diff options
| author |   wdgp0424 <abdelmuhaimen.seaudi@orange.com> | 2021-07-15 12:50:24 +0200 |
|---|---|---|
| committer | Abdelmuhaimen Seaudi <abdelmuhaimen.seaudi@orange.com> | 2021-09-08 08:37:28 +0000 |
| commit | a798bc41d90d1a9370a524de6d0e17dcc33e933b (patch) | |
| tree | fa358c9803b7c3a2869c726c16faf91c33575aaf /ms/blueprintsprocessor | |
| parent | c82f01edbc45dc307af8ab271ccaba08da82b5fc (diff) | |
Use cert-initializer truststore instead of hard-coded ONAP Root CA
Issue-ID: CCSDK-3356
Signed-off-by: Abdelmuhaimen Seaudi <abdelmuhaimen.seaudi@orange.com>
Change-Id: I68582d2abae2a1e320ce243406fb5d932c34fb75
Diffstat (limited to 'ms/blueprintsprocessor')
| -rwxr-xr-x | ms/blueprintsprocessor/application/src/main/docker/startService.sh | 9 |
1 files changed, 7 insertions, 2 deletions
diff --git a/ms/blueprintsprocessor/application/src/main/docker/startService.sh b/ms/blueprintsprocessor/application/src/main/docker/startService.sh index bbe550b57..ff6471b97 100755 --- a/ms/blueprintsprocessor/application/src/main/docker/startService.sh +++ b/ms/blueprintsprocessor/application/src/main/docker/startService.sh @@ -1,11 +1,16 @@ #!/bin/sh +TRUSTSTORE_PASSWD=${TRUSTSTORE_PASSWD:-changeit} + nodeName=BlueprintsProcessor_1.0.0_$(cat /proc/self/cgroup | grep docker | sed s/\\//\\n/g | tail -1) -echo "${CLUSTER_ID}:${CLUSTER_NODE_ID} APP Config HOME : ${APP_CONFIG_HOME}" export APP_HOME=/opt/app/onap -keytool -import -noprompt -trustcacerts -keystore $JAVA_HOME/lib/security/cacerts -storepass changeit -alias ONAP -file $APP_CONFIG_HOME/ONAP_RootCA.cer +#echo "${CLUSTER_ID}:${CLUSTER_NODE_ID} APP Config HOME : ${APP_CONFIG_HOME}" +#[[ - $APP_CONFIG_HOME/${PRIVATE_CA} ]] && keytool -import -noprompt -trustcacerts -keystore $JAVA_HOME/lib/security/cacerts -storepass ${TRUSTSTORE_PASSWD} -alias ${PRIVATE_CA} -file $APP_CONFIG_HOME/${PRIVATE_CA} + +#Instead of above, using cert-initializer truststore to replace the default java cacerts +[[ -f $AAF_CREDSPATH/truststoreONAPall.jks ]] && cp $AAF_CREDSPATH/truststoreONAPall.jks $JAVA_HOME/lib/security/cacerts exec java -classpath "/etc:${APP_HOME}/lib/*:/lib/*:/src:/schema:/generated-sources:${APP_CONFIG_HOME}:${APP_HOME}" \ -DappName=${APP_NAME} -DappVersion=${BUNDLEVERSION} \ |