# Properties passed in
HOSTNAME=onap-aaf-service-65b576ff8b-hsx84
aaf_locator_container=oom
aaf_release=Frankfurt
aaf_locator_container_ns=onap
aaf_locator_name=%NS.%N
aaf_locate_url=https://aaf-locate.onap:8095
cadi_longitude=-72.0
cadi_latitude=38.0
aaf_locator_public_fqdn=aaf.osaaf.org
cadi_x509_issuers=CN=intermediateCA_1,
aaf_env=DEV
aaf_locator_name.oom=%CNS.%NS.%N
Set Identities
Clean up directory /opt/app/osaaf/local
ls: /opt/app/osaaf/local: No such file or directory
bin/agent.sh: line 90: /opt/app/osaaf/local/VERSION: No such file or directory
Decode
Setup ONAP Test CAs and Signers
Bootstrap Creation of Keystore from Signer
Bootstrap AAF Certificate
bootstrap.sh: line 89: [: aaf.osaaf.org: integer expression expected
Generating a RSA private key
.................+++++
.......................................................................................................+++++
writing new private key to '/tmp/aaf.bootstrap.key'
-----
Sign it
Using configuration from openssl.conf
Check that the request matches the signature
Signature ok
Certificate Details:
        Serial Number: 95924150790 (0x1655866206)
        Validity
            Not Before: Jun 22 02:50:09 2022 GMT
            Not After : Jun 22 02:50:09 2023 GMT
        Subject:
            countryName               = US
            organizationName          = ONAP
            organizationalUnitName    = aaf@aaf.osaaf.org
            organizationalUnitName    = OSAAF
            commonName                = aaf.osaaf.org
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            Netscape Cert Type: 
                SSL Client, SSL Server
            Netscape Comment: 
                OpenSSL Generated Server Certificate
            X509v3 Subject Key Identifier: 
                4E:17:63:20:E7:6D:15:1B:00:FF:9D:2C:C6:58:0C:F1:4D:E1:35:88
            X509v3 Authority Key Identifier: 
                keyid:81:F7:99:5B:10:B9:C8:8C:DE:F3:52:5E:EA:4E:69:A0:43:3E:AC:DD
                DirName:/OU=OSAAF/O=ONAP/C=US
                serial:07

            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Subject Alternative Name: 
                DNS:aaf.osaaf.org, DNS:aaf.osaaf.org, DNS:service.aaf.osaaf.org, DNS:locate.aaf.osaaf.org, DNS:oauth.aaf.osaaf.org, DNS:token.aaf.osaaf.org, DNS:introspect.aaf.osaaf.org, DNS:gui.aaf.osaaf.org, DNS:cm.aaf.osaaf.org, DNS:hello.aaf.osaaf.org, DNS:aaf-service, DNS:aaf-service.onap, DNS:aaf-locate, DNS:aaf-locate.onap, DNS:aaf-oauth, DNS:aaf-oauth.onap, DNS:aaf-token, DNS:aaf-token.onap, DNS:aaf-introspect, DNS:aaf-introspect.onap, DNS:aaf-gui, DNS:aaf-gui.onap, DNS:aaf-cm, DNS:aaf-cm.onap, DNS:aaf-hello, DNS:aaf-hello.onap
Certificate is to be certified until Jun 22 02:50:09 2023 GMT (365 days)

Write out database with 1 new entries
Data Base Updated
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95924150790 (0x1655866206)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=ONAP, OU=OSAAF, CN=intermediateCA_9
        Validity
            Not Before: Jun 22 02:50:09 2022 GMT
            Not After : Jun 22 02:50:09 2023 GMT
        Subject: C=US, O=ONAP, OU=aaf@aaf.osaaf.org, OU=OSAAF, CN=aaf.osaaf.org
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:09:3a:1f:63:aa:86:73:20:f0:d7:98:03:13:
                    0d:a1:a3:ea:3f:36:40:31:10:f6:07:5f:f2:ac:26:
                    86:f0:09:4b:29:42:20:6c:85:a6:c2:ce:a5:b4:18:
                    91:53:30:d8:ca:f1:72:5c:74:6a:a5:ad:ca:cb:16:
                    dd:b5:59:55:d5:df:59:c5:f3:b0:fe:a0:b0:d0:61:
                    ec:69:e6:3f:89:00:2e:83:b0:1c:82:13:23:b0:f7:
                    cf:3d:4c:10:23:74:33:ba:90:c1:b2:cf:a2:eb:c6:
                    ac:3a:9a:b7:d3:5e:9d:fa:31:cf:8f:ec:a8:9a:38:
                    80:64:ca:a8:f4:df:68:85:62:22:71:7f:7a:49:05:
                    31:55:c7:d5:b8:35:30:0b:5e:04:b7:d8:b7:f2:c8:
                    bc:34:09:a1:1c:6a:b8:21:d5:b7:7e:9b:b1:5d:a5:
                    50:cb:e3:8b:6d:c5:ed:34:08:bf:e5:6c:c1:e6:3d:
                    08:87:28:33:0b:58:3c:69:7e:ec:8e:50:23:3f:e9:
                    a2:0c:27:d8:41:e6:19:af:a8:0e:8e:58:c8:d3:c7:
                    ba:a3:9e:e0:2e:83:f0:74:9b:a7:d7:f6:96:6a:fc:
                    2b:5e:a5:65:fe:a9:97:40:f7:4b:cd:a8:40:1d:3a:
                    c6:04:12:48:00:41:35:e2:2d:73:2d:29:2e:55:96:
                    89:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            Netscape Cert Type: 
                SSL Client, SSL Server
            Netscape Comment: 
                OpenSSL Generated Server Certificate
            X509v3 Subject Key Identifier: 
                4E:17:63:20:E7:6D:15:1B:00:FF:9D:2C:C6:58:0C:F1:4D:E1:35:88
            X509v3 Authority Key Identifier: 
                keyid:81:F7:99:5B:10:B9:C8:8C:DE:F3:52:5E:EA:4E:69:A0:43:3E:AC:DD
                DirName:/OU=OSAAF/O=ONAP/C=US
                serial:07

            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Subject Alternative Name: 
                DNS:aaf.osaaf.org, DNS:aaf.osaaf.org, DNS:service.aaf.osaaf.org, DNS:locate.aaf.osaaf.org, DNS:oauth.aaf.osaaf.org, DNS:token.aaf.osaaf.org, DNS:introspect.aaf.osaaf.org, DNS:gui.aaf.osaaf.org, DNS:cm.aaf.osaaf.org, DNS:hello.aaf.osaaf.org, DNS:aaf-service, DNS:aaf-service.onap, DNS:aaf-locate, DNS:aaf-locate.onap, DNS:aaf-oauth, DNS:aaf-oauth.onap, DNS:aaf-token, DNS:aaf-token.onap, DNS:aaf-introspect, DNS:aaf-introspect.onap, DNS:aaf-gui, DNS:aaf-gui.onap, DNS:aaf-cm, DNS:aaf-cm.onap, DNS:aaf-hello, DNS:aaf-hello.onap
    Signature Algorithm: sha256WithRSAEncryption
         79:72:5d:f9:9c:30:24:f1:d2:55:16:84:5f:3e:4e:fa:d4:7b:
         65:61:1f:ae:f9:97:99:aa:da:0f:41:30:9d:4e:5c:f8:e0:50:
         2f:16:29:07:83:94:b7:43:14:7e:2a:a6:67:c7:e9:e0:e5:05:
         73:2b:bc:e9:c8:8d:b0:80:5f:40:fc:e6:d2:92:8c:73:21:6a:
         61:e8:c2:0d:a9:f3:65:a1:e2:0f:f8:9a:3f:be:e2:5e:93:34:
         9b:71:3b:b1:08:82:72:71:80:17:b6:71:7e:75:fa:cb:be:9d:
         48:78:32:f5:c2:95:db:b6:26:cc:d3:2e:42:38:0d:68:5b:4b:
         88:db:49:84:a1:6a:2a:55:c2:22:bb:14:86:3a:30:19:6d:bb:
         ad:18:21:7d:b3:b3:d3:ec:2c:a0:17:bf:aa:fe:1f:e5:45:67:
         34:25:2f:6f:35:1e:c7:92:0f:03:6b:a5:7c:44:05:ee:90:fb:
         76:37:78:ca:35:cc:c5:15:7a:3c:03:1e:4d:ac:6a:09:69:05:
         8c:d5:97:6e:50:48:df:e1:1b:f2:80:a3:d8:7e:97:7f:e9:1e:
         4b:49:2e:b7:90:c0:e2:dd:9a:be:ab:9e:9c:21:08:e9:a5:01:
         37:ac:e6:97:3f:14:1b:96:aa:5e:52:3f:69:0a:3b:81:4a:f4:
         13:e3:d0:6f
-----BEGIN CERTIFICATE-----

lqpeUj9pCjuBSvQT49Bv
-----END CERTIFICATE-----
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95924150790 (0x1655866206)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=ONAP, OU=OSAAF, CN=intermediateCA_9
        Validity
            Not Before: Jun 22 02:50:09 2022 GMT
            Not After : Jun 22 02:50:09 2023 GMT
        Subject: C=US, O=ONAP, OU=aaf@aaf.osaaf.org, OU=OSAAF, CN=aaf.osaaf.org
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:09:3a:1f:63:aa:86:73:20:f0:d7:98:03:13:
                    0d:a1:a3:ea:3f:36:40:31:10:f6:07:5f:f2:ac:26:
                    86:f0:09:4b:29:42:20:6c:85:a6:c2:ce:a5:b4:18:
                    91:53:30:d8:ca:f1:72:5c:74:6a:a5:ad:ca:cb:16:
                    dd:b5:59:55:d5:df:59:c5:f3:b0:fe:a0:b0:d0:61:
                    ec:69:e6:3f:89:00:2e:83:b0:1c:82:13:23:b0:f7:
                    cf:3d:4c:10:23:74:33:ba:90:c1:b2:cf:a2:eb:c6:
                    ac:3a:9a:b7:d3:5e:9d:fa:31:cf:8f:ec:a8:9a:38:
                    80:64:ca:a8:f4:df:68:85:62:22:71:7f:7a:49:05:
                    31:55:c7:d5:b8:35:30:0b:5e:04:b7:d8:b7:f2:c8:
                    bc:34:09:a1:1c:6a:b8:21:d5:b7:7e:9b:b1:5d:a5:
                    50:cb:e3:8b:6d:c5:ed:34:08:bf:e5:6c:c1:e6:3d:
                    08:87:28:33:0b:58:3c:69:7e:ec:8e:50:23:3f:e9:
                    a2:0c:27:d8:41:e6:19:af:a8:0e:8e:58:c8:d3:c7:
                    ba:a3:9e:e0:2e:83:f0:74:9b:a7:d7:f6:96:6a:fc:
                    2b:5e:a5:65:fe:a9:97:40:f7:4b:cd:a8:40:1d:3a:
                    c6:04:12:48:00:41:35:e2:2d:73:2d:29:2e:55:96:
                    89:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            Netscape Cert Type: 
                SSL Client, SSL Server
            Netscape Comment: 
                OpenSSL Generated Server Certificate
            X509v3 Subject Key Identifier: 
                4E:17:63:20:E7:6D:15:1B:00:FF:9D:2C:C6:58:0C:F1:4D:E1:35:88
            X509v3 Authority Key Identifier: 
                keyid:81:F7:99:5B:10:B9:C8:8C:DE:F3:52:5E:EA:4E:69:A0:43:3E:AC:DD
                DirName:/OU=OSAAF/O=ONAP/C=US
                serial:07

            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Subject Alternative Name: 
                DNS:aaf.osaaf.org, DNS:aaf.osaaf.org, DNS:service.aaf.osaaf.org, DNS:locate.aaf.osaaf.org, DNS:oauth.aaf.osaaf.org, DNS:token.aaf.osaaf.org, DNS:introspect.aaf.osaaf.org, DNS:gui.aaf.osaaf.org, DNS:cm.aaf.osaaf.org, DNS:hello.aaf.osaaf.org, DNS:aaf-service, DNS:aaf-service.onap, DNS:aaf-locate, DNS:aaf-locate.onap, DNS:aaf-oauth, DNS:aaf-oauth.onap, DNS:aaf-token, DNS:aaf-token.onap, DNS:aaf-introspect, DNS:aaf-introspect.onap, DNS:aaf-gui, DNS:aaf-gui.onap, DNS:aaf-cm, DNS:aaf-cm.onap, DNS:aaf-hello, DNS:aaf-hello.onap
    Signature Algorithm: sha256WithRSAEncryption
         79:72:5d:f9:9c:30:24:f1:d2:55:16:84:5f:3e:4e:fa:d4:7b:
         65:61:1f:ae:f9:97:99:aa:da:0f:41:30:9d:4e:5c:f8:e0:50:
         2f:16:29:07:83:94:b7:43:14:7e:2a:a6:67:c7:e9:e0:e5:05:
         73:2b:bc:e9:c8:8d:b0:80:5f:40:fc:e6:d2:92:8c:73:21:6a:
         61:e8:c2:0d:a9:f3:65:a1:e2:0f:f8:9a:3f:be:e2:5e:93:34:
         9b:71:3b:b1:08:82:72:71:80:17:b6:71:7e:75:fa:cb:be:9d:
         48:78:32:f5:c2:95:db:b6:26:cc:d3:2e:42:38:0d:68:5b:4b:
         88:db:49:84:a1:6a:2a:55:c2:22:bb:14:86:3a:30:19:6d:bb:
         ad:18:21:7d:b3:b3:d3:ec:2c:a0:17:bf:aa:fe:1f:e5:45:67:
         34:25:2f:6f:35:1e:c7:92:0f:03:6b:a5:7c:44:05:ee:90:fb:
         76:37:78:ca:35:cc:c5:15:7a:3c:03:1e:4d:ac:6a:09:69:05:
         8c:d5:97:6e:50:48:df:e1:1b:f2:80:a3:d8:7e:97:7f:e9:1e:
         4b:49:2e:b7:90:c0:e2:dd:9a:be:ab:9e:9c:21:08:e9:a5:01:
         37:ac:e6:97:3f:14:1b:96:aa:5e:52:3f:69:0a:3b:81:4a:f4:
         13:e3:d0:6f
-----BEGIN CERTIFICATE-----

lqpeUj9pCjuBSvQT49Bv
-----END CERTIFICATE-----
Bag Attributes
    localKeyID: 02 89 19 5C 56 C9 C0 E1 F7 27 DE 36 00 72 F6 9F 85 ED 78 FA 
    friendlyName: aaf_intermediate_9
subject=C = US, O = ONAP, OU = OSAAF, CN = intermediateCA_9

issuer=OU = OSAAF, O = ONAP, C = US

-----BEGIN CERTIFICATE-----

BmMXTvouW+Flyvcw/0oTcfN0biDIt0mCkZ5CQVjfGL9DTOYteR5hw+k=
-----END CERTIFICATE-----
Generated ONAP Test AAF certs
aaf_locator_container=oom
aaf_release=Frankfurt
aaf_locator_container_ns=onap
aaf_locator_name=%NS.%N
aaf_locate_url=https://aaf-locate.onap:8095
cadi_longitude=-72.0
cadi_latitude=38.0
aaf_locator_public_fqdn=aaf.osaaf.org
cadi_x509_issuers=CN=intermediateCA_1,
aaf_env=DEV
aaf_locator_name.oom=%CNS.%NS.%N
2022-06-22T02:50:17.332+0000 INIT [cadi] https.protocols set by cadi_protocols in CADI Properties
2022-06-22T02:50:17.427+0000 INIT [cadi] jdk.tls.client.protocols set from Default Protocols
Writing to /opt/app/osaaf/local
Writing file /opt/app/osaaf/local/org.osaaf.aaf.keyfile
2022-06-22T02:50:29.729+0000 INIT [cadi] RegistrationProperty: default_container='oom'
2022-06-22T02:50:29.729+0000 INIT [cadi] RegistrationProperty: public_port='null'
2022-06-22T02:50:29.933+0000 INIT [cadi] RegistrationProperty: hostname='onap-aaf-service-65b576ff8b-hsx84'
2022-06-22T02:50:29.934+0000 INIT [cadi] RegistrationProperty: public_fqdn='aaf.osaaf.org'
2022-06-22T02:50:29.934+0000 INIT [cadi] RegistrationProperty: default_name='%NS.%N'
2022-06-22T02:50:30.026+0000 INIT [cadi] RegistrationProperty: latitude='38.0'
2022-06-22T02:50:30.027+0000 INIT [cadi] RegistrationProperty: longitude='-72.0'
2022-06-22T02:50:30.027+0000 INIT [cadi] RegistrationProperty: public_hostname(overloaded by )='aaf.osaaf.org'
2022-06-22T02:50:30.028+0000 INIT [cadi] RegistrationProperty: default_fqdn='onap-aaf-service-65b576ff8b-hsx84'
2022-06-22T02:50:30.028+0000 INIT [cadi] RegistrationProperty: default_container_ns='onap'
Passed in Truststore is /opt/app/osaaf/public/truststoreONAPall.jks
New Truststore is /opt/app/osaaf/local/truststoreONAPall.jks
Reading /tmp/tmp.ahcEDF
Reading /opt/app/aaf_config/local/aaf.props
Reading /opt/app/aaf_config/local/initialConfig.props
Creating new /opt/app/osaaf/local/org.osaaf.aaf.location.props
Creating new /opt/app/osaaf/local/org.osaaf.aaf.cred.props
Creating new /opt/app/osaaf/local/org.osaaf.aaf.props
2022-06-22T02:50:34.628+0000: Trans Info
         REMOTE Get Configuration 4997.71ms
 
Created AAF Initial Configurations
Initialization Complete
