From 483ccbf2d8f0c71ebb15a4a47246a68a42e68f3e Mon Sep 17 00:00:00 2001 From: Bogumil Zebek Date: Wed, 25 Mar 2020 11:54:11 +0100 Subject: Documentation Issue-ID: AAF-1091 Signed-off-by: Zebek Bogumil Change-Id: I59df0545c4dd5adfde32c83988f89cd2d0c4676b --- docs/sections/architecture.rst | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) create mode 100644 docs/sections/architecture.rst (limited to 'docs/sections/architecture.rst') diff --git a/docs/sections/architecture.rst b/docs/sections/architecture.rst new file mode 100644 index 00000000..654208d1 --- /dev/null +++ b/docs/sections/architecture.rst @@ -0,0 +1,18 @@ +.. This work is licensed under a Creative Commons Attribution 4.0 International License. +.. http://creativecommons.org/licenses/by/4.0 +.. Copyright 2020 NOKIA + +Architecture +============ + +The micro-service called CertService is designed for requesting certificates +signed by external Certificate Authority (CA) using CMP over HTTP protocol. It uses CMPv2 client to send and receive CMPv2 messages. +CertService's client will be also provided so other ONAP components (aka end components) can easily get certificate from CertService. +End component is an ONAP component (e.g. DCAE collector or controller) which requires certificate from CMPv2 server +to protect external traffic and uses CertService's client to get it. +CertService's client communicates with CertService via REST API over HTTPS, while CertService with CMPv2 server via CMP over HTTP. + +.. image:: img/certservice_high_level.jpg + :width: 855px + :height: 178px + :alt: Interaction between components -- cgit 1.2.3-korg