add aaf root ca certificates for osdf 49/70849/2
authorVarma, Vikas <vv8305@att.com>
Fri, 19 Oct 2018 21:53:45 +0000 (17:53 -0400)
committerVarma, Vikas <vv8305@att.com>
Mon, 22 Oct 2018 14:44:38 +0000 (10:44 -0400)
Make the certificate updates during runtime.
change tab to spaces.

Change-Id: I51eb726a49d69c429d83c02e8287430a54062af4
Signed-off-by: Varma, Vikas <vv8305@att.com>
Issue-ID: OPTFRA-379

osdfapp.sh

index 0e1846a..25e3c05 100755 (executable)
@@ -28,4 +28,17 @@ mkdir -p $LOGS
 export OSDF_CONFIG_FILE=${1:-/opt/app/config/osdf_config.yaml}  # this file may be passed by invoker
 [ ! -e "$OSDF_CONFIG_FILE" ] && unset OSDF_CONFIG_FILE
 
+if [ -e /opt/app/ssl_cert/aaf_root_ca.cer ]; then
+    #assuming that this would be an ubuntu vm.
+    cp /opt/app/ssl_cert/aaf_root_ca.cer /usr/local/share/ca-certificates/aafcacert.crt
+    chmod 444 /usr/local/share/ca-certificates/aafcacert.crt
+    update-ca-certificates
+fi
+
+if [ -e /etc/ssl/certs/aafcacert.pem ]; then
+    export REQUESTS_CA_BUNDLE=/etc/ssl/certs/ca-certificates.crt
+else
+    export REQUESTS_CA_BUNDLE=/opt/app/ssl_cert/aaf_root_ca.cer
+fi
+
 python osdfapp.py 2>$LOGS/err.log 1>$LOGS/out.log < /dev/null  # running the app