tail /var/log/ipaserver-kra-install.log 
2017-03-15T05:16:21Z DEBUG Starting external process
2017-03-15T05:16:21Z DEBUG args=/bin/systemctl is-active pki-tomcatd@pki-tomcat.service
2017-03-15T05:16:21Z DEBUG Process finished, return code=0
2017-03-15T05:16:21Z DEBUG stdout=active

2017-03-15T05:16:21Z DEBUG stderr=
2017-03-15T05:16:21Z DEBUG wait_for_open_ports: localhost [8080, 8443] timeout 300
2017-03-15T05:16:23Z DEBUG Waiting until the CA is running
2017-03-15T05:16:23Z DEBUG request POST http://vm-239.example.com:8080/ca/admin/ca/getStatus
2017-03-15T05:16:23Z DEBUG request body ''

Traceback (most recent call first):
  File "/usr/lib64/python2.7/socket.py", line 480, in readline
    data = self._sock.recv(self._rbufsize)
  File "/usr/lib64/python2.7/httplib.py", line 394, in _read_status
    line = self.fp.readline(_MAXLINE + 1)
  File "/usr/lib64/python2.7/httplib.py", line 438, in begin
    version, status, reason = self._read_status()
  File "/usr/lib64/python2.7/httplib.py", line 1121, in getresponse
    response.begin()
  File "/usr/lib/python2.7/site-packages/ipapython/dogtag.py", line 200, in _httplib_request
    res = conn.getresponse()
  File "/usr/lib/python2.7/site-packages/ipapython/dogtag.py", line 170, in http_request
    'http', host, port, url, httplib.HTTPConnection, body)
  File "/usr/lib/python2.7/site-packages/ipapython/dogtag.py", line 117, in ca_status
    ca_host, 8080, '/ca/admin/ca/getStatus')
  File "/usr/lib/python2.7/site-packages/ipaplatform/redhat/services.py", line 203, in wait_until_running
    status = dogtag.ca_status(api.env.host)
  File "/usr/lib/python2.7/site-packages/ipaplatform/redhat/services.py", line 224, in restart
    self.wait_until_running()
  File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line 349, in restart
    self.service.restart(instance_name, capture_output=capture_output, wait=wait)
  File "/usr/lib/python2.7/site-packages/ipaserver/install/dogtaginstance.py", line 185, in restart_instance
    self.restart('pki-tomcat')
  File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line 439, in run_step
    method()
  File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line 449, in start_creation
    run_step(full_msg, method)
  File "/usr/lib/python2.7/site-packages/ipaserver/install/krainstance.py", line 126, in configure_instance
    self.start_creation(runtime=126)
  File "/usr/lib/python2.7/site-packages/ipaserver/install/kra.py", line 67, in install
    options.dm_password, subject_base=subject)
  File "/usr/lib/python2.7/site-packages/ipaserver/install/ipa_kra_install.py", line 225, in run
    kra.install(api, config, self.options)
  File "/usr/lib/python2.7/site-packages/ipapython/admintool.py", line 172, in execute
    return_value = self.run()
  File "/usr/lib/python2.7/site-packages/ipapython/admintool.py", line 149, in main
    return command.execute()
  File "/usr/lib/python2.7/site-packages/ipapython/admintool.py", line 125, in run_cli
    sys.exit(cls.main(sys.argv))
  File "/usr/sbin/ipa-kra-install", line 23, in <module>
    KRAInstall.run_cli()