What were you trying to do that didn't work?

Automation regression failure

Please provide the package NVR for which the bug is seen:

idm-pki-ca noarch 11.6.0-0.3.alpha2.el9 rhel-9.6-AppStream 2.1 M
2025-01-22T17:40:23 idm-pki-kra noarch 11.6.0-0.3.alpha2.el9
389-ds-base-2.6.0-2.el9.x86_64

CTC2 compose : 

http://download.devel.redhat.com/rhel-9/nightly/RHEL-9/RHEL-9.6.0-20250121.2/compose/

How reproducible is this bug?:

Always

Steps to reproduce

1. Run ca-cert-hold / ca-cert-hold-release / ca-cert-revoke command with negative scenario.
2. Command execute : pki -d /opt/pki/certdb -P http -p 8080 -h pki1.example.com -c SECret.123 -n 'CA_AgentV' ca-cert-hold 9876598769
3. Console output showing the complete error:
   1. 'stderr': 'SEVERE: Unable to hold certificate 9876598769: Certificate ID 0x24cb0eff1 not found\ncom.netscape.certsrv.cert.CertNotFoundException: Certificate ID 0x24cb0eff1 not found\n\tat java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)\n\tat java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:77)\n\tat java.base/jdk.internal.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)\n\tat java.base/java.lang.reflect.Constructor.newInstanceWithCaller(Constructor.java:500)\n\tat java.base/java.lang.reflect.Constructor.newInstance(Constructor.java:481)\n\tat com.netscape.certsrv.client.PKIClient.handleErrorResponse(PKIClient.java:175)\n\tat com.netscape.certsrv.client.PKIClient.getEntity(PKIClient.java:187)\n\tat com.netscape.certsrv.client.PKIClient.get(PKIClient.java:249)\n\tat com.netscape.certsrv.client.Client.get(Client.java:111)\n\tat com.netscape.certsrv.client.Client.get(Client.java:106)\n\tat com.netscape.certsrv.ca.CAAgentCertClient.reviewCert(CAAgentCertClient.java:44)\n\tat com.netscape.certsrv.ca.CACertClient.reviewCert(CACertClient.java:83)\n\tat com.netscape.cmstools.ca.CACertHoldCLI.holdCert(CACertHoldCLI.java:77)\n\tat com.netscape.cmstools.ca.CACertHoldCLI.execute(CACertHoldCLI.java:145)\n\tat org.dogtagpki.cli.CommandCLI.execute(CommandCLI.java:58)\n\tat org.dogtagpki.cli.CLI.execute(CLI.java:353)\n\tat org.dogtagpki.cli.CLI.execute(CLI.java:353)\n\tat com.netscape.cmstools.cli.SubsystemCLI.execute(SubsystemCLI.java:79)\n\tat org.dogtagpki.cli.CLI.execute(CLI.java:353)\n\tat com.netscape.cmstools.cli.MainCLI.execute(MainCLI.java:680)\n\tat com.netscape.cmstools.cli.MainCLI.main(MainCLI.java:719)',

Expected results

1. The complete JAVA exception should not be visible on console output.

2. Value of rc in response was earlier !0.

Actual results

Complete JAVA exception visible on console

Failing Jobs :

test_pki_cert_hold_using_valid_agent_cert_with_force

test_pki_cert_hold_using_agent_cert_with_different_admin_cert

test_pki_cert_hold_using_agent_cert_with_audit_cert

test_pki_cert_hold_when_cert_already_revoked

test_pki_ca_cert_release_hold_with_invalid_cert_ids

test_pki_cert_revoke_which_is_already_revoked

test_pki_cert_revoke_non_ca_signing_certificate

test_pki_cert_revoke_non_ca_signing_certificate_with_force