summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorr.bogacki <r.bogacki@samsung.com>2019-08-19 14:38:08 +0200
committerRobert Bogacki <r.bogacki@samsung.com>2019-08-20 09:56:26 +0000
commita0418bb757fbd35ac69131b1daaa6b0deeb1eb4b (patch)
tree2e8e730cdef2da2877f413ac3f4a13ebfdb9fc2f
parent6c301b34d9dce6de25ffe5852c1244e1b24d4a88 (diff)
Implement HTTPS calls into dcaedt_be
Implemented HTTPS calls into dcaedt_be -Added p12 keystore certificate. -Updated application configuration. -Added trust-store. Issue-ID: SDC-2477 Signed-off-by: Robert Bogacki <r.bogacki@samsung.com> Change-Id: I51a5e4d6d93dc9391eb25519ed382291de5895eb
-rw-r--r--dcaedt_be/src/main/webapp/WEB-INF/config/dcae-be/application.properties6
-rw-r--r--docker/docker_be/chef-solo/cookbooks/Deploy-DCAE/attributes/default.rb6
-rw-r--r--docker/docker_be/chef-solo/cookbooks/Deploy-DCAE/files/default/keystorebin4255 -> 0 bytes
-rw-r--r--docker/docker_be/chef-solo/cookbooks/Deploy-DCAE/files/default/org.onap.sdc.p12 (renamed from dcaedt_be/src/main/resources/org.onap.sdc.p12)bin4051 -> 4051 bytes
-rw-r--r--docker/docker_be/chef-solo/cookbooks/Deploy-DCAE/files/default/org.onap.sdc.trust.jks (renamed from dcaedt_be/src/main/resources/org.onap.sdc.trust.jks)bin1413 -> 1413 bytes
-rw-r--r--docker/docker_be/chef-solo/cookbooks/Deploy-DCAE/files/default/truststorebin4255 -> 0 bytes
-rw-r--r--docker/docker_be/chef-solo/cookbooks/Deploy-DCAE/recipes/jetty_setup.rb8
-rw-r--r--docker/docker_be/chef-solo/cookbooks/Deploy-DCAE/templates/default/ssl-ini.erb4
8 files changed, 9 insertions, 15 deletions
diff --git a/dcaedt_be/src/main/webapp/WEB-INF/config/dcae-be/application.properties b/dcaedt_be/src/main/webapp/WEB-INF/config/dcae-be/application.properties
index f299fbb..2bb725d 100644
--- a/dcaedt_be/src/main/webapp/WEB-INF/config/dcae-be/application.properties
+++ b/dcaedt_be/src/main/webapp/WEB-INF/config/dcae-be/application.properties
@@ -1,11 +1,5 @@
# Configure the server to run with SSL/TLS and using HTTPS
server.port=8446
-server.ssl.key-store=classpath:org.onap.sdc.p12
-server.ssl.key-store-password=rTIS;B4kM]2GHcNK2c3B4&Ng
-
-http.client.ssl.trust-store=classpath:org.onap.sdc.trust.jks
-http.client.ssl.trust-store-password=Y,f975ZNJfVZhV*{+Y[}pA?0
-
server.contextPath=/
##ScheduleTimer
scheduled.timer.value=5000
diff --git a/docker/docker_be/chef-solo/cookbooks/Deploy-DCAE/attributes/default.rb b/docker/docker_be/chef-solo/cookbooks/Deploy-DCAE/attributes/default.rb
index 19d401e..921fde1 100644
--- a/docker/docker_be/chef-solo/cookbooks/Deploy-DCAE/attributes/default.rb
+++ b/docker/docker_be/chef-solo/cookbooks/Deploy-DCAE/attributes/default.rb
@@ -13,9 +13,9 @@ default['SDC']['BE']['http_port'] = 8080
default['SDC']['BE']['https_port'] = 8443
default['DCAE']['TOSCA_LAB']['https_port'] = 8085
-default['jetty']['keystore_pwd'] = "OBF:1cp61iuj194s194u194w194y1is31cok"
-default['jetty']['keymanager_pwd'] = "OBF:1cp61iuj194s194u194w194y1is31cok"
-default['jetty']['truststore_pwd'] = "OBF:1cp61iuj194s194u194w194y1is31cok"
+default['jetty']['keystore_pwd'] = "rTIS;B4kM]2GHcNK2c3B4&Ng"
+default['jetty']['keymanager_pwd'] = "rTIS;B4kM]2GHcNK2c3B4&Ng"
+default['jetty']['truststore_pwd'] = "Y,f975ZNJfVZhV*{+Y[}pA?0"
default['disableHttp'] = true
diff --git a/docker/docker_be/chef-solo/cookbooks/Deploy-DCAE/files/default/keystore b/docker/docker_be/chef-solo/cookbooks/Deploy-DCAE/files/default/keystore
deleted file mode 100644
index c408393..0000000
--- a/docker/docker_be/chef-solo/cookbooks/Deploy-DCAE/files/default/keystore
+++ /dev/null
Binary files differ
diff --git a/dcaedt_be/src/main/resources/org.onap.sdc.p12 b/docker/docker_be/chef-solo/cookbooks/Deploy-DCAE/files/default/org.onap.sdc.p12
index ee000dc..ee000dc 100644
--- a/dcaedt_be/src/main/resources/org.onap.sdc.p12
+++ b/docker/docker_be/chef-solo/cookbooks/Deploy-DCAE/files/default/org.onap.sdc.p12
Binary files differ
diff --git a/dcaedt_be/src/main/resources/org.onap.sdc.trust.jks b/docker/docker_be/chef-solo/cookbooks/Deploy-DCAE/files/default/org.onap.sdc.trust.jks
index 342c4f2..342c4f2 100644
--- a/dcaedt_be/src/main/resources/org.onap.sdc.trust.jks
+++ b/docker/docker_be/chef-solo/cookbooks/Deploy-DCAE/files/default/org.onap.sdc.trust.jks
Binary files differ
diff --git a/docker/docker_be/chef-solo/cookbooks/Deploy-DCAE/files/default/truststore b/docker/docker_be/chef-solo/cookbooks/Deploy-DCAE/files/default/truststore
deleted file mode 100644
index c408393..0000000
--- a/docker/docker_be/chef-solo/cookbooks/Deploy-DCAE/files/default/truststore
+++ /dev/null
Binary files differ
diff --git a/docker/docker_be/chef-solo/cookbooks/Deploy-DCAE/recipes/jetty_setup.rb b/docker/docker_be/chef-solo/cookbooks/Deploy-DCAE/recipes/jetty_setup.rb
index 5071b47..43919ed 100644
--- a/docker/docker_be/chef-solo/cookbooks/Deploy-DCAE/recipes/jetty_setup.rb
+++ b/docker/docker_be/chef-solo/cookbooks/Deploy-DCAE/recipes/jetty_setup.rb
@@ -22,16 +22,16 @@ end
# Create Keystore
-cookbook_file "/#{jetty_base}/etc/keystore" do
- source "keystore"
+cookbook_file "/#{jetty_base}/etc/org.onap.sdc.p12" do
+ source "org.onap.sdc.p12"
owner "jetty"
group "jetty"
mode 0755
end
# Create Truststore
-cookbook_file "/#{jetty_base}/etc/truststore" do
- source "truststore"
+cookbook_file "/#{jetty_base}/etc/org.onap.sdc.trust.jks" do
+ source "org.onap.sdc.trust.jks"
owner "jetty"
group "jetty"
mode 0755
diff --git a/docker/docker_be/chef-solo/cookbooks/Deploy-DCAE/templates/default/ssl-ini.erb b/docker/docker_be/chef-solo/cookbooks/Deploy-DCAE/templates/default/ssl-ini.erb
index 9abac51..278fdea 100644
--- a/docker/docker_be/chef-solo/cookbooks/Deploy-DCAE/templates/default/ssl-ini.erb
+++ b/docker/docker_be/chef-solo/cookbooks/Deploy-DCAE/templates/default/ssl-ini.erb
@@ -42,10 +42,10 @@ jetty.ssl.port=<%= @https_port %>
## See http://www.eclipse.org/jetty/documentation/current/configuring-security-secure-passwords.html
## Keystore file path (relative to $jetty.base)
-#jetty.sslContext.keyStorePath=etc/keystore
+jetty.sslContext.keyStorePath=etc/org.onap.sdc.p12
## Truststore file path (relative to $jetty.base)
-#jetty.sslContext.trustStorePath=etc/truststore
+jetty.sslContext.trustStorePath=etc/org.onap.sdc.trust.jks
## Keystore password
# jetty.sslContext.keyStorePassword=OBF:1vny1zlo1x8e1vnw1vn61x8g1zlu1vn4