summaryrefslogtreecommitdiffstats
path: root/docs
diff options
context:
space:
mode:
authorTony Hansen <tony@att.com>2019-08-27 15:36:19 +0000
committerGerrit Code Review <gerrit@onap.org>2019-08-27 15:36:19 +0000
commitf94afca1487c0d0a9f073eb0434df5483929f0fa (patch)
treedf729f087833b661ae5e9e88dbf296ffca69a765 /docs
parent56a75e6f1f33b63ffa91ec565e503b0d2b8c5625 (diff)
parent7b9db0f82389efcf01db0cd8b1e427b1cce7d7f3 (diff)
Merge "Update dfc certificates instruction"
Diffstat (limited to 'docs')
-rw-r--r--docs/sections/services/dfc/certificates.rst21
-rw-r--r--docs/sections/services/dfc/installation.rst4
2 files changed, 18 insertions, 7 deletions
diff --git a/docs/sections/services/dfc/certificates.rst b/docs/sections/services/dfc/certificates.rst
index 05728235..b759e70c 100644
--- a/docs/sections/services/dfc/certificates.rst
+++ b/docs/sections/services/dfc/certificates.rst
@@ -1,8 +1,15 @@
.. This work is licensed under a Creative Commons Attribution 4.0 International License.
.. http://creativecommons.org/licenses/by/4.0
+Certificates (From AAF)
+=======================
+DCAE service components will use common certifcates generated from AAF/test instance and made available during deployment of DCAE TLS init container.
-Certificates
-============
+DCAE has a generalized process of certificate distribution as documented here - https://docs.onap.org/en/latest/submodules/dcaegen2.git/docs/sections/tls_enablement.html
+
+The updated certificates are located in https://git.onap.org/dcaegen2/deployments/tree/tls-init-container/tls
+
+Certificates (Manual configuration of self-signed certifcates)
+==============================================================
Configuration of Certificates in test environment(For FTP over TLS):
@@ -77,31 +84,31 @@ We have two keystore files, one for TrustManager, one for KeyManager.
Copy the existing jks from the DFC container to a local environment.
.. code:: bash
-
+
docker cp <DFC container>:/opt/app/datafile/config/ftp.jks .
docker cp <DFC container>:/opt/app/datafile/config/dfc.jks .
.. code:: bash
-
+
openssl base64 -in ftp.jks -out ftp.jks.b64
openssl base64 -in dfc.jks -out dfc.jks.b64
.. code:: bash
-
+
chmod 755 ftp.jks.b64
chmod 755 dfc.jks.b64
Copy the new jks.64 files from local environment to the DFC container.
.. code:: bash
-
+
docker cp ftp.jks.b64 <DFC container>:/opt/app/datafile/config/
docker cp dfc.jks.b64 <DFC container>:/opt/app/datafile/config/
Finally
.. code:: bash
-
+
docker restart <DFC container>
5. Configure vsftpd:
diff --git a/docs/sections/services/dfc/installation.rst b/docs/sections/services/dfc/installation.rst
index bfc84e48..e50d0351 100644
--- a/docs/sections/services/dfc/installation.rst
+++ b/docs/sections/services/dfc/installation.rst
@@ -77,3 +77,7 @@ Another option is to pull the image first, and then run the image's container wi
The grep command will display the images corresponding to DFC. There can be several due to remotely or locally built
image, and also to different tags, i.e. different versions.
+
+Certifcates
+^^^^^^^^^^^
+.. _page: ./certifcates.rst