Uploaded image for project: 'Data Movement as a Platform'
  1. Data Movement as a Platform
  2. DMAAP-1142

[BC] dbc-client doesn't support cert based authorization

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Medium Medium
    • Dublin Release
    • Dublin Release
    • None
    • DMAAP-Dub-08-(03/22-04/04)

      It would be better to connect with certificates but the certificates are not present in the new dbc-client …

      Bus controller do not support certificates now, but when we will implement cadi then it will.

      However curl can not use jks or p12 files. Curl accept pem files. So the pem files need to be extracted from p12 file with openssl. Openssl is not present in the dbc-client now…

      Example:

      openssl pkcs12 -in /opt/app/osaaf/local/org.onap.dmaap-bc.p12 -out ca.pem -cacerts -nokeys

      openssl pkcs12 -in /opt/app/osaaf/local/org.onap.dmaap-bc.p12 -out client.pem -clcerts -nokeys

      openssl pkcs12 -in /opt/app/osaaf/local/org.onap.dmaap-bc.p12 -out key.pem -nocerts

       

      then

      curl --key key.pem --cacert ca.pem --cert client.pem -v -X GET -H "Content-Type: application/json" http://dmaap-bc:8080/webapi/dmaap

            dglfromatt dglfromatt
            dglfromatt dglfromatt
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated:
              Resolved: