egeria icon indicating copy to clipboard operation
egeria copied to clipboard

[BUG] Update certs for ui chassis

Open davidradl opened this issue 2 years ago • 6 comments

Is there an existing issue for this?

  • [X] I have searched the existing issues

Current Behavior

I notice on the latest code we have different p12 files for the ui chassis and the server chassis. I assume that the server chassis is correct and the ui chassis is expired.

   davidradley@admins-MBP egeria % ls -l open-metadata-implementation/user-interfaces/ui-chassis/ui-chassis-spring/src/main/resources/keystore.p12
-rw-r--r--  1 davidradley  staff  6084 25 Mar 13:45 open-metadata-implementation/user-interfaces/ui-chassis/ui-chassis-spring/src/main/resources/keystore.p12

Expected Behavior

use the same p12 file for the ui chassis and the server chassis. This will be the same one as the react ui will use.

Steps To Reproduce

as above

Environment

- Egeria:
- OS:
- Java:
- Browser (for UI issues):
- Additional connectors and integration:

Any Further Information?

maybe there is a reason for these to be different - in which case which should the react UI use?

davidradl avatar Mar 28 '22 09:03 davidradl

@planetf1 I assume we would want this fixed in 3.7- if there is something to fix?

davidradl avatar Mar 28 '22 09:03 davidradl

It looks like you generated these as different files for the ui and server chassis - but I cannot see mention of the ones to use for the ui chassis in https://egeria-project.org/guides/admin/omag-server-platform-transport-level-security/?h=certificates#certificates-for-the-omag-server-platform

davidradl avatar Mar 28 '22 09:03 davidradl

The egeria-ui was already making use of certs - so the only change made when I added the ssl docs & cert scripts was to ensure the files were copied to the existing locations. this is done in https://github.com/odpi/egeria/blob/master/open-metadata-resources/open-metadata-deployment/certificates/gensamplecerts.sh

However no changes beyond that were done, nor any testing of the egeria-ui.

I agree, whatever approach is taken needs also to be documented, but this info needs to come from the UI team initially.

Can you cover this for now @lpalashevski ?

planetf1 avatar Mar 29 '22 17:03 planetf1

The egeria-ui was already making use of certs - so the only change made when I added the ssl docs & cert scripts was to ensure the files were copied to the existing locations. this is done in https://github.com/odpi/egeria/blob/master/open-metadata-resources/open-metadata-deployment/certificates/gensamplecerts.sh

However no changes beyond that were done, nor any testing of the egeria-ui.

I agree, whatever approach is taken needs also to be documented, but this info needs to come from the UI team initially.

Can you cover this for now @lpalashevski ?

Yes, I will do that. Lets keep this open until I come back with more details.

lpalashevski avatar Mar 30 '22 09:03 lpalashevski

This issue has been automatically marked as stale because it has not had recent activity. It will be closed in 20 days if no further activity occurs. Thank you for your contributions.

github-actions[bot] avatar May 30 '22 00:05 github-actions[bot]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed in 20 days if no further activity occurs. Thank you for your contributions.

github-actions[bot] avatar Aug 02 '22 00:08 github-actions[bot]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed in 20 days if no further activity occurs. Thank you for your contributions.

github-actions[bot] avatar Oct 02 '22 00:10 github-actions[bot]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed in 20 days if no further activity occurs. Thank you for your contributions.

github-actions[bot] avatar Jan 16 '23 00:01 github-actions[bot]

this has been done, albeit in a hardcoded way in the charts - other issues capture changes needed to cert handling generally

planetf1 avatar Mar 23 '23 09:03 planetf1