# Properties passed in
HOSTNAME=onap-aaf-service-df9c94fd8-zgw2k
aaf_locator_container=oom
aaf_release=Frankfurt
aaf_locator_container_ns=onap
aaf_locator_name=%NS.%N
aaf_locate_url=https://aaf-locate.onap:8095
cadi_longitude=-72.0
cadi_latitude=38.0
aaf_locator_public_fqdn=aaf.osaaf.org
cadi_x509_issuers=CN=intermediateCA_1,
aaf_env=DEV
aaf_locator_name.oom=%CNS.%NS.%N
Set Identities
Clean up directory /opt/app/osaaf/local
ls: /opt/app/osaaf/local: No such file or directory
bin/agent.sh: line 90: /opt/app/osaaf/local/VERSION: No such file or directory
Decode
Setup ONAP Test CAs and Signers
Bootstrap Creation of Keystore from Signer
Bootstrap AAF Certificate
bootstrap.sh: line 89: [: aaf.osaaf.org: integer expression expected
Generating a RSA private key
.........................+++++
.................................................+++++
writing new private key to '/tmp/aaf.bootstrap.key'
-----
Sign it
Using configuration from openssl.conf
Check that the request matches the signature
Signature ok
Certificate Details:
        Serial Number: 96240768785 (0x1668659711)
        Validity
            Not Before: Nov 17 04:35:13 2022 GMT
            Not After : Nov 17 04:35:13 2023 GMT
        Subject:
            countryName               = US
            organizationName          = ONAP
            organizationalUnitName    = aaf@aaf.osaaf.org
            organizationalUnitName    = OSAAF
            commonName                = aaf.osaaf.org
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            Netscape Cert Type: 
                SSL Client, SSL Server
            Netscape Comment: 
                OpenSSL Generated Server Certificate
            X509v3 Subject Key Identifier: 
                52:EC:C2:D6:3F:08:7E:AF:0E:C8:E3:54:9B:93:25:DE:80:99:03:00
            X509v3 Authority Key Identifier: 
                keyid:81:F7:99:5B:10:B9:C8:8C:DE:F3:52:5E:EA:4E:69:A0:43:3E:AC:DD
                DirName:/OU=OSAAF/O=ONAP/C=US
                serial:07

            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Subject Alternative Name: 
                DNS:aaf.osaaf.org, DNS:aaf.osaaf.org, DNS:service.aaf.osaaf.org, DNS:locate.aaf.osaaf.org, DNS:oauth.aaf.osaaf.org, DNS:token.aaf.osaaf.org, DNS:introspect.aaf.osaaf.org, DNS:gui.aaf.osaaf.org, DNS:cm.aaf.osaaf.org, DNS:hello.aaf.osaaf.org, DNS:aaf-service, DNS:aaf-service.onap, DNS:aaf-locate, DNS:aaf-locate.onap, DNS:aaf-oauth, DNS:aaf-oauth.onap, DNS:aaf-token, DNS:aaf-token.onap, DNS:aaf-introspect, DNS:aaf-introspect.onap, DNS:aaf-gui, DNS:aaf-gui.onap, DNS:aaf-cm, DNS:aaf-cm.onap, DNS:aaf-hello, DNS:aaf-hello.onap
Certificate is to be certified until Nov 17 04:35:13 2023 GMT (365 days)

Write out database with 1 new entries
Data Base Updated
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96240768785 (0x1668659711)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=ONAP, OU=OSAAF, CN=intermediateCA_9
        Validity
            Not Before: Nov 17 04:35:13 2022 GMT
            Not After : Nov 17 04:35:13 2023 GMT
        Subject: C=US, O=ONAP, OU=aaf@aaf.osaaf.org, OU=OSAAF, CN=aaf.osaaf.org
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:00:73:78:d0:72:e2:e5:1f:f5:57:08:c2:4f:
                    9d:b1:28:47:b0:0c:4f:6d:d1:9a:00:e2:e3:f3:d6:
                    c2:c8:4f:b2:ce:6e:09:41:19:05:e3:a4:b9:3f:a6:
                    d2:ba:06:d6:b8:4b:97:18:f5:d5:f7:67:bc:23:22:
                    88:84:ee:7e:41:5d:2f:82:e3:90:64:4d:4e:59:48:
                    1f:4d:01:56:cb:70:5d:54:a1:15:a3:6b:59:8d:cb:
                    10:58:b8:a9:2f:fa:0e:e8:b9:8e:0c:45:b3:c1:a1:
                    ed:00:45:e1:1e:4b:3e:2a:85:0e:19:f6:4c:df:f1:
                    4c:c7:22:fb:bd:84:43:b3:09:4c:7a:d6:86:c8:45:
                    22:a0:e2:07:46:3c:fe:a8:9e:6f:4a:94:0f:6e:30:
                    fd:ef:ac:b6:f1:27:c6:e9:50:b4:0f:e0:04:0c:63:
                    3a:1d:df:cb:76:2e:6b:ce:7f:be:6f:20:21:95:7b:
                    ca:4a:c5:3b:e8:d0:e3:2a:0e:fc:f7:90:9d:4e:80:
                    c0:53:d6:18:35:2c:97:6a:4e:fc:a1:6c:e5:9c:84:
                    48:85:e3:2a:20:39:b1:66:a9:10:d8:8d:f1:2f:76:
                    99:d9:38:b2:9c:13:a5:b8:31:9d:0b:00:40:a2:b0:
                    ab:ac:e4:ef:99:c5:dd:b1:c5:b9:fc:7d:c9:de:21:
                    e0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            Netscape Cert Type: 
                SSL Client, SSL Server
            Netscape Comment: 
                OpenSSL Generated Server Certificate
            X509v3 Subject Key Identifier: 
                52:EC:C2:D6:3F:08:7E:AF:0E:C8:E3:54:9B:93:25:DE:80:99:03:00
            X509v3 Authority Key Identifier: 
                keyid:81:F7:99:5B:10:B9:C8:8C:DE:F3:52:5E:EA:4E:69:A0:43:3E:AC:DD
                DirName:/OU=OSAAF/O=ONAP/C=US
                serial:07

            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Subject Alternative Name: 
                DNS:aaf.osaaf.org, DNS:aaf.osaaf.org, DNS:service.aaf.osaaf.org, DNS:locate.aaf.osaaf.org, DNS:oauth.aaf.osaaf.org, DNS:token.aaf.osaaf.org, DNS:introspect.aaf.osaaf.org, DNS:gui.aaf.osaaf.org, DNS:cm.aaf.osaaf.org, DNS:hello.aaf.osaaf.org, DNS:aaf-service, DNS:aaf-service.onap, DNS:aaf-locate, DNS:aaf-locate.onap, DNS:aaf-oauth, DNS:aaf-oauth.onap, DNS:aaf-token, DNS:aaf-token.onap, DNS:aaf-introspect, DNS:aaf-introspect.onap, DNS:aaf-gui, DNS:aaf-gui.onap, DNS:aaf-cm, DNS:aaf-cm.onap, DNS:aaf-hello, DNS:aaf-hello.onap
    Signature Algorithm: sha256WithRSAEncryption
         4e:e8:8d:1d:99:4f:1a:4a:41:18:0d:e4:a4:1e:97:30:0d:58:
         03:03:94:6e:3a:a0:15:37:d1:f6:7a:36:e7:a3:96:92:63:45:
         95:a0:83:e3:c1:09:d8:dc:ec:d4:11:cd:c8:6f:be:bc:fe:41:
         7d:d8:b9:50:d1:08:f8:67:53:df:07:02:cc:98:fc:d0:92:6d:
         71:ca:53:ad:3e:05:a4:67:39:5b:16:df:ab:78:96:1f:bf:4c:
         11:25:33:c6:ff:26:b9:27:ab:18:47:28:59:55:fb:01:3c:39:
         5f:ca:5a:d7:07:95:c1:dc:96:37:e6:36:8d:5d:96:53:ef:cf:
         95:f7:83:57:ff:83:8b:ab:a4:22:c2:b1:8c:6c:02:84:0a:38:
         be:47:db:0d:67:d8:ae:4d:8e:89:88:20:ea:be:b7:27:27:8e:
         5c:46:5c:87:e4:5f:26:2b:bc:78:ec:6d:6b:34:af:de:3a:7b:
         fd:8a:c1:b9:c7:80:37:80:9b:85:5c:9f:b6:33:39:36:f0:d9:
         2a:45:0f:0b:51:1d:af:bd:ed:0e:41:87:5c:e4:71:d9:3c:19:
         47:19:a4:ae:c9:98:ce:29:e1:5d:f6:02:34:09:aa:93:e7:8f:
         dc:d2:40:12:03:0a:87:9b:f5:e0:45:7f:8c:ef:b9:d6:14:ee:
         29:6a:be:d5
-----BEGIN CERTIFICATE-----

m/XgRX+M77nWFO4par7V
-----END CERTIFICATE-----
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96240768785 (0x1668659711)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=ONAP, OU=OSAAF, CN=intermediateCA_9
        Validity
            Not Before: Nov 17 04:35:13 2022 GMT
            Not After : Nov 17 04:35:13 2023 GMT
        Subject: C=US, O=ONAP, OU=aaf@aaf.osaaf.org, OU=OSAAF, CN=aaf.osaaf.org
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:00:73:78:d0:72:e2:e5:1f:f5:57:08:c2:4f:
                    9d:b1:28:47:b0:0c:4f:6d:d1:9a:00:e2:e3:f3:d6:
                    c2:c8:4f:b2:ce:6e:09:41:19:05:e3:a4:b9:3f:a6:
                    d2:ba:06:d6:b8:4b:97:18:f5:d5:f7:67:bc:23:22:
                    88:84:ee:7e:41:5d:2f:82:e3:90:64:4d:4e:59:48:
                    1f:4d:01:56:cb:70:5d:54:a1:15:a3:6b:59:8d:cb:
                    10:58:b8:a9:2f:fa:0e:e8:b9:8e:0c:45:b3:c1:a1:
                    ed:00:45:e1:1e:4b:3e:2a:85:0e:19:f6:4c:df:f1:
                    4c:c7:22:fb:bd:84:43:b3:09:4c:7a:d6:86:c8:45:
                    22:a0:e2:07:46:3c:fe:a8:9e:6f:4a:94:0f:6e:30:
                    fd:ef:ac:b6:f1:27:c6:e9:50:b4:0f:e0:04:0c:63:
                    3a:1d:df:cb:76:2e:6b:ce:7f:be:6f:20:21:95:7b:
                    ca:4a:c5:3b:e8:d0:e3:2a:0e:fc:f7:90:9d:4e:80:
                    c0:53:d6:18:35:2c:97:6a:4e:fc:a1:6c:e5:9c:84:
                    48:85:e3:2a:20:39:b1:66:a9:10:d8:8d:f1:2f:76:
                    99:d9:38:b2:9c:13:a5:b8:31:9d:0b:00:40:a2:b0:
                    ab:ac:e4:ef:99:c5:dd:b1:c5:b9:fc:7d:c9:de:21:
                    e0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            Netscape Cert Type: 
                SSL Client, SSL Server
            Netscape Comment: 
                OpenSSL Generated Server Certificate
            X509v3 Subject Key Identifier: 
                52:EC:C2:D6:3F:08:7E:AF:0E:C8:E3:54:9B:93:25:DE:80:99:03:00
            X509v3 Authority Key Identifier: 
                keyid:81:F7:99:5B:10:B9:C8:8C:DE:F3:52:5E:EA:4E:69:A0:43:3E:AC:DD
                DirName:/OU=OSAAF/O=ONAP/C=US
                serial:07

            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Subject Alternative Name: 
                DNS:aaf.osaaf.org, DNS:aaf.osaaf.org, DNS:service.aaf.osaaf.org, DNS:locate.aaf.osaaf.org, DNS:oauth.aaf.osaaf.org, DNS:token.aaf.osaaf.org, DNS:introspect.aaf.osaaf.org, DNS:gui.aaf.osaaf.org, DNS:cm.aaf.osaaf.org, DNS:hello.aaf.osaaf.org, DNS:aaf-service, DNS:aaf-service.onap, DNS:aaf-locate, DNS:aaf-locate.onap, DNS:aaf-oauth, DNS:aaf-oauth.onap, DNS:aaf-token, DNS:aaf-token.onap, DNS:aaf-introspect, DNS:aaf-introspect.onap, DNS:aaf-gui, DNS:aaf-gui.onap, DNS:aaf-cm, DNS:aaf-cm.onap, DNS:aaf-hello, DNS:aaf-hello.onap
    Signature Algorithm: sha256WithRSAEncryption
         4e:e8:8d:1d:99:4f:1a:4a:41:18:0d:e4:a4:1e:97:30:0d:58:
         03:03:94:6e:3a:a0:15:37:d1:f6:7a:36:e7:a3:96:92:63:45:
         95:a0:83:e3:c1:09:d8:dc:ec:d4:11:cd:c8:6f:be:bc:fe:41:
         7d:d8:b9:50:d1:08:f8:67:53:df:07:02:cc:98:fc:d0:92:6d:
         71:ca:53:ad:3e:05:a4:67:39:5b:16:df:ab:78:96:1f:bf:4c:
         11:25:33:c6:ff:26:b9:27:ab:18:47:28:59:55:fb:01:3c:39:
         5f:ca:5a:d7:07:95:c1:dc:96:37:e6:36:8d:5d:96:53:ef:cf:
         95:f7:83:57:ff:83:8b:ab:a4:22:c2:b1:8c:6c:02:84:0a:38:
         be:47:db:0d:67:d8:ae:4d:8e:89:88:20:ea:be:b7:27:27:8e:
         5c:46:5c:87:e4:5f:26:2b:bc:78:ec:6d:6b:34:af:de:3a:7b:
         fd:8a:c1:b9:c7:80:37:80:9b:85:5c:9f:b6:33:39:36:f0:d9:
         2a:45:0f:0b:51:1d:af:bd:ed:0e:41:87:5c:e4:71:d9:3c:19:
         47:19:a4:ae:c9:98:ce:29:e1:5d:f6:02:34:09:aa:93:e7:8f:
         dc:d2:40:12:03:0a:87:9b:f5:e0:45:7f:8c:ef:b9:d6:14:ee:
         29:6a:be:d5
-----BEGIN CERTIFICATE-----

m/XgRX+M77nWFO4par7V
-----END CERTIFICATE-----
Bag Attributes
    localKeyID: 02 89 19 5C 56 C9 C0 E1 F7 27 DE 36 00 72 F6 9F 85 ED 78 FA 
    friendlyName: aaf_intermediate_9
subject=C = US, O = ONAP, OU = OSAAF, CN = intermediateCA_9

issuer=OU = OSAAF, O = ONAP, C = US

-----BEGIN CERTIFICATE-----

BmMXTvouW+Flyvcw/0oTcfN0biDIt0mCkZ5CQVjfGL9DTOYteR5hw+k=
-----END CERTIFICATE-----
Generated ONAP Test AAF certs
aaf_locator_container=oom
aaf_release=Frankfurt
aaf_locator_container_ns=onap
aaf_locator_name=%NS.%N
aaf_locate_url=https://aaf-locate.onap:8095
cadi_longitude=-72.0
cadi_latitude=38.0
aaf_locator_public_fqdn=aaf.osaaf.org
cadi_x509_issuers=CN=intermediateCA_1,
aaf_env=DEV
aaf_locator_name.oom=%CNS.%NS.%N
2022-11-17T04:35:19.824+0000 INIT [cadi] https.protocols set by cadi_protocols in CADI Properties
2022-11-17T04:35:19.917+0000 INIT [cadi] jdk.tls.client.protocols set from Default Protocols
Writing to /opt/app/osaaf/local
Writing file /opt/app/osaaf/local/org.osaaf.aaf.keyfile
2022-11-17T04:35:30.117+0000 INIT [cadi] RegistrationProperty: default_container='oom'
2022-11-17T04:35:30.118+0000 INIT [cadi] RegistrationProperty: public_port='null'
2022-11-17T04:35:30.220+0000 INIT [cadi] RegistrationProperty: hostname='onap-aaf-service-df9c94fd8-zgw2k'
2022-11-17T04:35:30.221+0000 INIT [cadi] RegistrationProperty: public_fqdn='aaf.osaaf.org'
2022-11-17T04:35:30.221+0000 INIT [cadi] RegistrationProperty: default_name='%NS.%N'
2022-11-17T04:35:30.221+0000 INIT [cadi] RegistrationProperty: latitude='38.0'
2022-11-17T04:35:30.222+0000 INIT [cadi] RegistrationProperty: longitude='-72.0'
2022-11-17T04:35:30.222+0000 INIT [cadi] RegistrationProperty: public_hostname(overloaded by )='aaf.osaaf.org'
2022-11-17T04:35:30.318+0000 INIT [cadi] RegistrationProperty: default_fqdn='onap-aaf-service-df9c94fd8-zgw2k'
2022-11-17T04:35:30.318+0000 INIT [cadi] RegistrationProperty: default_container_ns='onap'
Passed in Truststore is /opt/app/osaaf/public/truststoreONAPall.jks
New Truststore is /opt/app/osaaf/local/truststoreONAPall.jks
Reading /tmp/tmp.MBdeoJ
Reading /opt/app/aaf_config/local/aaf.props
Reading /opt/app/aaf_config/local/initialConfig.props
Creating new /opt/app/osaaf/local/org.osaaf.aaf.location.props
Creating new /opt/app/osaaf/local/org.osaaf.aaf.cred.props
Creating new /opt/app/osaaf/local/org.osaaf.aaf.props
2022-11-17T04:35:34.022+0000: Trans Info
         REMOTE Get Configuration 4098.805ms
 
Created AAF Initial Configurations
Initialization Complete
