repo-non-oss | Non-OSS Repository | No | ---- | ---- | rpm-md

8 | repo-oss | Main Repository | No | ---- | ---- | rpm-md

9 | repo-source | Source Repository | No | ---- | ---- | NONE

10 | repo-source-non-oss | Source Repository (Non-OSS) | No | ---- | ---- | NONE

11 | repo-update | Main Update Repository | No | ---- | ---- | rpm-md

12 | repo-update-non-oss | Update Repository (Non-Oss) | No | ---- | ---- | rpm-md

rjrussca:~ #

Only the mariadb repo is active

zypper install MariaDB-server galera-4 MariaDB-client MariaDB-shared MariaDB-backup MariaDB-common

The following 6 NEW packages are going to be installed:

MariaDB-backup MariaDB-client MariaDB-common MariaDB-server MariaDB-shared galera-4

6 new packages to install.

Overall download size: 0 B. Already cached: 41.3 MiB. After the operation, additional 280.7 MiB will be used.

Continue? [y/n/v/...? shows all options] (y): y

In cache MariaDB-common-10.4.13-1.x86_64.rpm (1/6), 78.2 KiB (298.0 KiB unpacked)

In cache galera-4-26.4.4-1.suse15.0.x86_64.rpm (2/6), 14.5 MiB ( 69.8 MiB unpacked)

In cache MariaDB-shared-10.4.13-1.x86_64.rpm (3/6), 105.5 KiB (328.6 KiB unpacked)

In cache MariaDB-client-10.4.13-1.x86_64.rpm (4/6), 6.6 MiB ( 59.2 MiB unpacked)

In cache MariaDB-backup-10.4.13-1.x86_64.rpm (5/6), 5.6 MiB ( 25.9 MiB unpacked)

In cache MariaDB-server-10.4.13-1.x86_64.rpm (6/6), 14.5 MiB (125.1 MiB unpacked)

Checking for file conflicts: ...................................................................................................................................[done]

(1/6) Installing: MariaDB-common-10.4.13-1.x86_64 ..............................................................................................................[done]

(2/6) Installing: galera-4-26.4.4-1.suse15.0.x86_64 ............................................................................................................[done]

(3/6) Installing: MariaDB-shared-10.4.13-1.x86_64 ..............................................................................................................[done]

(4/6) Installing: MariaDB-client-10.4.13-1.x86_64 ..............................................................................................................[done]

(5/6) Installing: MariaDB-backup-10.4.13-1.x86_64 ..............................................................................................................[done]

(6/6) Installing: MariaDB-server-10.4.13-1.x86_64 ..............................................................................................................[done]

Additional rpm output:

Two all-privilege accounts were created.

One is root@localhost, it has no password, but you need to

be system 'root' user to connect. Use, for example, sudo mysql

The second is mysql@localhost, it has no password either, but

you need to be the system 'mysql' user to connect.

After connecting you can set the password, if you would need to be

able to connect as any of these users with a password and without sudo

See the MariaDB Knowledgebase at http://mariadb.com/kb or the

MySQL manual for more instructions.

Please report any problems at http://mariadb.org/jira

The latest information about MariaDB is available at http://mariadb.org/.

You can find additional information about the MySQL part at:

http://dev.mysql.com

Consider joining MariaDB's strong and vibrant community:

https://mariadb.org/get-involved/

Executing %posttrans scripts ...................................................................................................................................[done]

rjrussca:~ #

ENABLE mariadb service

rjrussca:~ # systemctl enable mariadb

Created symlink /etc/systemd/system/mysql.service → /usr/lib/systemd/system/mariadb.service.

Created symlink /etc/systemd/system/mysqld.service → /usr/lib/systemd/system/mariadb.service.

Created symlink /etc/systemd/system/multi-user.target.wants/mariadb.service → /usr/lib/systemd/system/mariadb.service.

rjrussca:~ #

rjrussca:~ # systemctl start mariadb

rjrussca:~ #

Test Connection

rjrussca:~ # mysql

Welcome to the MariaDB monitor. Commands end with ; or \g.

Your MariaDB connection id is 8

Server version: 10.4.13-MariaDB MariaDB Server

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

MariaDB [(none)]> connect

Connection id: 9

Current database: *** NONE ***

MariaDB [(none)]>

MariaDB [(none)]> exit

Bye

rjrussca:~ #

No Database created at the moment, that will be later as part of EJBCA

Reset SUSE repos

Enable default repos & I chose to disable mariadb repo

rjrussca:~ # zypper mr -e 7 8 11 12

Repository 'repo-non-oss' has been successfully enabled.

Repository 'repo-oss' has been successfully enabled.

Repository 'repo-update' has been successfully enabled.

Repository 'repo-update-non-oss' has been successfully enabled.

rjrussca:~ # zypper mr -d 1

Repository 'mariadb' has been successfully disabled.

rjrussca:~ # zypper ls

---+---------------------------+------------------------------------+---------+-----------+---------+-------

1 | mariadb | mariadb | No | ---- | ---- | rpm-md