From d042a3e7d532e1fd46c6d6248ab824aab9376a0f Mon Sep 17 00:00:00 2001 From: Dan Timoney Date: Mon, 25 Oct 2021 08:42:33 -0400 Subject: Support disabling host verification in naming service As a workaround for an issue found in processing SAN certificates, allow for hostname verification to be diabled by setting the environment variable DISABLE_HOST_VERIFICATION=true. By default, host name verification remains enabled ... it must be explicitly disabled for this environment variable setting. Issue-ID: CCSDK-3501 Signed-off-by: Dan Timoney Change-Id: I0e3260cc5b8640814dd2f092aee20bca183dc34b --- ms/neng/src/main/compose/docker-compose.yaml | 13 +++++++++++++ ms/neng/src/main/compose/env | 18 ++++++++++++++++++ 2 files changed, 31 insertions(+) create mode 100644 ms/neng/src/main/compose/env (limited to 'ms/neng/src/main/compose') diff --git a/ms/neng/src/main/compose/docker-compose.yaml b/ms/neng/src/main/compose/docker-compose.yaml index 09c588a0..2a9f373c 100644 --- a/ms/neng/src/main/compose/docker-compose.yaml +++ b/ms/neng/src/main/compose/docker-compose.yaml @@ -30,4 +30,17 @@ services: NENG_DB_URL: "jdbc:mysql://mariadb-galera:3306/neng" NENG_DB_USER: "${NENG_DB_USER}" NENG_DB_PASS: "${NENG_DB_PASS}" + POL_CLIENT_AUTH: "${POL_CLIENT_AUTH}" + POL_BASIC_AUTH_USER: "${POL_BASIC_AUTH_USER}" + POL_BASIC_AUTH_PASSWORD: "${POL_BASIC_AUTH_PASSWORD}" + POL_URL: "${POL_URL}" + POL_ENV: "${POL_ENV}" + POL_REQ_ID: "${POL_REQ_ID}" + AAI_CERT_PASS: "${AAI_CERT_PASS}" + AAI_CERT_PATH: "${AAI_CERT_PATH}" + AAI_URI: "${AAI_URI}" + AAI_AUTH: "${AAI_AUTH}" + DISABLE_HOST_VERIFICATION: "${DISABLE_HOST_VERIFICATION:-false}" + + diff --git a/ms/neng/src/main/compose/env b/ms/neng/src/main/compose/env new file mode 100644 index 00000000..94c73841 --- /dev/null +++ b/ms/neng/src/main/compose/env @@ -0,0 +1,18 @@ +export NENG_DB_PORT=13306 +export NENG_DB_USER=neng +export NENG_DB_ROOT=itsASecret +export NENG_DB_PASSWORD=neng1234 +export NENG_DB_PASS=neng1234 +export NENG_SERV_PORT=16606 +export POL_CLIENT_AUTH="cHl0aG9uOnRlc3Q=" +export POL_BASIC_AUTH_USER=healthcheck +export POL_BASIC_AUTH_PASSWORD="zb!XztG34" +export POL_URL="https://policy-xacml-pdp:6969/policy/pdpx/v1/decision" +export POL_ENV=TEST +export POL_REQ_ID=xx +export AAI_CERT_PASS=changeit +export AAI_CERT_PATH=/opt/etc/config/aai_keystore +export AAI_URI=https://aai:8443/aai/v14/ +export AAI_AUTH="QUFJOkFBSQ==" + + -- cgit 1.2.3-korg