Uploaded image for project: 'Service Orchestrator'
  1. Service Orchestrator
  2. SO-2730

healthdist fails due to ceritificate validation error to AAI - certs not installed in SO

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Highest Highest
    • Frankfurt Release
    • Frankfurt Release
    • azure

      Latest SO containers are set to run as non-root user but the start-app.sh script assumes it is run as root to install the ssl certificates needed to validate https connections to other components.

       

      healthdist fails on SO update to AAI. This worked before the change to run as non-root.

       

      {'errorReason': 'Error calling A&AI javax.ws.rs.ProcessingException: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target',
      'omfComponentID': 'SO-COpenSource-Env11',

       

      this blocks model distribution and also create VNF, create vfmodule etc.

       

      The docker-file and start-app.sh need to be re-factored to account for running as non-root

            bdfreeman1421 bdfreeman1421
            bdfreeman1421 bdfreeman1421
            Votes:
            0 Vote for this issue
            Watchers:
            6 Start watching this issue

              Created:
              Updated:
              Resolved: