From 6258cddd13af599acfa56246034bd2712dddb6f7 Mon Sep 17 00:00:00 2001 From: Piotr Marcinkiewicz Date: Tue, 8 Jun 2021 11:48:01 +0200 Subject: [OOM-CERT-SERVICE] Deprecate certServiceClient - update docs - Remove certServiceClient description from docs - Move descrption of CMPv2 provider to "How to use functionality" - Update description of getting certs for CertService in OOM - Update certService version to 2.4.0 Issue-ID: OOM-2744 Signed-off-by: Piotr Marcinkiewicz Change-Id: I283755b8fbd579646f979c88ea3022266855c4dc --- certServiceClient/README.md | 42 ++++++++++++++++++++++++++++++++++++++++-- 1 file changed, 40 insertions(+), 2 deletions(-) (limited to 'certServiceClient') diff --git a/certServiceClient/README.md b/certServiceClient/README.md index 98dcfb9b..15f63f4e 100644 --- a/certServiceClient/README.md +++ b/certServiceClient/README.md @@ -22,7 +22,7 @@ mvn clean install -P docker ### Nexus container image ``` -nexus3.onap.org:10001/onap/org.onap.oom.platform.cert-service.oom-certservice-client:latest +nexus3.onap.org:10001/onap/org.onap.oom.platform.cert-service.oom-certservice-client:2.3.3 ``` ### Running local client application as standalone docker container @@ -30,8 +30,45 @@ CertService API and client must be running in same network. You need certificate and trust anchors (in JKS format) to connect to CertService API via HTTPS. Information how to generate truststore and keystore files you can find in CertService main README. -Information how to run you can find in CertService main README and official documentation, see [Read The Docs](https://docs.onap.org/projects/onap-oom-platform-cert-service/en/latest/sections/usage.html) +To run CertService client as standalone docker container execute following steps: +1. Create file ‘$PWD/client.env’ with environment variables as in example below: +``` +#Client envs +REQUEST_URL= +REQUEST_TIMEOUT=10000 +OUTPUT_PATH=/var/certs +CA_NAME=RA +OUTPUT_TYPE=P12 + +#CSR config envs +COMMON_NAME=onap.org +ORGANIZATION=Linux-Foundation +ORGANIZATION_UNIT=ONAP +LOCATION=San-Francisco +STATE=California +COUNTRY=US +SANS=test.onap.org,onap.com,onap@onap.org,127.0.0.1,onap://cluster.local/ + +#TLS config envs +KEYSTORE_PATH=/etc/onap/oom/certservice/certs/certServiceClient-keystore.jks +KEYSTORE_PASSWORD= +TRUSTSTORE_PATH=/etc/onap/oom/certservice/certs/certServiceClient-truststore.jks +TRUSTSTORE_PASSWORD= +``` +2. Run docker container as in following example (API and client must be running in same network): +``` +docker run \ +--rm \ +--name oomcert-client \ +--env-file <$PWD/client.env (same as in step1)> \ +--network \ +--mount type=bind,src=,dst= \ +--volume : \ +--volume : \ +nexus3.onap.org:10001/onap/org.onap.oom.platform.cert-service.oom-certservice-client:2.3.3 +``` +After successful creation of certifications, container exits with exit code 0. ### Logs locally @@ -56,3 +93,4 @@ docker logs oom-certservice-client 8 Fail in Private Key to PEM Encoding 9 Wrong TLS configuration 10 File could not be created +99 Application exited abnormally -- cgit 1.2.3-korg