summaryrefslogtreecommitdiffstats
path: root/auth/docker
diff options
context:
space:
mode:
authorInstrumental <jonathan.gathman@att.com>2018-08-21 10:24:08 -0500
committerInstrumental <jonathan.gathman@att.com>2018-08-21 10:24:14 -0500
commitaeb80c8242c6c2d2483c6c396731f455fb841799 (patch)
tree811e55906e896969cd83fedc9b0f724bd186ab5e /auth/docker
parent6d8972660b8806a36a4cdc87d1df086b7e34a501 (diff)
CA Bootstrapping
Issue-ID: AAF-419 Change-Id: I921604ab3bea2550ab12c1db43899a52ab91b166 Signed-off-by: Instrumental <jonathan.gathman@att.com>
Diffstat (limited to 'auth/docker')
-rw-r--r--auth/docker/aaf.sh7
-rw-r--r--auth/docker/d.props.init3
2 files changed, 10 insertions, 0 deletions
diff --git a/auth/docker/aaf.sh b/auth/docker/aaf.sh
index efd4fe37..50a79119 100644
--- a/auth/docker/aaf.sh
+++ b/auth/docker/aaf.sh
@@ -15,6 +15,10 @@ function run_it() {
/bin/bash $PARAMS
}
+function set_prop() {
+docker exec -t aaf_config_$USER /bin/bash /opt/app/aaf_config/bin/agent.sh NOOP setProp "$1" "$2" "$3"
+}
+
function encrypt_it() {
docker exec -t aaf_config_$USER /bin/bash /opt/app/aaf_config/bin/agent.sh NOOP encrypt "$1" "$2"
}
@@ -40,6 +44,9 @@ if [ "$(docker volume ls | grep aaf_config)" = "" ] && [ ${P12_LOAD} = "yes" ];
docker container cp ${AAF_INITIAL_X509_P12} aaf_config_$USER:/opt/app/osaaf/local/org.osaaf.aaf.p12
docker container cp ${AAF_SIGNER_P12} aaf_config_$USER:/opt/app/osaaf/local/org.osaaf.aaf.signer.p12
+ set_prop cm_ca.local "${CM_CA_LOCAL}" org.osaaf.aaf.cm.ca.props
+ set_prop cadi_x509_issuers "${CADI_X509_ISSUERS}" org.osaaf.aaf.props
+
encrypt_it cadi_keystore_password "${AAF_INITIAL_X509_PASSWORD}"
encrypt_it cm_ca.local "${AAF_SIGNER_PASSWORD}"
diff --git a/auth/docker/d.props.init b/auth/docker/d.props.init
index 782f0c3f..484aba4b 100644
--- a/auth/docker/d.props.init
+++ b/auth/docker/d.props.init
@@ -18,9 +18,12 @@ LATITUDE=
LONGITUDE=
#
# Initial AAF Certificate (not Generated)
+CADI_X509_ISSUERS="CN=intermediateCA_1, OU=OSAAF, O=ONAP, C=US:CN=intermediateCA_9, OU=OSAAF, O=ONAP, C=US"
AAF_INITIAL_X509_P12=
AAF_INITIAL_X509_PASSWORD=
# CA info (leave blank unless functioning as CA)
AAF_SIGNER_P12=
AAF_SIGNER_PASSWORD=
+CM_CA_LOCAL=
+