By type
Caller Properties Initialized
cat SSO
cadi_keyfile=/root/.aaf/keyfile
aaf_id=deployer@people.osaaf.org
aaf_password=enc:HyDiR1eOVsl-ckR6KHmHSMifMkLUmCxkkrfCR3MJV0W
aaf_locate_url=https://-locator.:8095
aaf_url_cm=https://AAF_LOCATE_URL/%CNS.%NS.cm:2.1
aaf_url=https://AAF_LOCATE_URL/%CNS.%NS.service:2.1
cadi_truststore=/root/.aaf/truststoreONAPall.jks
cadi_truststore_password=changeit
cadi_latitude=
cadi_longitude=
hostname=aai
aaf_locator_fqdn=aai
aaf_locator_container=oom
aaf_locator_container_ns=onap
aaf_locate_url=https://aaf-locate.onap:8095
aaf_locator_app_ns=org.osaaf.aaf
cadi_longitude=0.0
cadi_latitude=0.0
aaf_locator_public_fqdn=aai.onap.org
/opt/app/osaaf/local exists
Existing files in /opt/app/osaaf/local
total 3208
-rw-r--r-- 1 root root 16 Mar 16 23:56 VERSION
-rw-r--r-- 1 root root 3058405 Mar 16 23:56 aaf-cadi-aaf-2.1.20-full.jar
-rwxr-xr-x 1 root root 49 Mar 16 23:56 agent
-rwxr-xr-x 1 root root 54 Mar 16 23:56 cadi
-rw-r--r-- 1 root root 0 Mar 16 23:56 org.onap.aai
-rw-r--r-- 1 root root 418 Mar 16 23:56 org.onap.aai.cred.props
-rw-r--r-- 1 root root 1134 Mar 16 23:56 org.onap.aai.cred.props.426842809538810007.backup
-rw-r--r-- 1 root root 543 Mar 16 23:55 org.onap.aai.cred.props.9543907217450850255.backup
-rw-r--r-- 1 root root 1993 Mar 16 23:56 org.onap.aai.crt
-rw-r--r-- 1 root root 3947 Mar 16 23:56 org.onap.aai.jks
-r-------- 1 root root 1705 Mar 16 23:56 org.onap.aai.key
-r-------- 1 root root 2074 Mar 16 23:55 org.onap.aai.keyfile
-rw-r--r-- 1 root root 282 Mar 16 23:56 org.onap.aai.location.props
-rw-r--r-- 1 root root 282 Mar 16 23:55 org.onap.aai.location.props.8192076661189399508.backup
-rw-r--r-- 1 root root 4451 Mar 16 23:56 org.onap.aai.p12
-rw-r--r-- 1 root root 1133 Mar 16 23:56 org.onap.aai.props
-rw-r--r-- 1 root root 1133 Mar 16 23:55 org.onap.aai.props.13494494309914681888.backup
-rw-r--r-- 1 root root 1413 Mar 16 23:56 org.onap.aai.trust.jks
-rw-r--r-- 1 root root 1413 Mar 16 23:56 org.onap.aai.trust.jks.12540328521885283976.backup
-rw-r--r-- 1 root root 147551 Mar 16 23:55 truststoreONAPall.jks
Namespace is org.onap.aai
#### Create Configuration files
2022-03-16T23:56:42.155+0000 INIT [cadi] cadi_keyfile points to /opt/app/osaaf/local/org.onap.aai.keyfile
2022-03-16T23:56:42.173+0000 INIT [cadi] https.protocols set by cadi_protocols in CADI Properties
2022-03-16T23:56:42.173+0000 INIT [cadi] jdk.tls.client.protocols set from Default Protocols
Writing to /opt/app/osaaf/local
2022-03-16T23:56:42.462+0000 INIT [cadi] RegistrationProperty: default_container='oom'
2022-03-16T23:56:42.463+0000 INIT [cadi] RegistrationProperty: public_port='null'
2022-03-16T23:56:42.469+0000 INIT [cadi] RegistrationProperty: hostname='aai-graphadmin'
2022-03-16T23:56:42.469+0000 INIT [cadi] RegistrationProperty: public_fqdn='aai.onap.org'
2022-03-16T23:56:42.469+0000 INIT [cadi] RegistrationProperty: default_name='%NS.%N'
2022-03-16T23:56:42.469+0000 INIT [cadi] RegistrationProperty: latitude='0.0'
2022-03-16T23:56:42.470+0000 INIT [cadi] RegistrationProperty: longitude='0.0'
2022-03-16T23:56:42.470+0000 INIT [cadi] RegistrationProperty: public_hostname(overloaded by )='aai.onap.org'
2022-03-16T23:56:42.470+0000 INIT [cadi] RegistrationProperty: default_fqdn='aai'
2022-03-16T23:56:42.470+0000 INIT [cadi] RegistrationProperty: default_container_ns='onap'
2022-03-16T23:56:42.471+0000 DEBUG [cadi] RegistrationReplacement from Agent:loadURLs, source: https://aaf-locate.onap:8095, dot_le: .oom, value: https://aaf-locate.onap:8095
2022-03-16T23:56:42.471+0000 DEBUG [cadi] RegistrationReplacement from Agent:loadURLs, source: https://AAF_LOCATE_URL/%CNS.%AAF_NS.service:2.1, dot_le: .oom, value: https://aaf-locate.onap:8095/locate/onap.org.osaaf.aaf.service:2.1
2022-03-16T23:56:42.471+0000 DEBUG [cadi] RegistrationReplacement from Agent:loadURLs, source: https://AAF_LOCATE_URL/%CNS.%AAF_NS.oauth:2.1, dot_le: .oom, value: https://aaf-locate.onap:8095/locate/onap.org.osaaf.aaf.oauth:2.1
2022-03-16T23:56:42.471+0000 DEBUG [cadi] RegistrationReplacement from Agent:loadURLs, source: https://AAF_LOCATE_URL/%CNS.%AAF_NS.cm:2.1, dot_le: .oom, value: https://aaf-locate.onap:8095/locate/onap.org.osaaf.aaf.cm:2.1
2022-03-16T23:56:42.472+0000 DEBUG [cadi] RegistrationReplacement from Agent:loadURLs, source: https://AAF_LOCATE_URL/%CNS.%AAF_NS.gui:2.1, dot_le: .oom, value: https://aaf-locate.onap:8095/locate/onap.org.osaaf.aaf.gui:2.1
2022-03-16T23:56:42.472+0000 DEBUG [cadi] RegistrationReplacement from Agent:loadURLs, source: https://AAF_LOCATE_URL/%CNS.%AAF_NS.fs:2.1, dot_le: .oom, value: https://aaf-locate.onap:8095/locate/onap.org.osaaf.aaf.fs:2.1
2022-03-16T23:56:42.472+0000 DEBUG [cadi] RegistrationReplacement from Agent:loadURLs, source: https://aaf-locate.onap:8095/locate/onap.org.osaaf.aaf.hello:2.1, dot_le: .oom, value: https://aaf-locate.onap:8095/locate/onap.org.osaaf.aaf.hello:2.1
2022-03-16T23:56:42.472+0000 DEBUG [cadi] RegistrationReplacement from Agent:loadURLs, source: https://AAF_LOCATE_URL/%CNS.%AAF_NS.token:2.1/token, dot_le: .oom, value: https://aaf-locate.onap:8095/locate/onap.org.osaaf.aaf.token:2.1/token
2022-03-16T23:56:42.473+0000 DEBUG [cadi] RegistrationReplacement from Agent:loadURLs, source: https://AAF_LOCATE_URL/%CNS.%AAF_NS.introspect:2.1/introspect, dot_le: .oom, value: https://aaf-locate.onap:8095/locate/onap.org.osaaf.aaf.introspect:2.1/introspect
Passed in Truststore is /opt/app/osaaf/local/org.onap.aai.trust.jks
New Truststore is /opt/app/osaaf/local/org.onap.aai.trust.jks
Reading /opt/app/osaaf/local/./org.onap.aai.props
Backing up /opt/app/osaaf/local/org.onap.aai.props
Backing up /opt/app/osaaf/local/org.onap.aai.location.props
Backing up /opt/app/osaaf/local/org.onap.aai.cred.props
2022-03-16T23:56:42.537+0000: Trans Info
REMOTE Get Configuration 74.67319ms
############################################################
# Properties Generated by AT&T Certificate Manager
# by root
# on 2022-03-16T23:56:42.531+0000
# @copyright 2019, AT&T
############################################################
aaf_env=DEV
aaf_id=aai@aai.onap.org
aaf_locate_url=https://aaf-locate.onap:8095
aaf_locator_app_ns=org.osaaf.aaf
aaf_locator_container=oom
aaf_locator_container_ns=onap
aaf_locator_fqdn=aai
aaf_locator_public_fqdn=aai.onap.org
aaf_oauth2_introspect_url=https://AAF_LOCATE_URL/%CNS.%AAF_NS.introspect:2.1/introspect
aaf_oauth2_token_url=https://AAF_LOCATE_URL/%CNS.%AAF_NS.token:2.1/token
aaf_url=https://AAF_LOCATE_URL/%CNS.%AAF_NS.service:2.1
aaf_url_cm=https://AAF_LOCATE_URL/%CNS.%AAF_NS.cm:2.1
aaf_url_fs=https://AAF_LOCATE_URL/%CNS.%AAF_NS.fs:2.1
aaf_url_gui=https://AAF_LOCATE_URL/%CNS.%AAF_NS.gui:2.1
aaf_url_hello=https://aaf-locate.onap:8095/locate/onap.org.osaaf.aaf.hello:2.1
aaf_url_oauth=https://AAF_LOCATE_URL/%CNS.%AAF_NS.oauth:2.1
cadi_prop_files=/opt/app/osaaf/local/org.onap.aai.location.props:/opt/app/osaaf/local/org.onap.aai.cred.props
cadi_protocols=TLSv1.1,TLSv1.2
#### Certificate Authorization Artifact
2022-03-16T23:56:42.768+0000 INIT [cadi] cadi_keyfile points to /opt/app/osaaf/local/org.onap.aai.keyfile
2022-03-16T23:56:42.787+0000 INIT [cadi] https.protocols set by cadi_protocols in CADI Properties
2022-03-16T23:56:42.787+0000 INIT [cadi] jdk.tls.client.protocols set from Default Protocols
AppID: aai@aai.onap.org
Sponsor: mmanager@osaaf.org
Machine: aai
CA: local
Types: file,jks,pkcs12
Namespace: org.onap.aai
Directory: /opt/app/osaaf/local
O/S User: root
Renew Days: 60
Notification mailto:
2022-03-16T23:56:44.512+0000: Trans Info
Read Artifact 1057.042ms
#### Place Certificates (by deployer)
2022-03-16T23:56:44.754+0000 INIT [cadi] cadi_keyfile points to /opt/app/osaaf/local/org.onap.aai.keyfile
2022-03-16T23:56:44.774+0000 INIT [cadi] https.protocols set by cadi_protocols in CADI Properties
2022-03-16T23:56:44.774+0000 INIT [cadi] jdk.tls.client.protocols set from Default Protocols
Writing to /opt/app/osaaf/local
Writing file /opt/app/osaaf/local/org.onap.aai.crt
Writing file /opt/app/osaaf/local/org.onap.aai.key
Writing file /opt/app/osaaf/local/org.onap.aai.jks
Writing file /opt/app/osaaf/local/org.onap.aai.trust.jks
Writing file /opt/app/osaaf/local/org.onap.aai.p12
Writing file /opt/app/osaaf/local/org.onap.aai.trust.jks
Backing up /opt/app/osaaf/local/org.onap.aai.cred.props
2022-03-16T23:56:54.816+0000: Trans Info
REMOTE Place Artifact 9326.413ms
Reconstitute Private Key 0.198224ms
Reconstitute Private Key 0.038419ms
Obtained Certificates
#### Validate Configuration and Certificate with live call
2022-03-16T23:56:55.061+0000 INIT [cadi] cadi_keyfile points to /opt/app/osaaf/local/org.onap.aai.keyfile
2022-03-16T23:56:55.081+0000 INIT [cadi] https.protocols set by cadi_protocols in CADI Properties
2022-03-16T23:56:55.081+0000 INIT [cadi] jdk.tls.client.protocols set from Default Protocols
Validating Configuration...
2022-03-16T23:56:55.745+0000 INIT [cadi] X509 Chain
0)
Subject: C=US, O=ONAP, OU=OSAAF, OU=aai@aai.onap.org:DEV, CN=aai
Issuer : CN=intermediateCA_9, OU=OSAAF, O=ONAP, C=US
Expires: Thu Mar 16 23:56:53 GMT 2023
1)
Subject: CN=intermediateCA_9, OU=OSAAF, O=ONAP, C=US
Issuer : C=US, O=ONAP, OU=OSAAF
Expires: Thu Aug 17 18:51:37 GMT 2023
2022-03-16T23:56:55.748+0000 INIT [cadi] https.protocols loaded from System Properties
2022-03-16T23:56:55.749+0000 INIT [cadi] jdk.tls.client.protocols loaded from System Properties
2022-03-16T23:56:55.791+0000 INIT [cadi] RegistrationProperty: default_container='oom'
2022-03-16T23:56:55.792+0000 INIT [cadi] RegistrationProperty: public_port='null'
2022-03-16T23:56:55.797+0000 INIT [cadi] RegistrationProperty: hostname='aai-graphadmin'
2022-03-16T23:56:55.797+0000 INIT [cadi] RegistrationProperty: public_fqdn='aai.onap.org'
2022-03-16T23:56:55.798+0000 INIT [cadi] RegistrationProperty: default_name='%NS.%N'
2022-03-16T23:56:55.798+0000 INIT [cadi] RegistrationProperty: latitude='0.0'
2022-03-16T23:56:55.798+0000 INIT [cadi] RegistrationProperty: longitude='0.0'
2022-03-16T23:56:55.798+0000 INIT [cadi] RegistrationProperty: public_hostname(overloaded by )='aai.onap.org'
2022-03-16T23:56:55.798+0000 INIT [cadi] RegistrationProperty: default_fqdn='aai'
2022-03-16T23:56:55.799+0000 INIT [cadi] RegistrationProperty: default_container_ns='onap'
2022-03-16T23:56:55.799+0000 DEBUG [cadi] RegistrationReplacement from AAFCon, source: https://AAF_LOCATE_URL/%CNS.%AAF_NS.service:2.1, dot_le: .oom, value: https://aaf-locate.onap:8095/locate/onap.org.osaaf.aaf.service:2.1
2022-03-16T23:56:55.799+0000 INFO [cadi] AAFCon has URL of https://aaf-locate.onap:8095/locate/onap.org.osaaf.aaf.service:2.1
2022-03-16T23:56:55.871+0000 DEBUG [cadi] Configured AbsAAFLocator not found"LocatorCreator is not set"Continuing Locator creation
2022-03-16T23:56:55.872+0000 DEBUG [cadi] RegistrationReplacement from Config.loadLocator, source: https://AAF_LOCATE_URL/%CNS.%AAF_NS.service:2.1, dot_le: .oom, value: https://aaf-locate.onap:8095/locate/onap.org.osaaf.aaf.service:2.1
2022-03-16T23:56:55.872+0000 INFO [cadi] loadLocator URL is https://aaf-locate.onap:8095/locate/onap.org.osaaf.aaf.service:2.1
2022-03-16T23:56:55.874+0000 DEBUG [cadi] RegistrationReplacement from AAFLocator, source: https://AAF_LOCATE_URL, dot_le: .oom, value: https://aaf-locate.onap:8095
2022-03-16T23:56:55.874+0000 INFO [cadi] AbsAAFLocator AAF URI is https://aaf-locate.onap:8095/locate
2022-03-16T23:56:55.874+0000 DEBUG [cadi] RegistrationReplacement from AAFLocator, source: onap.org.osaaf.aaf.service:2.1, dot_le: .oom, value: onap.org.osaaf.aaf.service:2.1
2022-03-16T23:56:55.874+0000 INFO [cadi] AbsAAFLocator name is https://aaf-locate.onap:8095/locate
2022-03-16T23:56:55.886+0000 DEBUG [cadi] Root URI: https://aaf-locate.onap:8095/locate/onap.org.osaaf.aaf.service:2.1
2022-03-16T23:56:55.894+0000 INFO [cadi] AAFLocator enabled using https://aaf-locate.onap:8095
Success connecting to https://aaf-service.onap:8100
Permissions for aai@aai.onap.org
org.onap.aai.access|*|*
org.onap.aai.resources|*|delete
org.onap.aai.resources|*|get
org.onap.aai.resources|*|patch
org.onap.aai.resources|*|post
org.onap.aai.resources|*|put
org.onap.aai.traversal|*|advanced
Initialization complete
*** retrieving passwords for certificates
*** password retrieval succeeded
*** changing them into shell safe ones
Warning:
The JKS keystore uses a proprietary format. It is recommended to migrate to PKCS12 which is an industry standard format using "keytool -importkeystore -srckeystore org.onap.aai.jks -destkeystore org.onap.aai.jks -deststoretype pkcs12".
*** set key password as same password as keystore password
Warning:
The JKS keystore uses a proprietary format. It is recommended to migrate to PKCS12 which is an industry standard format using "keytool -importkeystore -srckeystore org.onap.aai.jks -destkeystore org.onap.aai.jks -deststoretype pkcs12".
*** writing passwords into prop file
*** change ownership of certificates to targeted user