From: Marco Platania Date: Mon, 20 Jan 2020 15:13:05 +0000 (-0500) Subject: Add fd.io cert manually to demo VNFs X-Git-Tag: 1.6.0~50 X-Git-Url: https://gerrit.onap.org/r/gitweb?p=demo.git;a=commitdiff_plain;h=0e9bf965dd84e82625fd7e4c7d523200e2784ae9 Add fd.io cert manually to demo VNFs Issue-ID: INT-1415 Signed-off-by: Marco Platania Change-Id: Icd03fa50868fe6f8ab64e6b6a0b3baff1f1f574b --- diff --git a/vnfs/vFW/scripts/v_firewall_install.sh b/vnfs/vFW/scripts/v_firewall_install.sh index d9767142..95604386 100755 --- a/vnfs/vFW/scripts/v_firewall_install.sh +++ b/vnfs/vFW/scripts/v_firewall_install.sh @@ -64,6 +64,12 @@ apt-get update apt-get install --allow-unauthenticated -y make wget openjdk-8-jdk gcc libcurl4-openssl-dev python-pip bridge-utils apt-transport-https ca-certificates pip install jsonschema +# Install fd.io certificate +HOST=nexus.fd.io +PORT=443 +TRUST_CERT_FILE="/etc/ssl/certs/ca-certificates.crt" +bash -c "echo -n | openssl s_client -showcerts -connect $HOST:$PORT 2>/dev/null | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' >> $TRUST_CERT_FILE" + # Download artifacts for virtual firewall mkdir /opt/honeycomb cd /opt diff --git a/vnfs/vFW/scripts/v_firewall_install_arm64.sh b/vnfs/vFW/scripts/v_firewall_install_arm64.sh index c97fa91f..e3c0d377 100755 --- a/vnfs/vFW/scripts/v_firewall_install_arm64.sh +++ b/vnfs/vFW/scripts/v_firewall_install_arm64.sh @@ -65,6 +65,12 @@ apt-get update apt-get install --allow-unauthenticated -y make wget openjdk-8-jdk gcc libcurl4-openssl-dev python-pip bridge-utils apt-transport-https ca-certificates pip install jsonschema +# Install fd.io certificate +HOST=nexus.fd.io +PORT=443 +TRUST_CERT_FILE="/etc/ssl/certs/ca-certificates.crt" +bash -c "echo -n | openssl s_client -showcerts -connect $HOST:$PORT 2>/dev/null | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' >> $TRUST_CERT_FILE" + # Download artifacts for virtual firewall mkdir /opt/honeycomb cd /opt diff --git a/vnfs/vFW/scripts/v_packetgen_install.sh b/vnfs/vFW/scripts/v_packetgen_install.sh index 15732a1a..b8727711 100755 --- a/vnfs/vFW/scripts/v_packetgen_install.sh +++ b/vnfs/vFW/scripts/v_packetgen_install.sh @@ -54,6 +54,12 @@ apt-get update apt-get install --allow-unauthenticated -y make wget openjdk-8-jdk gcc libcurl4-openssl-dev python-pip bridge-utils apt-transport-https ca-certificates pip install jsonschema +# Install fd.io certificate +HOST=nexus.fd.io +PORT=443 +TRUST_CERT_FILE="/etc/ssl/certs/ca-certificates.crt" +bash -c "echo -n | openssl s_client -showcerts -connect $HOST:$PORT 2>/dev/null | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' >> $TRUST_CERT_FILE" + # Download code for packet generator mkdir /opt/honeycomb cd /opt diff --git a/vnfs/vFW/scripts/v_packetgen_install_arm64.sh b/vnfs/vFW/scripts/v_packetgen_install_arm64.sh index 00e23f53..1c6e306a 100755 --- a/vnfs/vFW/scripts/v_packetgen_install_arm64.sh +++ b/vnfs/vFW/scripts/v_packetgen_install_arm64.sh @@ -55,6 +55,12 @@ apt-get update apt-get install --allow-unauthenticated -y make wget openjdk-8-jdk gcc libcurl4-openssl-dev python-pip bridge-utils apt-transport-https ca-certificates pip install jsonschema +# Install fd.io certificate +HOST=nexus.fd.io +PORT=443 +TRUST_CERT_FILE="/etc/ssl/certs/ca-certificates.crt" +bash -c "echo -n | openssl s_client -showcerts -connect $HOST:$PORT 2>/dev/null | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' >> $TRUST_CERT_FILE" + # Download code for packet generator mkdir /opt/honeycomb cd /opt diff --git a/vnfs/vLB/scripts/v_lb_install.sh b/vnfs/vLB/scripts/v_lb_install.sh index 9d2967c7..72bc4163 100644 --- a/vnfs/vLB/scripts/v_lb_install.sh +++ b/vnfs/vLB/scripts/v_lb_install.sh @@ -60,6 +60,12 @@ apt-get update apt-get install --allow-unauthenticated -y make gcc wget openjdk-8-jdk bridge-utils libcurl4-openssl-dev apt-transport-https ca-certificates sleep 1 +# Install fd.io certificate +HOST=nexus.fd.io +PORT=443 +TRUST_CERT_FILE="/etc/ssl/certs/ca-certificates.crt" +bash -c "echo -n | openssl s_client -showcerts -connect $HOST:$PORT 2>/dev/null | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' >> $TRUST_CERT_FILE" + # Download vLB demo code for load balancer mkdir /opt/FDserver cd /opt diff --git a/vnfs/vLB/scripts/v_packetgen_install.sh b/vnfs/vLB/scripts/v_packetgen_install.sh index d061f3eb..95e0dba2 100644 --- a/vnfs/vLB/scripts/v_packetgen_install.sh +++ b/vnfs/vLB/scripts/v_packetgen_install.sh @@ -51,6 +51,12 @@ apt-get update apt-get install --allow-unauthenticated -y make wget openjdk-8-jdk gcc libcurl4-openssl-dev python-pip bridge-utils apt-transport-https ca-certificates pip install jsonschema +# Install fd.io certificate +HOST=nexus.fd.io +PORT=443 +TRUST_CERT_FILE="/etc/ssl/certs/ca-certificates.crt" +bash -c "echo -n | openssl s_client -showcerts -connect $HOST:$PORT 2>/dev/null | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' >> $TRUST_CERT_FILE" + # Download vFirewall demo code for packet generator cd /opt unzip -p -j /opt/vlb-scripts-$INSTALL_SCRIPT_VERSION.zip v_packetgen_init.sh > /opt/v_packetgen_init.sh diff --git a/vnfs/vLBMS/scripts/v_lb_install.sh b/vnfs/vLBMS/scripts/v_lb_install.sh index 1e05f80b..2dbb73d3 100644 --- a/vnfs/vLBMS/scripts/v_lb_install.sh +++ b/vnfs/vLBMS/scripts/v_lb_install.sh @@ -60,6 +60,12 @@ apt-get update apt-get install --allow-unauthenticated -y make gcc wget openjdk-8-jdk bridge-utils libcurl4-openssl-dev apt-transport-https ca-certificates git maven sleep 1 +# Install fd.io certificate +HOST=nexus.fd.io +PORT=443 +TRUST_CERT_FILE="/etc/ssl/certs/ca-certificates.crt" +bash -c "echo -n | openssl s_client -showcerts -connect $HOST:$PORT 2>/dev/null | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' >> $TRUST_CERT_FILE" + # Download vLB demo code for load balancer cd /opt unzip -p -j /opt/vlbms-scripts-$INSTALL_SCRIPT_VERSION.zip v_lb_init.sh > /opt/v_lb_init.sh diff --git a/vnfs/vLBMS/scripts/v_packetgen_install.sh b/vnfs/vLBMS/scripts/v_packetgen_install.sh index 7b13532d..44bfb655 100644 --- a/vnfs/vLBMS/scripts/v_packetgen_install.sh +++ b/vnfs/vLBMS/scripts/v_packetgen_install.sh @@ -51,6 +51,12 @@ apt-get update apt-get install --allow-unauthenticated -y make wget openjdk-8-jdk gcc libcurl4-openssl-dev python-pip bridge-utils apt-transport-https ca-certificates git maven pip install jsonschema +# Install fd.io certificate +HOST=nexus.fd.io +PORT=443 +TRUST_CERT_FILE="/etc/ssl/certs/ca-certificates.crt" +bash -c "echo -n | openssl s_client -showcerts -connect $HOST:$PORT 2>/dev/null | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' >> $TRUST_CERT_FILE" + # Download vFirewall demo code for packet generator cd /opt unzip -p -j /opt/vlbms-scripts-$INSTALL_SCRIPT_VERSION.zip v_packetgen_init.sh > /opt/v_packetgen_init.sh