From 06ee0bf69c4cc48fa1017218611f1a3194137d47 Mon Sep 17 00:00:00 2001
From: Ethan Lynn <ethanlynnl@vmware.com>
Date: Tue, 2 Apr 2019 11:33:47 +0800
Subject: Enable https support for vio

Enable https support for vio plugin

Change-Id: I24cd39d37cd85c220fd0edd2ddbbbc01678c5616
Issue-ID: MULTICLOUD-560
Signed-off-by: Ethan Lynn <ethanlynnl@vmware.com>
---
 vio/assembly.xml      |  2 ++
 vio/cert.crt          | 20 ++++++++++++++++++++
 vio/cert.key          | 27 +++++++++++++++++++++++++++
 vio/docker/Dockerfile |  2 +-
 vio/run.sh            |  7 ++++++-
 5 files changed, 56 insertions(+), 2 deletions(-)
 create mode 100644 vio/cert.crt
 create mode 100644 vio/cert.key

diff --git a/vio/assembly.xml b/vio/assembly.xml
index 69ea59a..12f6de5 100644
--- a/vio/assembly.xml
+++ b/vio/assembly.xml
@@ -58,6 +58,8 @@
                 <include>*.ini</include>
                 <include>*.md</include>
                 <include>*.yml</include>
+                <include>*.crt</include>
+                <include>*.key</include>
             </includes>
         </fileSet>
     </fileSets>
diff --git a/vio/cert.crt b/vio/cert.crt
new file mode 100644
index 0000000..b025450
--- /dev/null
+++ b/vio/cert.crt
@@ -0,0 +1,20 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/vio/cert.key b/vio/cert.key
new file mode 100644
index 0000000..bc35b99
--- /dev/null
+++ b/vio/cert.key
@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----
+MIIEpgIBAAKCAQEA8KssZedsoSu9IbeK9s2WBdvz0yCUvcDw60Fi61OGhoY1plxn
+VxwGD9njEnFYQmjI0YkA7MB0IosKVpJJMfvuD8W4sJ6izw9akUHrX5x2Mb+KA/rl
+uRWjBr1RuL/dsTlpHXhGMg8+bYpYyzPL/h4oSCPtxv3hCMwaf6qlNjU7JAIy2lLG
+snpllsBrk1HVRC6TIdTHUVkpB/dct6dWBH5pKWGgIiJKvV9ZH0ryexIOPjUaOa3f
+WtXhTAoUAfBGmL/iR7kfF/yhNTcP7qvpMl4NlYMlclBvKKvrHLHgTfK9qhl/teg8
+krb3n7087A1kyTCDrjXhS3QQ/O5QLOAzCNAI0QIDAQABAoIBAQC+a9GPN5Ld2wuk
+d+L98CB5tlSvgiHuGZEFsxCffdD884fTf11MsSGivRVLbF8W/G2YTLxslsHM6xJc
++RXs9Jah6CF/raTIDC/uqqefWN6z8gczqvrEfPgmxvi4Iyc3qGMhLB7uUN1mMoab
+EPqgsB/TJIpoXkwFd+inhs99mpSWoZXVKYw8b8omKwXbJO0yF/1lwn+UoUe+AT2A
+odxxORS5SHut83GUhxCL4mFOU+RvuRCLGWrqT2JZEwffw6WtMiLk0hK9njKVT8EO
+LcLy4SQD6R5YNRpgeQuHHSsHjFmmncjizNzBkhDwOAtk1vvo0yROWLfR+Uw+nscf
+0gqgiFN5AoGBAP2YSv8OB/rULH+fMgwoux15UBZCqFrbyDPo8sJuKro2GdYoPtCh
+Iq0g6xIUOS2K1VOIwNHr/gnOQgtoQJiDCgQKM06yLaNPgQSykjJF90DvEzGBzRgm
+sUZPs8jBs480m6k3JHe0bArUlK/ddLBB9F+fajqUotgwkvD/gZioH7EnAoGBAPLz
+fyNj+Gwh+7nDjPqmOPWa7rDiSx9R1BXPjDyGHcg8SrJvRgfM8lN9SevK7si6kxvu
+dc47TM3w52r/3Q2hUW48eKeC8RXVgaQzgZKBY1bR6pC/90arJqveojwO0m8/HnBd
+5VUfn8JBabhyxmXVm8sbR+nDo06o0Nex3wfEfUFHAoGBAP0hbBLFZa+45CYLuQAs
+FAJqmkduB/CRm3g9WTw8jUfMQuPizjif7yYTSrGEIELWZvP3+EhSIQSWrpQGXxwd
+CP1ZVTeDYUy3SlhvCsFF13Uobucm4prt3FwLqLCGsP4MDCjPUwZtwL7azQPysMxT
+OWPNk1KgFSBo8/O9hxXjE6dXAoGBAMgDEs5OBTzwlU6P4UaRBh+dF5jkFDiKo3H5
+VliViXtJt61C0oKlhXKamPrYLNFwWKAMJ0xLoaWCCOMcFh6cim+YtTQjJtt01LAb
+/zZf8yqM0vGsOKUjTkj8ls+e3Dvd2O9lPeJgkKPaOnExfIhl3UbPBNs8xvuBG74X
+n6fDaeMNAoGBAMi08oqjILp7EuVhVjrGgdo3Gxl2Q4Us+OkLYp7vVsWEegsjhtDk
+erYtukArSyQWYdJZ/HJP7QVu/bGUO2F2SOmk/Cd0QjrPnc0CQlONbqk+skgXOHOr
+8cRFN0XIiX89YQK34ovXF8xGN5DcgUcRMCpSh02Mor4Exh6fwOKr3Am0
+-----END RSA PRIVATE KEY-----
diff --git a/vio/docker/Dockerfile b/vio/docker/Dockerfile
index 0330232..b035fc6 100644
--- a/vio/docker/Dockerfile
+++ b/vio/docker/Dockerfile
@@ -15,7 +15,7 @@ EXPOSE 9004
 RUN groupadd -r onap && useradd -r -g onap onap
 
 RUN apt-get update && \
-    apt-get install -y unzip wget curl gcc && \
+    apt-get install -y unzip wget curl gcc libssl-dev && \
     cd /opt/ && \
     wget -q -O multicloud-vio.zip 'https://nexus.onap.org/service/local/artifact/maven/redirect?r=snapshots&g=org.onap.multicloud.openstack.vmware&a=multicloud-openstack-vmware&v=1.3.0-SNAPSHOT&e=zip' && \
     unzip multicloud-vio.zip && \
diff --git a/vio/run.sh b/vio/run.sh
index 8585bc2..0a19cd5 100755
--- a/vio/run.sh
+++ b/vio/run.sh
@@ -32,7 +32,12 @@ then
     python multivimbroker/scripts/api.py
 else
     # nohup python manage.py runserver 0.0.0.0:9004 2>&1 &
-    nohup uwsgi --http :9004 --module vio.wsgi --master --processes 4 &
+    if [ ${SSL_ENABLED} = "true" ]; then
+        nohup uwsgi --https :9004,/opt/vio/cert.crt,/opt/vio/cert.key --module vio.wsgi --master --processes 4 &
+
+    else
+        nohup uwsgi --http :9004 --module vio.wsgi --master --processes 4 &
+    fi
     nohup python -m vio.event_listener.server 2>&1 &
 
     while [ ! -f  $logDir/vio.log ]; do
-- 
cgit 1.2.3-korg