Skip to content
This repository has been archived by the owner on Jul 28, 2023. It is now read-only.

TLS Support #178

Merged
merged 4 commits into from
Apr 28, 2020
Merged

TLS Support #178

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
2e99ebb
TLS key store
davco01a Apr 28, 2020
f44b5b7
fix password
davco01a Apr 28, 2020
d4b6e31
SEC_TLS_TRUSTDEFAULTCERTS=true
davco01a Apr 28, 2020
ae86948
env var
davco01a Apr 28, 2020
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,8 @@ LABEL vendor="Kabanero" \
summary="Image for Kabanero CLI Service" \
description="This image contains the service for the Kabanero CLI. See https://github.com/kabanero-io/kabanero-command-line-services/"


ENV SEC_TLS_TRUSTDEFAULTCERTS=true
# The licence must be here for Redhat container certification
COPY LICENSE /licenses/

Expand Down
2 changes: 1 addition & 1 deletion src/main/liberty/config/keystore.xml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1 +1 @@
<server description="Default Server"><keyStore id="defaultKeyStore" password="keyspass" /></server>
<server description="Default Server"><keyStore id="defaultKeyStore" password="changeit" /></server>
9 changes: 5 additions & 4 deletions src/main/liberty/config/server.xml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -39,10 +39,11 @@



<sslDefault sslRef="kabSSLConfig"/>
<ssl id="kabSSLConfig" keyStoreRef="defaultKeyStore" trustStoreRef="validationKeystore"/>
<keyStore id="defaultKeyStore" />
<keyStore id="validationKeystore" location="${server.config.dir}/resources/security/cacerts" type="jks" />
<keyStore id="defaultKeyStore"
password="changeit"
location="/etc/tls/secrets/java.io/kabanero.cli/keystores/keystore.p12"
type="PKCS12"/>
<ssl id="defaultSSLConfig" keyStoreRef="defaultKeyStore" trustDefaultCerts="true" sslProtocol="TLSv1.2"/>

<!-- this will be the issuer of the jwts -->
<variable name="jwt.issuer" defaultValue="https://kabasec.com" />
Expand Down