Remove plain OpenStack pwd from Heat

- Replace plain OpenStack password with its encrypted version
- Update SO install/init script to skip key encryption (will be done by user)
- Provide a script that encrypts the plain OpenStack password

Change-Id: Ifb7010ab8720ca92119c65484d05f5cfacf023cb
Issue-ID: INT-646
Signed-off-by: Marco Platania <platania@research.att.com>

1 files changed, 17 insertions, 0 deletions

diff --git a/heat/ONAP/openstack_encrypted_key.sh b/heat/ONAP/openstack_encrypted_key.sh
new file mode 100755
index 00000000..20910fa3
--- /dev/null
+++ b/heat/ONAP/openstack_encrypted_key.sh
@@ -0,0 +1,17 @@
+#!/bin/bash
+
+usage () {
+  echo "Usage:"
+  echo "   ./$(basename $0) your_openstack_password"
+  exit 1
+}
+
+if [ "$#" -ne 1 ]; then
+  echo "Wrong number of input parameters"
+  usage
+fi
+
+SO_ENCRYPTION_KEY=aa3871669d893c7fb8abbcda31b88b4f
+OPENSTACK_API_KEY=$1
+
+echo -n "$OPENSTACK_API_KEY" | openssl aes-128-ecb -e -K $SO_ENCRYPTION_KEY -nosalt | xxd -c 256 -p