From 74357ca60a055f546a5f41b1a93691cb858e7871 Mon Sep 17 00:00:00 2001
From: MatthieuGeerebaert <matthieu.geerebaert@orange.com>
Date: Tue, 24 Apr 2018 16:30:59 +0200
Subject: NBI needs to support HTTPS requests to AAI

- add amsterdam aai and beijing Root CA certificates
- will be used and injected to docker instance

Change-Id: I1028fb304f213425b7a4d21aaf81668c15b9d236
Issue-ID: EXTAPI-57
Signed-off-by: MatthieuGeerebaert <matthieu.geerebaert@orange.com>
Signed-off-by: Quoc Nghia Nguyen <quocnghia.nguyen@orange.com>
---
 Dockerfile | 12 ++++++++++++
 1 file changed, 12 insertions(+)

(limited to 'Dockerfile')

diff --git a/Dockerfile b/Dockerfile
index 09b2019..af70549 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -4,6 +4,18 @@ ARG SERVER_PORT
 ARG PKG_FILENAME=nbi-rest-services-1.0.0-SNAPSHOT.jar
 ADD target/$PKG_FILENAME app.jar
 
+COPY src/main/resources/certificate /certs
+ARG CERT_PASS=changeit
+RUN for cert in $(ls -d /certs/*); do \
+        echo "adding $cert to java keystore..."; \
+        keytool -import \
+                -file "$cert" \
+                -storepass "${CERT_PASS}" \
+                -keystore $JAVA_HOME/lib/security/cacerts \
+                -alias "$(basename $cert)" \
+                --noprompt; \
+    done
+
 ENV SERVER_PORT=${SERVER_PORT:-8080}
 ENV JAVA_OPTS="-Djava.security.egd=file:/dev/./urandom -jar"
 
-- 
cgit 1.2.3-korg