From 9a7128436b8d7c292dd8de849883c0cce18e5e68 Mon Sep 17 00:00:00 2001 From: Dan Timoney Date: Mon, 17 May 2021 10:20:29 -0400 Subject: Remove SDNC CSIT tests SDNC CSIT tests have been moved to SDNC project repo (sdnc/oam), so tests in integration/csit are no longer needed. Change-Id: Iae8b2e5b609e50ea7f6a215e82fb8344fea0fe69 Issue-ID: SDNC-1545 Signed-off-by: Dan Timoney --- .../certprofile_MY_ENDUSER-1667220921.xml | 594 ------------- .../entityprofile_My_EndEntity-161023208.xml | 917 --------------------- scripts/sdnc/certservice/config/cmpServers.json | 24 - scripts/sdnc/certservice/docker-compose.yml | 46 -- scripts/sdnc/certservice/scripts/cmp.cmpRA.dump | 6 - .../certservice/scripts/ejbca-configuration.sh | 13 - scripts/sdnc/script1.sh | 20 - scripts/sdnc/sdnc/certs/certs.properties | 2 - scripts/sdnc/sdnc/certs/keys0.zip | Bin 6006 -> 0 bytes scripts/sdnc/sdnc/config/mount.xml | 14 - scripts/sdnc/sdnc/docker-compose.yml | 75 -- 11 files changed, 1711 deletions(-) delete mode 100644 scripts/sdnc/certservice/certprofile/certprofile_MY_ENDUSER-1667220921.xml delete mode 100644 scripts/sdnc/certservice/certprofile/entityprofile_My_EndEntity-161023208.xml delete mode 100644 scripts/sdnc/certservice/config/cmpServers.json delete mode 100644 scripts/sdnc/certservice/docker-compose.yml delete mode 100644 scripts/sdnc/certservice/scripts/cmp.cmpRA.dump delete mode 100755 scripts/sdnc/certservice/scripts/ejbca-configuration.sh delete mode 100644 scripts/sdnc/script1.sh delete mode 100644 scripts/sdnc/sdnc/certs/certs.properties delete mode 100644 scripts/sdnc/sdnc/certs/keys0.zip delete mode 100644 scripts/sdnc/sdnc/config/mount.xml delete mode 100755 scripts/sdnc/sdnc/docker-compose.yml (limited to 'scripts') diff --git a/scripts/sdnc/certservice/certprofile/certprofile_MY_ENDUSER-1667220921.xml b/scripts/sdnc/certservice/certprofile/certprofile_MY_ENDUSER-1667220921.xml deleted file mode 100644 index 92fbdee5..00000000 --- a/scripts/sdnc/certservice/certprofile/certprofile_MY_ENDUSER-1667220921.xml +++ /dev/null @@ -1,594 +0,0 @@ - - - - - version - 46.0 - - - type - 1 - - - certversion - X509v3 - - - encodedvalidity - 2y - - - usecertificatevalidityoffset - false - - - certificatevalidityoffset - -10m - - - useexpirationrestrictionforweekdays - false - - - expirationrestrictionforweekdaysbefore - true - - - expirationrestrictionweekdays - - - true - - - true - - - false - - - false - - - false - - - true - - - true - - - - - allowvalidityoverride - false - - - allowextensionoverride - false - - - allowdnoverride - false - - - allowdnoverridebyeei - false - - - allowbackdatedrevokation - false - - - usecertificatestorage - true - - - storecertificatedata - true - - - storesubjectaltname - true - - - usebasicconstrants - true - - - basicconstraintscritical - true - - - usesubjectkeyidentifier - true - - - subjectkeyidentifiercritical - false - - - useauthoritykeyidentifier - true - - - authoritykeyidentifiercritical - false - - - usesubjectalternativename - true - - - subjectalternativenamecritical - false - - - useissueralternativename - true - - - issueralternativenamecritical - false - - - usecrldistributionpoint - false - - - usedefaultcrldistributionpoint - false - - - crldistributionpointcritical - false - - - crldistributionpointuri - - - - usefreshestcrl - false - - - usecadefinedfreshestcrl - false - - - freshestcrluri - - - - crlissuer - - - - usecertificatepolicies - false - - - certificatepoliciescritical - false - - - certificatepolicies - - - - availablekeyalgorithms - - - DSA - - - ECDSA - - - RSA - - - - - availableeccurves - - - ANY_EC_CURVE - - - - - availablebitlengths - - - 0 - - - 192 - - - 224 - - - 239 - - - 256 - - - 384 - - - 512 - - - 521 - - - 1024 - - - 1536 - - - 2048 - - - 3072 - - - 4096 - - - 6144 - - - 8192 - - - - - minimumavailablebitlength - 0 - - - maximumavailablebitlength - 8192 - - - signaturealgorithm - - - - usekeyusage - true - - - keyusage - - - true - - - true - - - true - - - false - - - false - - - false - - - false - - - false - - - false - - - - - allowkeyusageoverride - false - - - keyusagecritical - true - - - useextendedkeyusage - true - - - extendedkeyusage - - - 1.3.6.1.5.5.7.3.2 - - - 1.3.6.1.5.5.7.3.4 - - - 1.3.6.1.5.5.7.3.1 - - - - - extendedkeyusagecritical - false - - - usedocumenttypelist - false - - - documenttypelistcritical - false - - - documenttypelist - - - - availablecas - - - -1 - - - 1295313472 - - - - - usedpublishers - - - - useocspnocheck - false - - - useldapdnorder - true - - - usecustomdnorder - false - - - usemicrosofttemplate - false - - - microsofttemplate - - - - usecardnumber - false - - - usecnpostfix - false - - - cnpostfix - - - - usesubjectdnsubset - false - - - subjectdnsubset - - - - usesubjectaltnamesubset - false - - - subjectaltnamesubset - - - - usepathlengthconstraint - false - - - pathlengthconstraint - 0 - - - useqcstatement - false - - - usepkixqcsyntaxv2 - false - - - useqcstatementcritical - false - - - useqcstatementraname - - - - useqcsematicsid - - - - useqcetsiqccompliance - false - - - useqcetsisignaturedevice - false - - - useqcetsivaluelimit - false - - - qcetsivaluelimit - 0 - - - qcetsivaluelimitexp - 0 - - - qcetsivaluelimitcurrency - - - - useqcetsiretentionperiod - false - - - qcetsiretentionperiod - 0 - - - useqccustomstring - false - - - qccustomstringoid - - - - qccustomstringtext - - - - qcetsipds - - - - qcetsitype - - - - usecertificatetransparencyincerts - false - - - usecertificatetransparencyinocsp - false - - - usecertificatetransparencyinpublisher - false - - - usesubjectdirattributes - false - - - usenameconstraints - false - - - useauthorityinformationaccess - false - - - caissuers - - - - usedefaultcaissuer - false - - - usedefaultocspservicelocator - false - - - ocspservicelocatoruri - - - - cvcaccessrights - 3 - - - usedcertificateextensions - - - - approvals - - - - org.cesecore.certificates.ca.ApprovalRequestType - KEYRECOVER - - -1 - - - - org.cesecore.certificates.ca.ApprovalRequestType - ADDEDITENDENTITY - - -1 - - - - org.cesecore.certificates.ca.ApprovalRequestType - REVOCATION - - -1 - - - - - useprivkeyusageperiodnotbefore - false - - - useprivkeyusageperiod - false - - - useprivkeyusageperiodnotafter - false - - - privkeyusageperiodstartoffset - 0 - - - privkeyusageperiodlength - 63072000 - - - usesingleactivecertificateconstraint - false - - - overridableextensionoids - - - - nonoverridableextensionoids - - - - usecustomdnorderldap - false - - - diff --git a/scripts/sdnc/certservice/certprofile/entityprofile_My_EndEntity-161023208.xml b/scripts/sdnc/certservice/certprofile/entityprofile_My_EndEntity-161023208.xml deleted file mode 100644 index cad4ca7f..00000000 --- a/scripts/sdnc/certservice/certprofile/entityprofile_My_EndEntity-161023208.xml +++ /dev/null @@ -1,917 +0,0 @@ - - - - - version - 14.0 - - - NUMBERARRAY - - - 1 - - - 1 - - - 0 - - - 0 - - - 0 - - - 1 - - - 0 - - - 0 - - - 0 - - - 0 - - - 0 - - - 1 - - - 1 - - - 1 - - - 1 - - - 0 - - - 1 - - - 0 - - - 2 - - - 0 - - - 0 - - - 0 - - - 0 - - - 0 - - - 0 - - - 0 - - - 1 - - - 0 - - - 0 - - - 1 - - - 1 - - - 1 - - - 1 - - - 1 - - - 1 - - - 0 - - - 0 - - - 1 - - - 1 - - - 0 - - - 0 - - - 0 - - - 0 - - - 0 - - - 0 - - - 0 - - - 0 - - - 0 - - - 0 - - - 0 - - - 0 - - - 0 - - - 0 - - - 0 - - - 0 - - - 0 - - - 0 - - - 0 - - - 0 - - - 0 - - - 0 - - - 0 - - - 0 - - - 0 - - - 0 - - - 0 - - - 0 - - - 0 - - - 0 - - - 0 - - - 0 - - - 0 - - - 0 - - - 0 - - - 0 - - - 0 - - - 0 - - - 0 - - - 0 - - - 0 - - - 0 - - - 0 - - - 0 - - - 0 - - - 0 - - - 0 - - - 0 - - - 0 - - - 1 - - - 1 - - - 0 - - - 1 - - - 0 - - - 1 - - - 1 - - - 1 - - - 1 - - - 1 - - - 1 - - - 1 - - - 0 - - - 0 - - - 0 - - - - - SUBJECTDNFIELDORDER - - - 500 - - - 1100 - - - 1200 - - - 1300 - - - 1400 - - - 1600 - - - - - SUBJECTALTNAMEFIELDORDER - - - 1800 - - - 1801 - - - - - SUBJECTDIRATTRFIELDORDER - - - - 0 - - - - 20000 - true - - - 10000 - true - - - 30000 - true - - - 1 - - - - 20001 - true - - - 10001 - true - - - 30001 - true - - - 95 - - - - 20095 - false - - - 10095 - true - - - 30095 - true - - - 96 - - - - 20096 - false - - - 10096 - true - - - 30096 - true - - - 5 - - - - 20005 - true - - - 10005 - true - - - 30005 - true - - - 26 - - - - 20026 - false - - - 10026 - true - - - 30026 - true - - - 29 - 1667220921 - - - 20029 - true - - - 10029 - true - - - 30029 - true - - - 30 - 1667220921 - - - 20030 - true - - - 10030 - true - - - 30030 - true - - - 31 - 1 - - - 20031 - true - - - 10031 - true - - - 30031 - true - - - 32 - 1;2;3;4 - - - 20032 - true - - - 10032 - true - - - 30032 - true - - - 33 - - - - 20033 - true - - - 10033 - true - - - 30033 - true - - - 34 - - - - 20034 - true - - - 10034 - false - - - 30034 - true - - - 38 - 1295313472 - - - 20038 - true - - - 10038 - true - - - 30038 - true - - - 37 - 1295313472 - - - 20037 - true - - - 10037 - true - - - 30037 - true - - - 98 - - - - 20098 - false - - - 10098 - false - - - 30098 - true - - - 99 - - - - 20099 - false - - - 10099 - false - - - 30099 - true - - - 97 - - - - 20097 - false - - - 10097 - false - - - 30097 - true - - - 91 - false - - - 20091 - false - - - 10091 - false - - - 30091 - true - - - 94 - -1 - - - 20094 - true - - - 10094 - false - - - 30094 - false - - - 93 - -1 - - - 20093 - false - - - 10093 - false - - - 30093 - false - - - 89 - - - - 20089 - false - - - 10089 - false - - - 30089 - true - - - 88 - - - - 20088 - false - - - 10088 - false - - - 30088 - true - - - ALLOW_MERGEDN_WEBSERVICES - false - - - 2 - - - - 20002 - false - - - 10002 - false - - - 10090 - true - - - 90 - 0 - - - REVERSEFFIELDCHECKS - false - - - 28 - false - - - 20028 - false - - - 10028 - false - - - REUSECERTIFICATE - false - - - 35 - false - - - 20035 - false - - - 10035 - false - - - 10092 - false - - - USEEXTENSIONDATA - false - - - PRINTINGUSE - false - - - PRINTINGDEFAULT - false - - - PRINTINGREQUIRED - false - - - PRINTINGCOPIES - 1 - - - PRINTINGPRINTERNAME - - - - PRINTINGSVGDATA - - - - PRINTINGSVGFILENAME - - - - 11 - - - - 20011 - true - - - 10011 - true - - - 30011 - true - - - 12 - - - - 20012 - true - - - 10012 - true - - - 30012 - true - - - 13 - - - - 20013 - true - - - 10013 - true - - - 30013 - true - - - 14 - - - - 20014 - true - - - 10014 - true - - - 30014 - true - - - 16 - - - - 20016 - true - - - 10016 - true - - - 30016 - true - - - 18 - - - - 20018 - true - - - 10018 - true - - - 30018 - true - - - 118 - - - - 20118 - true - - - 10118 - true - - - 30118 - true - - - diff --git a/scripts/sdnc/certservice/config/cmpServers.json b/scripts/sdnc/certservice/config/cmpServers.json deleted file mode 100644 index ce427c53..00000000 --- a/scripts/sdnc/certservice/config/cmpServers.json +++ /dev/null @@ -1,24 +0,0 @@ -{ - "cmpv2Servers": [ - { - "caName": "Client", - "url": "http://aafcert-ejbca:8080/ejbca/publicweb/cmp/cmp", - "issuerDN": "CN=My_ManagementCA", - "caMode": "CLIENT", - "authentication": { - "iak": "mypassword", - "rv": "mypassword" - } - }, - { - "caName": "RA", - "url": "http://aafcert-ejbca:8080/ejbca/publicweb/cmp/cmpRA", - "issuerDN": "CN=My_ManagementCA", - "caMode": "RA", - "authentication": { - "iak": "mypassword", - "rv": "mypassword" - } - } - ] -} diff --git a/scripts/sdnc/certservice/docker-compose.yml b/scripts/sdnc/certservice/docker-compose.yml deleted file mode 100644 index 6e4c4b60..00000000 --- a/scripts/sdnc/certservice/docker-compose.yml +++ /dev/null @@ -1,46 +0,0 @@ -version: "2.1" - -services: - ejbca: - image: primekey/ejbca-ce:6.15.2.5 - hostname: cahostname - container_name: aafcert-ejbca - ports: - - "80:8080" - - "443:8443" - volumes: - - $SCRIPTS_PATH:/opt/primekey/scripts - - $CERT_PROFILE:/opt/primekey/certprofile - healthcheck: - test: ["CMD-SHELL", "curl -kI https://localhost:8443/ejbca/publicweb/healthcheck/ejbcahealth"] - interval: 20s - timeout: 3s - retries: 9 - networks: - - certservice - - aaf-cert-service: - image: nexus3.onap.org:10001/onap/org.onap.aaf.certservice.aaf-certservice-api:latest - volumes: - - $CONFIGURATION_PATH:/etc/onap/aaf/certservice/cmpServers.json - - $AAF_INITIAL_CERTS/truststore.jks:/etc/onap/aaf/certservice/certs/truststore.jks - - $AAF_INITIAL_CERTS/root.crt:/etc/onap/aaf/certservice/certs/root.crt - - $AAF_INITIAL_CERTS/certServiceServer-keystore.jks:/etc/onap/aaf/certservice/certs/certServiceServer-keystore.jks - - $AAF_INITIAL_CERTS/certServiceServer-keystore.p12:/etc/onap/aaf/certservice/certs/certServiceServer-keystore.p12 - container_name: aaf-cert-service - ports: - - "8443:8443" - depends_on: - ejbca: - condition: service_healthy - healthcheck: - test: ["CMD-SHELL", "curl https://localhost:8443/actuator/health --cacert /etc/onap/aaf/certservice/certs/root.crt --cert-type p12 --cert /etc/onap/aaf/certservice/certs/certServiceServer-keystore.p12 --pass secret"] - interval: 10s - timeout: 3s - retries: 15 - networks: - - certservice - -networks: - certservice: - driver: bridge \ No newline at end of file diff --git a/scripts/sdnc/certservice/scripts/cmp.cmpRA.dump b/scripts/sdnc/certservice/scripts/cmp.cmpRA.dump deleted file mode 100644 index 900e676d..00000000 --- a/scripts/sdnc/certservice/scripts/cmp.cmpRA.dump +++ /dev/null @@ -1,6 +0,0 @@ -cmpRA.operationmode = ra -cmpRA.responseprotection = pbe -cmpRA.ra.endentityprofileid = 161023208 -cmpRA.ra.certificateprofile = MY_ENDUSER -cmpRA.ra.caname = My_ManagementCA -cmpRA.allowautomatickeyupdate = true \ No newline at end of file diff --git a/scripts/sdnc/certservice/scripts/ejbca-configuration.sh b/scripts/sdnc/certservice/scripts/ejbca-configuration.sh deleted file mode 100755 index 64045a7f..00000000 --- a/scripts/sdnc/certservice/scripts/ejbca-configuration.sh +++ /dev/null @@ -1,13 +0,0 @@ -#!/bin/bash - -configureEjbca() { - ejbca.sh ca init My_ManagementCA "C=SE,O=PrimeKey,CN=My_ManagementCA" soft foo123 2048 RSA 365 --policy 2.5.29.32.0 SHA256WithRSA - ejbca.sh ca editca --caname My_ManagementCA --field cmpRaAuthSecret --value mypassword - ejbca.sh config cmp addalias --alias cmpRA - ejbca.sh ca importprofiles -d /opt/primekey/certprofile - ejbca.sh config cmp uploadfile --alias cmpRA --file /opt/primekey/scripts/cmp.cmpRA.dump - ejbca.sh config cmp dumpalias --alias cmpRA - ejbca.sh ca getcacert --caname My_ManagementCA -f /dev/stdout > cacert.pem -} - -configureEjbca diff --git a/scripts/sdnc/script1.sh b/scripts/sdnc/script1.sh deleted file mode 100644 index 9bd1a225..00000000 --- a/scripts/sdnc/script1.sh +++ /dev/null @@ -1,20 +0,0 @@ -#!/bin/bash -# -# Copyright 2016-2017 Huawei Technologies Co., Ltd. -# -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at -# -# http://www.apache.org/licenses/LICENSE-2.0 -# -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. -# -# Modifications copyright (c) 2017 AT&T Intellectual Property -# - -echo "This is ${WORKSPACE}/scripts/sdnc/script1.sh" diff --git a/scripts/sdnc/sdnc/certs/certs.properties b/scripts/sdnc/sdnc/certs/certs.properties deleted file mode 100644 index f8f3fa72..00000000 --- a/scripts/sdnc/sdnc/certs/certs.properties +++ /dev/null @@ -1,2 +0,0 @@ -keys0.zip -***** diff --git a/scripts/sdnc/sdnc/certs/keys0.zip b/scripts/sdnc/sdnc/certs/keys0.zip deleted file mode 100644 index 6f7f756b..00000000 Binary files a/scripts/sdnc/sdnc/certs/keys0.zip and /dev/null differ diff --git a/scripts/sdnc/sdnc/config/mount.xml b/scripts/sdnc/sdnc/config/mount.xml deleted file mode 100644 index 04305252..00000000 --- a/scripts/sdnc/sdnc/config/mount.xml +++ /dev/null @@ -1,14 +0,0 @@ - - PNFDemo - - ODL_private_key_0 - netconf - - pnfaddr - 6513 - false - - TLS - - 5 - diff --git a/scripts/sdnc/sdnc/docker-compose.yml b/scripts/sdnc/sdnc/docker-compose.yml deleted file mode 100755 index 61bf8b6e..00000000 --- a/scripts/sdnc/sdnc/docker-compose.yml +++ /dev/null @@ -1,75 +0,0 @@ -version: '3' - -services: - mariadb: - image: nexus3.onap.org:10001/mariadb:10.1.11 - ports: - - "3306:3306" - container_name: mariadb - volumes: - - /etc/localtime:/etc/localtime:ro - environment: - - MYSQL_ROOT_PASSWORD=${MYSQL_ROOT_PASSWORD} - - MYSQL_USER=${MYSQL_USER} - - MYSQL_PASSWORD=${MYSQL_PASSWORD} - - MYSQL_DATABASE=${MYSQL_DATABASE} - hostname: - mariadb.so.testlab.onap.org - logging: - driver: "json-file" - options: - max-size: "30m" - max-file: "5" - - sdnc: - image: onap/sdnc-image:latest - container_name: sdnc - volumes: - - /etc/localtime:/etc/localtime:ro - - $SDNC_CERT_PATH:/opt/opendaylight/current/certs - entrypoint: ["/opt/onap/sdnc/bin/startODL.sh"] - ports: - - "8282:8181" - hostname: - sdnc - links: - - mariadb:dbhost - - mariadb:sdnctldb01 - - mariadb:sdnctldb02 - environment: - - MYSQL_ROOT_PASSWORD=${MYSQL_ROOT_PASSWORD} - - MYSQL_USER=${MYSQL_USER} - - MYSQL_PASSWORD=${MYSQL_PASSWORD} - - MYSQL_DATABASE=${MYSQL_DATABASE} - - SDNC_CONFIG_DIR=/opt/onap/sdnc/data/properties - - SDNC_BIN=/opt/onap/sdnc/bin - - ODL_CERT_DIR=/tmp - - ODL_ADMIN_USERNAME=${ODL_USER} - - ODL_ADMIN_PASSWORD=${ODL_PASSWORD} - - ODL_USER=${ODL_USER} - - ODL_PASSWORD=${ODL_PASSWORD} - - ODL_CERT_DIR=/opt/opendaylight/current/certs - - SDNC_DB_INIT=true - - HONEYCOMB_USER=${HONEYCOMB_USER} - - HONEYCOMB_PASSWORD=${HONEYCOMB_PASSWORD} - - TRUSTSTORE_PASSWORD=${TRUSTSTORE_PASSWORD} - - KEYSTORE_PASSWORD=${KEYSTORE_PASSWORD} - - SO_USER=${SO_USER} - - SO_PASSWORD=${SO_PASSWORD} - - NENG_USER=${NENG_USER} - - NENG_PASSWORD=${NENG_PASSWORD} - - CDS_USER=${CDS_USER} - - CDS_PASSWORD=${CDS_PASSWORD} - - ANSIBLE_USER=${ANSIBLE_USER} - - ANSIBLE_PASSWORD=${ANSIBLE_PASSWORD} - - SQL_CRYPTKEY=${SQL_CRYPTKEY} - - A1_TRUSTSTORE_PASSWORD=a1adapter - depends_on: - - mariadb - dns: - - ${DNS_IP_ADDR-10.0.100.1} - logging: - driver: "json-file" - options: - max-size: "30m" - max-file: "5" -- cgit 1.2.3-korg