Red Hat CERTIFICATE SYSTEM 7.3 - ADMINISTRATION, Руководство администратора

Страница: 100 / 554

Chapter 3. Administrative Basics
78
3.9.1.4. Installation Logs
Every time a subsystem is created either through the initial installation or creating additional instances
with
pkicreate
, an installation file with the complete debug output from the installation, including
any errors and, if the installation is successful, the URL and PIN to the configuration interface for
the instance. The file is created in the default log directory,
/var/log
, with a name in the form
instance_ID
-install.log
. For example:
/var/log/rhpki-ca-install.log
3.9.1.5. Self-Tests Log
The self-tests log records information obtained during the self-tests run when the server starts or
when the self-tests are manually run. The tests can be viewed by opening this log. This log is not
configurable through the Console. This log can only be configured by changing settings in the
CS.cfg
file. The information about logs in this section does not pertain to this log. See
Section 3.10, “Self-
Tests”
for more information about self-tests.
3.9.1.6. Signed Audit Log
The audit log contains records for events that have been set up as recordable events. If the
logSigning
attribute is set to
true
, the audit log is signed with a log signing certificate belonging to
the server. This certificate can be used by auditors to verify that the log has not been tampered with.
See
Section 3.9.13, “Signed Audit Log”
.
3.9.1.7. Apache and Tomcat Error and Access Logs
The CA, RA, DRM, OCSP, and TKS subsystems use a Tomcat web server instance for their agent and
end-entities' interfaces. The TPS subsystem uses an Apache web server.
Error and access logs are created by the Apache and Tomcat web servers, which are installed with the
Certificate System and provide HTTP services. The error log contains the HTTP error messages the
server has encountered. The access log lists access activity through the HTTP interface.
Apache (TPS) Tomcat (CA, RA, DRM, OCSP, TKS)
access_log admin.
timestamp
error_log catalina.
timestamp
catalina.out
host-manager.
timestamp
localhost.
timestamp
localhost_access_log.
timestamp
manager.
timestamp
Table 3.7. Logs Created by Apache and Tomcat
These logs are not available or configurable within the Certificate System; they are only configurable
within Apache or Tomcat. See the Apache documentation for information about configuring these logs.