# Properties passed in
HOSTNAME=onap-aaf-gui-74cdcdd85b-5xptg
aaf_locator_container=oom
aaf_release=Frankfurt
aaf_locator_container_ns=onap
aaf_locator_name=%NS.%N
aaf_locate_url=https://aaf-locate.onap:8095
cadi_longitude=-72.0
cadi_latitude=38.0
aaf_locator_public_fqdn=aaf.osaaf.org
cadi_x509_issuers=CN=intermediateCA_1,
aaf_env=DEV
aaf_locator_name.oom=%CNS.%NS.%N
Set Identities
Clean up directory /opt/app/osaaf/local
ls: /opt/app/osaaf/local: No such file or directory
bin/agent.sh: line 90: /opt/app/osaaf/local/VERSION: No such file or directory
Decode
Setup ONAP Test CAs and Signers
Bootstrap Creation of Keystore from Signer
Bootstrap AAF Certificate
bootstrap.sh: line 89: [: aaf.osaaf.org: integer expression expected
Generating a RSA private key
...............................................................+++++
.............................................+++++
writing new private key to '/tmp/aaf.bootstrap.key'
-----
Sign it
Using configuration from openssl.conf
Check that the request matches the signature
Signature ok
Certificate Details:
        Serial Number: 96234459760 (0x1668055270)
        Validity
            Not Before: Nov 10 04:41:12 2022 GMT
            Not After : Nov 10 04:41:12 2023 GMT
        Subject:
            countryName               = US
            organizationName          = ONAP
            organizationalUnitName    = aaf@aaf.osaaf.org
            organizationalUnitName    = OSAAF
            commonName                = aaf.osaaf.org
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            Netscape Cert Type: 
                SSL Client, SSL Server
            Netscape Comment: 
                OpenSSL Generated Server Certificate
            X509v3 Subject Key Identifier: 
                1E:9B:2C:29:57:50:97:8A:6E:EA:0B:64:08:B8:7D:1E:17:81:33:96
            X509v3 Authority Key Identifier: 
                keyid:81:F7:99:5B:10:B9:C8:8C:DE:F3:52:5E:EA:4E:69:A0:43:3E:AC:DD
                DirName:/OU=OSAAF/O=ONAP/C=US
                serial:07

            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Subject Alternative Name: 
                DNS:aaf.osaaf.org, DNS:aaf.osaaf.org, DNS:service.aaf.osaaf.org, DNS:locate.aaf.osaaf.org, DNS:oauth.aaf.osaaf.org, DNS:token.aaf.osaaf.org, DNS:introspect.aaf.osaaf.org, DNS:gui.aaf.osaaf.org, DNS:cm.aaf.osaaf.org, DNS:hello.aaf.osaaf.org, DNS:aaf-service, DNS:aaf-service.onap, DNS:aaf-locate, DNS:aaf-locate.onap, DNS:aaf-oauth, DNS:aaf-oauth.onap, DNS:aaf-token, DNS:aaf-token.onap, DNS:aaf-introspect, DNS:aaf-introspect.onap, DNS:aaf-gui, DNS:aaf-gui.onap, DNS:aaf-cm, DNS:aaf-cm.onap, DNS:aaf-hello, DNS:aaf-hello.onap
Certificate is to be certified until Nov 10 04:41:12 2023 GMT (365 days)

Write out database with 1 new entries
Data Base Updated
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96234459760 (0x1668055270)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=ONAP, OU=OSAAF, CN=intermediateCA_9
        Validity
            Not Before: Nov 10 04:41:12 2022 GMT
            Not After : Nov 10 04:41:12 2023 GMT
        Subject: C=US, O=ONAP, OU=aaf@aaf.osaaf.org, OU=OSAAF, CN=aaf.osaaf.org
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:55:f8:b6:1d:8f:da:b3:ee:69:48:ef:68:83:
                    e3:08:29:53:d2:01:6a:ac:86:41:01:3f:46:0d:6b:
                    c4:2f:f2:10:05:f0:a0:b6:5e:d0:22:07:35:67:05:
                    bf:56:1e:ba:7b:82:31:bf:0f:8d:e2:51:49:17:7b:
                    b2:97:31:fb:36:a9:c1:c1:fe:e5:09:1e:26:6d:f6:
                    b9:0c:65:0d:10:55:0b:b0:1b:76:b2:d9:d4:d4:f8:
                    3d:48:12:7d:1c:2d:9b:d8:ae:8f:31:7b:e7:ff:ec:
                    77:6e:b2:2d:de:44:be:26:be:29:cc:7f:00:ac:b2:
                    2d:2c:52:a5:33:62:ef:dd:c5:55:61:c0:85:af:ae:
                    e9:eb:aa:be:7a:21:e5:27:fd:32:f2:b5:6b:01:c6:
                    c9:d4:c4:76:de:74:ac:6a:da:83:fb:60:8b:52:5e:
                    a9:40:08:6d:6d:50:4d:e7:46:f9:98:e2:69:45:83:
                    e9:d1:55:8c:92:1b:03:41:e4:0a:bd:73:bf:1e:9d:
                    7f:e5:78:e9:c1:41:ed:f6:74:96:0a:19:c7:ba:47:
                    a1:1e:da:6c:8a:83:6e:ca:65:14:c1:b5:b8:d1:09:
                    1d:65:25:7e:83:16:57:cd:81:b2:e8:55:cc:bb:0a:
                    53:ee:27:42:23:c4:38:d9:d6:76:f6:59:a3:0c:94:
                    d5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            Netscape Cert Type: 
                SSL Client, SSL Server
            Netscape Comment: 
                OpenSSL Generated Server Certificate
            X509v3 Subject Key Identifier: 
                1E:9B:2C:29:57:50:97:8A:6E:EA:0B:64:08:B8:7D:1E:17:81:33:96
            X509v3 Authority Key Identifier: 
                keyid:81:F7:99:5B:10:B9:C8:8C:DE:F3:52:5E:EA:4E:69:A0:43:3E:AC:DD
                DirName:/OU=OSAAF/O=ONAP/C=US
                serial:07

            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Subject Alternative Name: 
                DNS:aaf.osaaf.org, DNS:aaf.osaaf.org, DNS:service.aaf.osaaf.org, DNS:locate.aaf.osaaf.org, DNS:oauth.aaf.osaaf.org, DNS:token.aaf.osaaf.org, DNS:introspect.aaf.osaaf.org, DNS:gui.aaf.osaaf.org, DNS:cm.aaf.osaaf.org, DNS:hello.aaf.osaaf.org, DNS:aaf-service, DNS:aaf-service.onap, DNS:aaf-locate, DNS:aaf-locate.onap, DNS:aaf-oauth, DNS:aaf-oauth.onap, DNS:aaf-token, DNS:aaf-token.onap, DNS:aaf-introspect, DNS:aaf-introspect.onap, DNS:aaf-gui, DNS:aaf-gui.onap, DNS:aaf-cm, DNS:aaf-cm.onap, DNS:aaf-hello, DNS:aaf-hello.onap
    Signature Algorithm: sha256WithRSAEncryption
         0d:3d:81:37:95:2c:7d:e0:ee:b5:f9:80:8b:de:57:f7:db:b5:
         08:d6:7d:cd:56:91:31:b3:e2:88:c4:e6:74:7b:f6:ae:7a:6f:
         ab:48:b5:69:c7:a8:ac:76:ad:85:8e:0e:df:6b:64:be:91:3a:
         d9:2d:36:d6:aa:9a:73:06:6d:b7:01:75:4c:8c:da:b5:fc:89:
         ba:c2:07:08:96:de:70:7a:a0:10:e6:8f:d7:a1:aa:4c:5a:14:
         b8:bb:13:02:87:34:0c:89:7b:48:fa:51:e2:09:5e:4e:58:42:
         83:4b:c7:64:23:26:57:02:8b:d4:58:40:2b:89:2e:05:7c:59:
         59:35:f4:dc:b4:69:1e:3d:b5:8e:bf:72:4e:de:bd:01:12:4c:
         db:ee:ad:42:8e:0b:f5:5b:a0:3b:0f:0c:33:0c:4b:f3:a1:d9:
         9b:9b:1a:94:b4:e7:79:9e:66:d4:d8:ad:ad:28:e5:d2:4c:9f:
         98:c1:db:de:5f:8d:d8:70:07:dd:09:8c:d1:73:5b:e5:30:02:
         11:7a:37:af:cd:e0:53:43:c2:c0:84:e4:6f:17:78:81:aa:7f:
         6e:a4:69:7f:71:5d:0f:af:b3:0b:3b:29:51:a2:ab:4e:5f:2b:
         23:ca:a3:d1:73:d2:32:c6:d5:29:f2:ad:0c:0c:6d:f6:d4:a0:
         2d:da:20:7a
-----BEGIN CERTIFICATE-----

xtUp8q0MDG321KAt2iB6
-----END CERTIFICATE-----
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96234459760 (0x1668055270)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=ONAP, OU=OSAAF, CN=intermediateCA_9
        Validity
            Not Before: Nov 10 04:41:12 2022 GMT
            Not After : Nov 10 04:41:12 2023 GMT
        Subject: C=US, O=ONAP, OU=aaf@aaf.osaaf.org, OU=OSAAF, CN=aaf.osaaf.org
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:55:f8:b6:1d:8f:da:b3:ee:69:48:ef:68:83:
                    e3:08:29:53:d2:01:6a:ac:86:41:01:3f:46:0d:6b:
                    c4:2f:f2:10:05:f0:a0:b6:5e:d0:22:07:35:67:05:
                    bf:56:1e:ba:7b:82:31:bf:0f:8d:e2:51:49:17:7b:
                    b2:97:31:fb:36:a9:c1:c1:fe:e5:09:1e:26:6d:f6:
                    b9:0c:65:0d:10:55:0b:b0:1b:76:b2:d9:d4:d4:f8:
                    3d:48:12:7d:1c:2d:9b:d8:ae:8f:31:7b:e7:ff:ec:
                    77:6e:b2:2d:de:44:be:26:be:29:cc:7f:00:ac:b2:
                    2d:2c:52:a5:33:62:ef:dd:c5:55:61:c0:85:af:ae:
                    e9:eb:aa:be:7a:21:e5:27:fd:32:f2:b5:6b:01:c6:
                    c9:d4:c4:76:de:74:ac:6a:da:83:fb:60:8b:52:5e:
                    a9:40:08:6d:6d:50:4d:e7:46:f9:98:e2:69:45:83:
                    e9:d1:55:8c:92:1b:03:41:e4:0a:bd:73:bf:1e:9d:
                    7f:e5:78:e9:c1:41:ed:f6:74:96:0a:19:c7:ba:47:
                    a1:1e:da:6c:8a:83:6e:ca:65:14:c1:b5:b8:d1:09:
                    1d:65:25:7e:83:16:57:cd:81:b2:e8:55:cc:bb:0a:
                    53:ee:27:42:23:c4:38:d9:d6:76:f6:59:a3:0c:94:
                    d5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            Netscape Cert Type: 
                SSL Client, SSL Server
            Netscape Comment: 
                OpenSSL Generated Server Certificate
            X509v3 Subject Key Identifier: 
                1E:9B:2C:29:57:50:97:8A:6E:EA:0B:64:08:B8:7D:1E:17:81:33:96
            X509v3 Authority Key Identifier: 
                keyid:81:F7:99:5B:10:B9:C8:8C:DE:F3:52:5E:EA:4E:69:A0:43:3E:AC:DD
                DirName:/OU=OSAAF/O=ONAP/C=US
                serial:07

            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Subject Alternative Name: 
                DNS:aaf.osaaf.org, DNS:aaf.osaaf.org, DNS:service.aaf.osaaf.org, DNS:locate.aaf.osaaf.org, DNS:oauth.aaf.osaaf.org, DNS:token.aaf.osaaf.org, DNS:introspect.aaf.osaaf.org, DNS:gui.aaf.osaaf.org, DNS:cm.aaf.osaaf.org, DNS:hello.aaf.osaaf.org, DNS:aaf-service, DNS:aaf-service.onap, DNS:aaf-locate, DNS:aaf-locate.onap, DNS:aaf-oauth, DNS:aaf-oauth.onap, DNS:aaf-token, DNS:aaf-token.onap, DNS:aaf-introspect, DNS:aaf-introspect.onap, DNS:aaf-gui, DNS:aaf-gui.onap, DNS:aaf-cm, DNS:aaf-cm.onap, DNS:aaf-hello, DNS:aaf-hello.onap
    Signature Algorithm: sha256WithRSAEncryption
         0d:3d:81:37:95:2c:7d:e0:ee:b5:f9:80:8b:de:57:f7:db:b5:
         08:d6:7d:cd:56:91:31:b3:e2:88:c4:e6:74:7b:f6:ae:7a:6f:
         ab:48:b5:69:c7:a8:ac:76:ad:85:8e:0e:df:6b:64:be:91:3a:
         d9:2d:36:d6:aa:9a:73:06:6d:b7:01:75:4c:8c:da:b5:fc:89:
         ba:c2:07:08:96:de:70:7a:a0:10:e6:8f:d7:a1:aa:4c:5a:14:
         b8:bb:13:02:87:34:0c:89:7b:48:fa:51:e2:09:5e:4e:58:42:
         83:4b:c7:64:23:26:57:02:8b:d4:58:40:2b:89:2e:05:7c:59:
         59:35:f4:dc:b4:69:1e:3d:b5:8e:bf:72:4e:de:bd:01:12:4c:
         db:ee:ad:42:8e:0b:f5:5b:a0:3b:0f:0c:33:0c:4b:f3:a1:d9:
         9b:9b:1a:94:b4:e7:79:9e:66:d4:d8:ad:ad:28:e5:d2:4c:9f:
         98:c1:db:de:5f:8d:d8:70:07:dd:09:8c:d1:73:5b:e5:30:02:
         11:7a:37:af:cd:e0:53:43:c2:c0:84:e4:6f:17:78:81:aa:7f:
         6e:a4:69:7f:71:5d:0f:af:b3:0b:3b:29:51:a2:ab:4e:5f:2b:
         23:ca:a3:d1:73:d2:32:c6:d5:29:f2:ad:0c:0c:6d:f6:d4:a0:
         2d:da:20:7a
-----BEGIN CERTIFICATE-----

xtUp8q0MDG321KAt2iB6
-----END CERTIFICATE-----
Bag Attributes
    localKeyID: 02 89 19 5C 56 C9 C0 E1 F7 27 DE 36 00 72 F6 9F 85 ED 78 FA 
    friendlyName: aaf_intermediate_9
subject=C = US, O = ONAP, OU = OSAAF, CN = intermediateCA_9

issuer=OU = OSAAF, O = ONAP, C = US

-----BEGIN CERTIFICATE-----

BmMXTvouW+Flyvcw/0oTcfN0biDIt0mCkZ5CQVjfGL9DTOYteR5hw+k=
-----END CERTIFICATE-----
Generated ONAP Test AAF certs
aaf_locator_container=oom
aaf_release=Frankfurt
aaf_locator_container_ns=onap
aaf_locator_name=%NS.%N
aaf_locate_url=https://aaf-locate.onap:8095
cadi_longitude=-72.0
cadi_latitude=38.0
aaf_locator_public_fqdn=aaf.osaaf.org
cadi_x509_issuers=CN=intermediateCA_1,
aaf_env=DEV
aaf_locator_name.oom=%CNS.%NS.%N
2022-11-10T04:41:18.155+0000 INIT [cadi] https.protocols set by cadi_protocols in CADI Properties
2022-11-10T04:41:18.157+0000 INIT [cadi] jdk.tls.client.protocols set from Default Protocols
Writing to /opt/app/osaaf/local
Writing file /opt/app/osaaf/local/org.osaaf.aaf.keyfile
2022-11-10T04:41:26.155+0000 INIT [cadi] RegistrationProperty: default_container='oom'
2022-11-10T04:41:26.156+0000 INIT [cadi] RegistrationProperty: public_port='null'
2022-11-10T04:41:26.257+0000 INIT [cadi] RegistrationProperty: hostname='onap-aaf-gui-74cdcdd85b-5xptg'
2022-11-10T04:41:26.257+0000 INIT [cadi] RegistrationProperty: public_fqdn='aaf.osaaf.org'
2022-11-10T04:41:26.257+0000 INIT [cadi] RegistrationProperty: default_name='%NS.%N'
2022-11-10T04:41:26.258+0000 INIT [cadi] RegistrationProperty: latitude='38.0'
2022-11-10T04:41:26.258+0000 INIT [cadi] RegistrationProperty: longitude='-72.0'
2022-11-10T04:41:26.258+0000 INIT [cadi] RegistrationProperty: public_hostname(overloaded by )='aaf.osaaf.org'
2022-11-10T04:41:26.259+0000 INIT [cadi] RegistrationProperty: default_fqdn='onap-aaf-gui-74cdcdd85b-5xptg'
2022-11-10T04:41:26.259+0000 INIT [cadi] RegistrationProperty: default_container_ns='onap'
Passed in Truststore is /opt/app/osaaf/public/truststoreONAPall.jks
New Truststore is /opt/app/osaaf/local/truststoreONAPall.jks
Reading /tmp/tmp.pMbIjE
Reading /opt/app/aaf_config/local/aaf.props
Reading /opt/app/aaf_config/local/initialConfig.props
Creating new /opt/app/osaaf/local/org.osaaf.aaf.location.props
Creating new /opt/app/osaaf/local/org.osaaf.aaf.cred.props
Creating new /opt/app/osaaf/local/org.osaaf.aaf.props
2022-11-10T04:41:29.455+0000: Trans Info
         REMOTE Get Configuration 3397.1929ms
 
Created AAF Initial Configurations
Initialization Complete
