Make client cert authentication optional in policy-gui

Set client auth to optional as Apex Editor does not need certs.

Issue-ID: POLICY-3980
Signed-off-by: danielhanrahan <daniel.hanrahan@est.tech>
Change-Id: Iad03f80f5fb79e6f48a21699c45e9fbf7c746106

diff --git a/gui-server/extra/bin-for-dev/start-gui-server-docker.sh b/gui-server/extra/bin-for-dev/start-gui-server-docker.sh
index 78748cd..1fe45f2 100755 (executable)
--- a/gui-server/extra/bin-for-dev/start-gui-server-docker.sh
+++ b/gui-server/extra/bin-for-dev/start-gui-server-docker.sh
@@ -29,7 +29,6 @@ docker run \
   --add-host policy-clamp-be:host-gateway \
   --env "CLAMP_URL=https://policy-clamp-be:8443" \
   --env "CLAMP_DISABLE_SSL_VALIDATION=true" \
-  --env "SERVER_SSL_CLIENT_AUTH=want" \
   --env "KEYSTORE_PASSWD=changeit" \
   --env "TRUSTSTORE_PASSWD=changeit" \
   --volume "$KEYSTORE_PATH:/opt/app/policy/gui/etc/mounted/policy-keystore" \

diff --git a/packages/policy-gui-docker/src/main/docker/config/application.yml b/packages/policy-gui-docker/src/main/docker/config/application.yml
index 7b20d02..17729f7 100644 (file)
--- a/packages/policy-gui-docker/src/main/docker/config/application.yml
+++ b/packages/policy-gui-docker/src/main/docker/config/application.yml
@@ -2,7 +2,7 @@ server:
   port: 2443
   ssl:
     enabled: true
-    client-auth: need
+    client-auth: want
     key-store: file:${KEYSTORE}
     key-store-password: ${KEYSTORE_PASSWD}
     trust-store: file:${TRUSTSTORE}